Privacy Notice | Omaze UK
What does this notice cover?
This notice describes how Omaze, Inc. (“Omaze”, “we”, or “us”) will make use of your data when you access omaze.co.uk (the “Omaze UK Site”), participate in Omaze UK Site draws, or contact us. We are the controllers for the personal data we collect in this context.
This notice also describes your data protection rights, including a right to object to some of the processing that Omaze carries out for the Omaze UK Site. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section.
Please note that we are a United States company and the personal data you provide will be stored in the USA and other countries outside the EEA or the UK.
What information do we collect?
We collect and process personal data about you when you interact with us or the Omaze UK Site, and when you participate in our Omaze UK Site draws. This includes:
- Where you set up an account or complete a transaction:
- date of birth
- contact information, such as postal address, email address, and telephone number;
- your payment and delivery details for any purchase, including billing addresses and payment card details (note that your payment card details are processed by our third-party payment vendor);
- Where you interact with our Omaze UK Site or marketing communications:
- your marketing preferences, including any consents you have given us (where applicable);
- information related to the browser or device you use to access our Omaze UK Site;
- Where you voluntarily participate in any surveys:
- survey information such as shopping habits, age, gender, income, or other survey data you may choose to provide us if you participate;
- Where you win a draw:
- any personal data necessary to grant the prize (e.g., information included in any tax or ownership transfer documents or as part of necessary background checks);
- photographs, video recordings, and information when you choose to provide that information.
How do we use this information, and what is the legal basis for this use?
We detail below the purposes for which we use this information, how we use it and who we share it with, and the legal basis for that use.
At a high level, personal data may be shared with third party service providers, who will process it on behalf of Omaze for various operational purposes (such as website hosting, maintenance, card processing services, email communication services, and the like).
Personal data of winners may be shared for purposes of fulfilling the prize, including as part of a necessary background check or as part of preparing any required ownership documents. With permission, personal data for winners may also be shared publicly on the Omaze UK Site or other outlets, for the purposes of publicising who won the draws, including names, photographs, and videos.
More specifically, we process personal data related to the Omaze UK Site for the following purposes and legal bases:
- To fulfil a contract or take steps linked to a contract. Where you enter an Omaze UK Site draw, we will use your information:
- to verify your identity;
- to take payments;
- to communicate with you, including sending you automated service messages;
- to provide customer service;
- to draw winners; and
- to arrange the delivery or other provision of prizes for the winners of the draw.
- As required by Omaze to conduct our business and pursue our legitimate interests, we will use your information:
- to provide products and services you have requested;
- to help us monitor, improve, and protect our products, content, services, and the Omaze UK Site, both online and offline;
- to investigate and respond to any complaints received from you or from others, about the Omaze UK Site or our products or services;
- where you have transacted with us, to send you direct marketing (e.g. email or text message) in relation to our current activities, future events and draws. You can opt out of this marketing (i) at the time of the collection of your details, (ii) by using the links within the marketing communications or (iii) by contacting us;
- to personalise the Omaze UK Site, our products or services for you;
- to provide targeted advertising on the Omaze UK Site, selected partner sites and social networks;
- to process payment card details, payments and check the validity of the sort code, account number and card number you submit in order to prevent fraud (which is processed by our third party payment vendor);
- to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law;
- to provide the prize to winners;
- in connection with legal claims, compliance, regulatory, and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation);
- to invite individuals to take part in market research; and
- in connection with those cookies and similar technologies that are strictly necessary to make the Omaze UK Site function (which cookies we place in accordance with our Cookies Notice and the information provided to you when those technologies are used).
- Where you give us consent, we will use your information:
- where you have signed up to our mailing list, to send you direct marketing in relation to Omaze products and services;
- in connection with surveys, where you choose to participate in those surveys and choose to provide us any information;
- in connection with cookies and similar technologies that are not strictly necessary for Omaze UK Site to function, which technologies we may use to collect or receive information from your websites and elsewhere on the Internet and use that information to provide measurement services and target ads about Omaze (as further described in our Cookies Notice) and the information provided to you when those technologies are used;
- in connection with photographs, video recordings and information about you if you win a draw and choose to provide that information; and
- to use on other occasions the data for the purpose that we explain at that time we seek your consent.
- For purposes which are required by law, we may use your information:
- In response to requests from government or law enforcement authorities conducting an investigation or courts
Please note that if you post a comment to the Omaze UK Site or other social media sites, the information that you choose to post, including any personal data that you choose to post, may be available generally to the public.
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business.
Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws.
Please note that where information is transferred outside the UK/EEA, and where this is to a vendor in a country that is not subject to an adequacy decision by the EU Commission, this is done in order to enter you into the draw you have requested and to ensure your donation is processed and sent on to the relevant charity. In some cases, data may alternatively be adequately protected by EU Commission approved standard contractual clauses or a vendor’s Processor Binding Corporate Rules.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above.
What rights do I have?
You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller.
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we do not have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping.
To exercise any of these rights,you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred. This likely to be the Information Commissioner’s Office in the UK.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can get in touch at firstname.lastname@example.org, by writing to Omaze, Inc., 5735 W Adams Blvd, Los Angeles CA 90016, or by writing to Omaze UK Site Privacy Inquiries, 3rd Floor 1 Ashley Road, Altrincham, Cheshire, United Kingdom, WA14 2DT.
How long will you retain my data?
Where we process Omaze account data, we do this for as long as you are an active user of Omaze UK Sites and for 6 years after this.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data in connection with processing your contest entry, we keep the data for up to 6 years from your last interaction with us.