Your privacy is important to us. This policy explains how Find Competitions collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Find Competitions is a UK-based comparison platform for online competitions and giveaways. For the purposes of data protection law, Find Competitions is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us via our contact page.
We collect different types of information depending on how you use our site:
Information you provide to us
If you create an account, we collect your name, email address, and any other details you choose to provide. If you subscribe to a paid plan, payment information is processed securely by our payment provider (Stripe) and we do not store your full card details.
Information collected automatically
When you visit our site, we may automatically collect technical data including your IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and other diagnostic data. This information is collected through cookies and similar technologies (see Section 4 below).
We use your information for the following purposes and legal bases under UK GDPR:
- • To provide our service (contractual necessity) — operating your account, delivering dashboard analytics, and processing subscriptions.
- • To improve our website (legitimate interest) — analysing how visitors use our site so we can enhance the user experience and fix issues.
- • To send service communications (contractual necessity) — transactional emails such as account confirmations, password resets, and subscription updates.
- • Analytics and measurement (consent) — we use Google Analytics to understand website traffic and usage patterns. This is only activated when you provide consent via our cookie banner.
- • To prevent abuse (legitimate interest) — protecting our platform from fraud, spam, and security threats.
Cookies are small text files placed on your device when you visit our website. We use the following types of cookies:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| cookie_consent | Strictly necessary | Stores your cookie consent preference | 1 year |
| session | Strictly necessary | Maintains your logged-in session | 2 hours |
| XSRF-TOKEN | Strictly necessary | Prevents cross-site request forgery | 2 hours |
| _ga, _ga_* | Analytics (consent required) | Google Analytics — distinguishes unique users and tracks site usage | Up to 2 years |
Strictly necessary cookies are required for the website to function and cannot be disabled. Analytics cookies are only set when you click "Accept" on our cookie consent banner. You can change your preference at any time by clearing your browser cookies and revisiting the site.
We use Google Analytics 4, a web analytics service provided by Google LLC, to help us understand how visitors interact with our website. Google Analytics uses cookies to collect information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site.
Google Analytics data is processed by Google on servers that may be located outside the UK. Google operates under its own privacy policy and provides information about its data practices at policies.google.com/privacy. We have configured Google Analytics with IP anonymisation enabled and we do not share any personally identifiable information with Google through this service.
Google Analytics cookies are only placed on your device if you consent via our cookie banner. If you decline, no analytics data is collected. You can also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.
Our website contains links to third-party competition providers and other external websites. Once you click these links and leave our site, we have no control over those websites. We are not responsible for the privacy practices or content of those third-party sites and encourage you to read their privacy policies before providing any personal information.
We do not sell your personal data to third parties. We may share your data with the following categories of recipients, only to the extent necessary:
- • Payment processors — Stripe processes subscription payments on our behalf.
- • Analytics providers — Google Analytics (only with your consent) receives anonymised usage data.
- • Hosting providers — our infrastructure providers who store and process data on our behalf under appropriate data processing agreements.
- • Law enforcement — where we are legally required to do so.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Account data is retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Analytics data collected via Google Analytics is automatically deleted after 14 months.
We are committed to ensuring that your information is secure. We have implemented appropriate technical and organisational measures to safeguard the personal data we collect, including encryption of data in transit (TLS/SSL), secure password hashing, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Under the UK General Data Protection Regulation, you have the following rights in relation to your personal data:
- • Right of access — you can request a copy of the personal data we hold about you.
- • Right to rectification — you can ask us to correct inaccurate or incomplete data.
- • Right to erasure — you can ask us to delete your personal data in certain circumstances.
- • Right to restrict processing — you can ask us to limit how we use your data.
- • Right to data portability — you can request your data in a structured, commonly used format.
- • Right to object — you can object to processing based on legitimate interests.
- • Right to withdraw consent — where we rely on consent (e.g. analytics cookies), you can withdraw it at any time by clearing your cookies.
To exercise any of these rights, please contact us via our contact page. We will respond to your request within one month. If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.
We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
If you have any questions about this privacy policy or wish to exercise your data protection rights, please get in touch.
Last updated: 24 March 2026