Privacy notice

Controller: Kachi (update this with your legal entity and contact details before going live).

This notice is a template for EU/EEA users under GDPR. Have it reviewed by qualified counsel before production use.

What we collect

• Account: email address and a password hash.
• Competition entries: which competitions you entered, when, and the name, email, and phone number you submit for each entry (for winner contact).
• Technical: session cookie for logged-in users; local storage for cookie-banner consent.

Why we use it

To run this competition service, authenticate you, contact winners, and meet legal obligations.

Legal bases (GDPR)

• Performance of a contract (providing the service you sign up for).
• Legitimate interests (fraud prevention, security), where applicable.
• Consent where required (e.g. non-essential cookies or marketing — adjust if you add these).

Retention

Define how long you keep accounts and entry data. Delete or anonymise when no longer needed.

Your rights

You may have rights to access, rectify, erase, restrict processing, object, and data portability, and to lodge a complaint with a supervisory authority.

Transfers

If data leaves the EEA, describe safeguards (e.g. Standard Contractual Clauses).