Last updated: 27 April 2026
Who We Are
The Horsforth Local Lottery is promoted and managed by Horsforth Town Team C.I.C. (Company No. 14868791), a Community Interest Company registered in England and Wales. For the purposes of UK data protection law, Horsforth Town Team C.I.C. is the data controller. Our registered office is c/o The Old Kings Arms, The Green, Horsforth, Leeds, West Yorkshire, LS18 6BH.
What Information We Collect
We collect and process the following personal information depending on how you interact with the lottery.
Ticket purchasers
We do not collect personal data from ticket purchasers at the point of sale. Tickets are sold anonymously for cash by our retail partners. Individual ticket purchase records are held by those retailers and are not transmitted to us.
Prize winners
When you claim a prize, we collect your name, contact details (phone number and, where provided, email address), and a photograph. The photograph is used solely to verify prize redemptions with participating businesses. We also record the ticket number, prize amount, and draw date for our financial records.
Lottery subscribers (draw notifications)
If you sign up for draw result notifications, we collect your name, email address, and mobile phone number (depending on the notification channel you choose). We use Brevo to send email notifications and Amazon Web Services (AWS SNS) to send SMS notifications.
Participating businesses and retailers
We collect business name, contact name, email address, phone number, and bank details (for sterling reimbursements). We also collect consent to display the business name and logo on our website and promotional materials.
Website visitors
We use essential cookies to make the website function correctly. We do not use advertising cookies or tracking pixels. See our Cookie Policy for details.
Why We Process Your Data
We process personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR).
- Legitimate interest: To operate the lottery, verify winners, prevent fraud, and reimburse participating businesses. We have assessed that these interests do not override the rights and freedoms of individuals.
- Consent: To send draw result notifications (email or SMS) and to display business information on our website and promotional materials. Consent may be withdrawn at any time.
- Legal obligation: To maintain financial records as required by our lottery licence issued by Leeds City Council, and to comply with the Gambling Act 2005 and applicable financial regulations.
How We Share Your Data
Winner photographs and names are shared with participating businesses solely for the purpose of validating Horsforth Pound redemptions. This information is shared on a confidential basis and businesses are instructed not to display it publicly.
We use the following third-party processors.
- Brevo (Sendinblue): used to send transactional email communications, including draw result notifications.
- Amazon Web Services (AWS SNS): used to send SMS draw result notifications to subscribers who have opted in.
- Leeds City Council: our licensing authority. We are required to provide certain records to Leeds City Council as a condition of our lottery licence.
- The Gambling Commission: the national regulator for gambling in Great Britain. We may be required to disclose records to the Gambling Commission if requested.
We do not sell, rent, or share personal data with any third party for marketing purposes. We do not transfer personal data outside the United Kingdom.
How Long We Keep Your Data
- Winner records: retained for 6 years from the date of the draw to comply with financial record-keeping obligations.
- Business and retailer records: retained for the duration of participation and for 6 years after withdrawal.
- Subscriber records: retained until you unsubscribe or withdraw consent.
- Website server logs: retained for a maximum of 90 days.
Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data.
- Access: to request a copy of the personal data we hold about you.
- Rectification: to request that inaccurate data be corrected.
- Erasure: to request deletion of your data, where there is no overriding legal reason for us to retain it.
- Portability: to receive your data in a structured, machine-readable format.
- Objection: to object to processing based on legitimate interest.
- Withdrawal of consent: where processing is based on consent, to withdraw that consent at any time.
To exercise any of these rights, please use the contact form and select "Privacy / data request" as the subject. We will respond within one calendar month.
The Supervisory Authority
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.
Cookies and analytics
We use Google Analytics (GA4) to understand how visitors use our site. This helps us see which pages are popular, where visitors come from, and how to improve the site. The data is anonymous and not used for advertising.
Google Analytics sets cookies to identify return visitors. We only set these cookies if you click Accept on the cookie banner that appears on your first visit. You can decline at any time, or change your mind via the “Manage cookies” link in the footer.
If you’d like more detail on how Google handles this data, their privacy policy is at policies.google.com/privacy.
Changes to This Policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be highlighted on the website.