Skip to main content

Legal

Sweepzy Privacy Policy

Last updated:

In plain English

We collect the minimum data needed to run Sweepzy. We never sell your data. UK-based hosting. Stripe handles payments — we never see your card. Email us at privacy@sweepzy.co.uk if you have concerns. The rest of this page is the formal version, with a table of contents below so you can jump to the bit you care about.

1. Data we collect

We collect information you provide directly to us, such as when you create an account, enter competitions, post in forums, or contact us for support.

  • Account information (email, username)
  • Competition entries and wins
  • Forum posts and comments
  • Usage data and preferences

2. How we use it

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process your competition entries and track your wins
  • Send you notifications about competitions and account activity
  • Respond to your comments and questions
  • Analyze usage patterns to improve user experience

3. Who we share data with

We do not sell your personal information. We may share your information only in the following circumstances:

  • With your consent
  • To comply with legal obligations
  • To protect our rights and prevent fraud
  • With service providers who assist in our operations

Confirmed sub-processors and service providers we use to run Sweepzy:

  • Stripe — payment processing for Premium subscriptions. Stripe is PCI-DSS Level 1 certified. Sweepzy never sees or stores your card details. See Stripe's privacy policy.
  • Supabase — authentication and database hosting. See Supabase's privacy policy.

4. Cookies and tracking

We use cookies and similar technologies to provide, protect, and improve our services. You can manage your cookie preferences through your browser settings.

For the full breakdown of which cookies we use, why, and how to disable them, see our Cookie Policy.

5. Data security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

6. Your UK GDPR rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Export your data

To exercise any of these rights, email privacy@sweepzy.co.uk. You can also export or delete your data directly in-app from Settings → Account. We aim to respond to UK GDPR requests within one calendar month, as required by law.

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we remove your profile, tracked entries and personal information within 30 days. Some records may be retained for longer where we are legally required to do so (for example, payment records for HMRC/tax purposes).

8. International transfers

Where any of our service providers process data outside the UK or EEA, we rely on appropriate safeguards under UK GDPR — such as UK adequacy regulations or the UK International Data Transfer Agreement (IDTA) — to protect your data.

9. Children and age

Sweepzy is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children under 18. If you believe a child has registered an account, contact us at privacy@sweepzy.co.uk and we will delete the account.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.

The “Last updated” date at the top of this page reflects the most recent meaningful revision.

11. Contact

If you have any questions about this Privacy Policy, please contact us at privacy@sweepzy.co.uk.

For general queries, use the Sweepzy contact page. To read more about who runs Sweepzy, see the about Sweepzy page. For questions about the product itself, our Sweepzy FAQ answers the most common ones.