Privacy Policy

This privacy policy explains how RaffleLabs ("we", "us", "our") collects, uses, and protects your personal information when you visit our website or get in touch with us about our services. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

RaffleLabs is a brand of OCRO LTD, a company registered in England and Wales under company number 12774706, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your information, you can contact us at info@rafflelabs.co.uk.

2. The information we collect

We may collect and process the following information about you:

• Contact details you provide through our enquiry forms, such as your first and last name, email address, telephone number, company name, and website.
• Enquiry details — any information you include in a message to us about your business or requirements.
• Technical and usage data — such as your IP address, browser type, device information, and how you interact with our website, collected automatically where applicable.

We do not knowingly collect special category data through this website. Please do not send us sensitive personal information unless we specifically request it.

3. How we collect your information

• Directly from you — when you complete an enquiry or contact form, email us, or otherwise communicate with us.
• Automatically — through cookies and similar technologies when you use our website (see "Cookies" below).

4. How we use your information

We use your personal data for the following purposes:

• To respond to your enquiry and provide you with information about our services.
• To provide, manage, and improve our services to you.
• To communicate with you about your enquiry or any services you have requested.
• To maintain our business records and meet our legal and regulatory obligations.
• To improve and secure our website.

Our lawful bases for processing your data are:

• Consent — where you have agreed to us contacting you about your enquiry.
• Legitimate interests — to respond to enquiries, run and grow our business, and keep our website secure, provided your rights do not override those interests.
• Contract — where processing is necessary to take steps at your request before entering into, or to perform, a contract with you.
• Legal obligation — where we are required to process your data to comply with the law.

5. Sharing your information

We do not sell your personal data. We may share it with trusted third parties who help us operate our business and deliver our services, including IT and hosting providers, and payment and funding partners where relevant to your enquiry. These parties act as our processors and are only permitted to use your data on our instructions and in line with this policy.

We may also disclose your information where required to do so by law, or to protect our rights, property, or safety, or those of others.

6. International transfers

Where any of our providers process data outside the UK, we take steps to ensure your data is protected by appropriate safeguards, such as UK-approved standard contractual clauses or an adequacy decision.

7. How long we keep your information

We keep your personal data only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. Enquiry data that does not lead to an ongoing relationship is typically held for up to 24 months before being deleted or anonymised.

8. Your rights

Under data protection law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Object to or request restriction of our processing.
• Request the transfer of your data (data portability).
• Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, please contact us at info@rafflelabs.co.uk. We will respond within the timeframes required by law.

9. Cookies

Our website may use cookies and similar technologies to function correctly and to help us understand how visitors use the site. You can control or disable cookies through your browser settings, although some parts of the site may not work as intended if you do.

10. Data security

We have appropriate technical and organisational measures in place to protect your personal data against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their privacy policies.

12. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date.

13. How to contact us & complaints

If you have any questions, concerns, or requests regarding this policy or your personal data, please contact us at info@rafflelabs.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, at ico.org.uk. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us in the first instance.