Privacy Policy

1. Introduction

Welcome to Bluefundr ("we", "our" or "us"). We are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our platform to run or take part in a club lotto, membership, fundraising competition or facility booking.

2. Who is responsible for your data

Bluefundr is the data controller for the account you hold with us and for the operation of the platform.

3. Information we collect

Personal information

When you create an account or take part in an activity, we may collect:

• Name and contact information (email, phone number).
• Address information where needed for verification.
• Payment information (processed securely by Stripe).
• Identity verification documents when required for clubs collecting money.

Activity data

• Competition entries and predictions.
• Club lotto entries, including recurring entry mandates that renew for each draw.
• Membership records where you join a club, and any family or youth details relevant to a plan.
• Facility bookings you make.
• Payment history, transaction records, and prize or fundraising information.

Technical information

• IP addresses and device information.
• Browser type and version.
• Usage data and analytics.
• Cookies (for authentication and payment processing only).

4. How we use your information

We use your information to:

• Provide services: process entries, memberships and bookings, handle payments, run draws, and support prize distribution.
• Verify identity: meet legal requirements and prevent fraud.
• Communicate: send important updates, results and service messages.
• Improve the platform: analyse usage patterns to improve the experience.
• Legal compliance: meet regulatory requirements and resolve disputes.

Legal basis for processing

Under GDPR we process your data on the following grounds:

• Contract performance: account information, entries, memberships, bookings and payment processing needed to provide our services.
• Legal obligation: identity verification, financial records and regulatory compliance.
• Legitimate interest: platform security, fraud prevention and service improvement.

5. Information sharing

We may share your information with:

Service providers

• Stripe: for secure payment processing.
• Email services: for sending notifications and updates.
• Analytics providers: for platform improvement (anonymised data only).

Clubs and organisers

When you join a club, enter its competition or lotto, or book its facility, the relevant club receives the information it needs to run that activity and communicate with you, such as your name and contact details. The club uses that information as its own controller.

Legal requirements

We may disclose information when required by law, court order, or to protect our rights and the safety of our users.

6. Data security

We use industry-standard security measures, including:

• SSL encryption for all data transmission.
• Secure servers with regular security updates.
• Access controls and staff training.
• Regular security monitoring.

7. Your rights

Under GDPR and other privacy laws, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete information.
• Erasure: request deletion of your data (subject to legal requirements).
• Portability: receive your data in a commonly used format.
• Object: opt out of certain data processing activities.
• Withdraw consent: revoke consent for optional data processing.

Where a club is the controller of your data (for example your membership record), you may need to exercise some of these rights with the club directly. We will help where we can.

8. Cookies and tracking

We use cookies and similar technologies to remember your login preferences, allow core platform functionality such as payments and authentication, and keep the platform secure and free from fraud. You can control cookies through your browser settings, though some features may not work properly if cookies are disabled.

9. Data retention

We retain your information for as long as necessary to provide our services and maintain your account, comply with legal and regulatory requirements, resolve disputes and enforce our agreements, and prevent fraud. Account data is typically retained for 7 years after account closure for legal and regulatory compliance.

10. International transfers

Your data may be processed in countries outside your own. Where that happens we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, and recognised certification schemes and codes of conduct.

11. Children's privacy

Our platform is not intended for users under 16 years of age. Paid competitions and club lotto are strictly for users aged 18 and over. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website, sending email notifications to registered users, and displaying a prominent notice on the platform. Continued use of our services after changes take effect constitutes acceptance of the updated policy.