Privacy & cookies

Who is responsible for your data

FordMax is the data controller for the information described here. If you have any question about your data, or want to make a request, contact us at info@fordmax.co.uk or by post at FordMax, PO Box 000, Yourtown, AB1 2CD.

What we collect

• When you enter a competition: your email address, your name if you give one, your Facebook name or profile link if you choose to give one, the tickets you bought and the numbers allocated, your answer to the skill question, and the IP address the entry came from.
• When you enter by post: the name, address and contact details written on your postcard, which we record against your ticket numbers.
• When you comment: the name and comment you submit, and the IP address it came from.
• When you pay: your payment is handled by PayPal. We never see or store your card details — we receive only a payment reference, the amount, and whether it succeeded.
• When you browse: standard server logs kept by our hosting provider, and a single session cookie (see cookies below).

Why we use it, and our lawful basis

• To run the competition you entered — allocating ticket numbers, emailing your confirmation, running the draw and awarding the prize. Lawful basis: performance of a contract with you.
• To publish results — we publish the winning ticket number and the winner's first name. Lawful basis: legitimate interests in running draws transparently. Tell us if you would rather not be named and we will publish the number only.
• To keep competitions fair and the site working — using IP addresses to prevent fraud, spam and abuse. Lawful basis: legitimate interests.
• To meet our legal duties — keeping records of transactions. Lawful basis: legal obligation.

We do not use your details for marketing, and we do not sell or rent your data to anyone.

Who we share it with

• PayPal — to take and confirm payment. PayPal is a separate data controller; see PayPal's own privacy notice.
• Our hosting and email provider (Hostinger) — who store the site, database and mailbox on our behalf.
• Google Fonts — page fonts are loaded from Google's servers, which means your browser's request (including your IP address) reaches Google when you view a page.
• Anyone we are legally required to share with — for example, in response to a lawful request.

Winners' first names and ticket numbers are published publicly on this site and our social channels.

How long we keep it

• Entry, order and ticket records: up to 6 years after the competition, because they are financial records.
• Comments: until you or we remove them.
• IP addresses used for spam and fraud checks: a short period, then deleted or overwritten.

Your rights

Under UK data protection law you can ask us to: give you a copy of the personal data we hold about you; correct it if it is wrong; delete it; restrict or object to how we use it; or provide it in a portable format. Where we rely on legitimate interests, you can object and we will stop unless we have compelling grounds to continue.

One limit worth knowing: if you ask us to delete your entry details before a draw takes place, we may be unable to keep you in that draw, and we still have to keep the minimum transaction record the law requires.

To make a request, email info@fordmax.co.uk. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

This site uses one cookie, and only when it is needed:

• fordmax_session — a strictly necessary session cookie. It keeps your place while you are entering a competition or posting a comment, and it powers the security check that protects forms from being submitted by other websites. It expires when you close your browser.

We do not use advertising, analytics or tracking cookies, and we do not profile you or track you across other websites. Because the only cookie we set is strictly necessary for a service you asked for, we do not need to ask for your consent to it — but you can block cookies in your browser settings if you prefer, though entering a competition will not work without it.

Keeping it safe

The site is served over HTTPS, entry details are stored in a database that is not publicly accessible, admin access is password protected, and card details never touch our servers. No system is perfectly secure, but we take reasonable steps to protect your information.

Children

Our competitions are for over-18s only and this site is not intended for children. We do not knowingly collect data from anyone under 18.

Changes to this notice

If we change how we handle your data, we will update this page and the "last updated" date above.

Terms & competition rules See live competitions