Last updated: 27 April 2026
Who We Are
The Horsforth Local Lottery is promoted and managed by Horsforth Town Team C.I.C. (Company No. 14868791), a Community Interest Company registered in England and Wales. For the purposes of UK data protection law, Horsforth Town Team C.I.C. is the data controller. Our registered office is c/o The Old Kings Arms, The Green, Horsforth, Leeds, West Yorkshire, LS18 6BH.
What Information We Collect
We collect and process the following personal information depending on how you interact with the lottery.
Ticket purchasers
We do not collect personal data from ticket purchasers at the point of sale. Tickets are sold anonymously for cash by our retail partners. Individual ticket purchase records are held by those retailers and are not transmitted to us.
Prize winners
When you claim a prize, we collect your name, contact details (phone number and, where provided, email address), and a photograph. The photograph is used solely to verify prize redemptions with participating businesses. We also record the ticket number, prize amount, and draw date for our financial records.
Lottery subscribers (draw notifications)
If you sign up for draw result notifications, we collect your name, email address, and mobile phone number (depending on the notification channel you choose). We use Brevo to send email notifications and Amazon Web Services (AWS SNS) to send SMS notifications.
Participating businesses and retailers
We collect business name, contact name, email address, phone number, and bank details (for sterling reimbursements). We also collect consent to display the business name and logo on our website and promotional materials.
Website visitors
We use essential cookies to make the website function correctly. We also use Google Analytics and the Meta Pixel for measurement and advertising, but only after you click Accept on the cookie banner. If you decline, neither tool runs. See our Cookie Policy for the full list and the "Cookies, analytics and advertising" section further down this page for what each tool does.
Why We Process Your Data
We process personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR).
- Legitimate interest: To operate the lottery, verify winners, prevent fraud, and reimburse participating businesses. We have assessed that these interests do not override the rights and freedoms of individuals.
- Consent: To send draw result notifications (email or SMS) and to display business information on our website and promotional materials. Consent may be withdrawn at any time.
- Legal obligation: To maintain financial records as required by our lottery licence issued by Leeds City Council, and to comply with the Gambling Act 2005 and applicable financial regulations.
How We Share Your Data
Winner photographs and names are shared with participating businesses solely for the purpose of validating Horsforth Pound redemptions. This information is shared on a confidential basis and businesses are instructed not to display it publicly.
We use the following third-party processors.
- Brevo (Sendinblue): used to send transactional email communications, including draw result notifications.
- Amazon Web Services (AWS SNS): used to send SMS draw result notifications to subscribers who have opted in.
- Google (Google Analytics 4): used to measure how visitors use the site. Only active after you accept the cookie banner. Data is anonymised and not used for advertising. See the section below for detail.
- Meta Platforms Inc. (Meta Pixel on Facebook and Instagram): used to measure the performance of our adverts and to build audiences of past visitors so we can show them further adverts on Facebook and Instagram. Only active after you accept the cookie banner. See the section below for detail.
- Leeds City Council: our licensing authority. We are required to provide certain records to Leeds City Council as a condition of our lottery licence.
- The Gambling Commission: the national regulator for gambling in Great Britain. We may be required to disclose records to the Gambling Commission if requested.
We do not sell, rent, or share personal data with any third party for marketing purposes, beyond the measurement and advertising tools listed above which only run with your consent. Personal data we hold in our own records is not transferred outside the United Kingdom; Google and Meta may process the data their tools collect in countries outside the United Kingdom under their own published safeguards.
How Long We Keep Your Data
- Winner records: retained for 6 years from the date of the draw to comply with financial record-keeping obligations.
- Business and retailer records: retained for the duration of participation and for 6 years after withdrawal.
- Subscriber records: retained until you unsubscribe or withdraw consent.
- Website server logs: retained for a maximum of 90 days.
Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data.
- Access: to request a copy of the personal data we hold about you.
- Rectification: to request that inaccurate data be corrected.
- Erasure: to request deletion of your data, where there is no overriding legal reason for us to retain it.
- Portability: to receive your data in a structured, machine-readable format.
- Objection: to object to processing based on legitimate interest.
- Withdrawal of consent: where processing is based on consent, to withdraw that consent at any time.
To exercise any of these rights, please use the contact form and select "Privacy / data request" as the subject. We will respond within one calendar month.
The Supervisory Authority
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.
Cookies, analytics and advertising
We use two optional measurement and advertising tools. Both load only after you click Accept on the cookie banner that appears on your first visit. The lawful basis for both is your consent. You can decline at any time, or change your mind via the “Manage cookies” link in the footer, which clears the stored decision and shows the banner again.
Google Analytics 4. Helps us see which pages are popular, where visitors come from, and how to improve the site. IP addresses are anonymised and the data is not used for advertising. Google handles the data under its own privacy policy at policies.google.com/privacy.
Meta Pixel. A small piece of code from Meta Platforms Inc., the company that runs Facebook and Instagram. The Pixel lets us measure how well our adverts on Facebook and Instagram are working, and it lets us build audiences of people who have visited this site so we can show them further adverts on those platforms. When the Pixel is active it shares with Meta the page you are viewing, your IP address, basic browser and device information, and the action you took (for example, visiting a page or starting the subscriber registration form). Meta acts as an independent data controller for the data the Pixel collects and may combine it with information it already holds about you from your Facebook or Instagram account. Meta handles this data under its own privacy policy at facebook.com/privacy/policy, and explains the Pixel specifically at facebook.com/business/help/742478679120153. You can manage how Meta uses this kind of data in your own Meta ad preferences.
Changes to This Policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be highlighted on the website.