BackRaw Wins

Legal

Privacy Notice

Last updated: 7 May 2026 · Pre-launch version

This privacy notice explains how we collect, use, and protect the personal data you provide while Raw Wins is in its pre-launch phase. A fuller notice covering competition entries, payments, prize fulfilment, and account management will replace this one when the platform goes live.

1. Who we are

Raw Wins is operated by JCL Marketing Ltd (referred to below as “we”, “us”, or “Raw Wins”). For the personal data described in this notice, JCL Marketing Ltd is the data controller: we decide why and how your data is collected and used.

Registered office: United Kingdom.

Privacy queries: privacy@rawwins.co.uk

2. What data we collect at pre-launch

When you reserve early access on the coming-soon page, we collect:

  • Your full name
  • Your email address
  • Your mobile phone number
  • Your consent choices (whether you opted in to marketing)
  • Limited technical metadata: the page that referred you, your IP address, and your browser user-agent — used for fraud prevention and to understand where sign-ups come from.

We do not collect payment details, identity documents, age verification data, or location data during pre-launch. We do not knowingly collect data from anyone under 18.

3. Why we use it (purposes & lawful bases)

We use the data above for:

  • Creating your pre-launch account so you can sign in instantly when we go live. Lawful basis: performance of a contract you've asked us to enter into (UK GDPR Art 6(1)(b)).
  • Sending you launch news and competition alerts — only if you ticked the optional marketing opt-in. Lawful basis: your consent (UK GDPR Art 6(1)(a) / PECR Reg 22). You can withdraw consent at any time using the unsubscribe link in any email or by emailing us.
  • Site security and fraud prevention — keeping basic technical metadata so we can detect and block abusive sign-ups. Lawful basis: legitimate interests (UK GDPR Art 6(1)(f)) — running a secure service.
  • Meeting our legal obligations where a regulator or court requires us to retain or disclose data. Lawful basis: legal obligation (UK GDPR Art 6(1)(c)).

4. Who we share it with

We do not sell your data. We share it only with service providers who help us operate the platform, and only to the extent they need it:

  • Supabase — database and authentication hosting (data stored on UK/EU infrastructure where possible).
  • Vercel — website hosting and content delivery.
  • Email sending providers (e.g. SMTP services) — to deliver launch announcements and account emails.

These providers act as our data processors under written contracts that require them to protect your data and only use it on our instructions. We do not transfer your personal data outside the UK or European Economic Area without appropriate safeguards (e.g. UK Addendum to the EU Standard Contractual Clauses).

5. How long we keep it

  • Pre-launch sign-up details are kept until you ask us to delete them, until you close the account you create at launch, or until 24 months of inactivity — whichever is sooner.
  • Marketing consent records are kept for as long as we rely on the consent, plus a reasonable period afterwards to evidence that consent was validly obtained.
  • Technical security logs (IP, user-agent) are kept for up to 12 months.

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct data that is inaccurate or incomplete.
  • Eraseyour data (“right to be forgotten”) where the legal grounds for processing no longer apply.
  • Restrict or object to processing in certain circumstances.
  • Withdraw consent at any time for anything we do on the basis of your consent (e.g. marketing emails).
  • Data portability — receive your data in a structured, commonly used, machine-readable format.
  • Complainto the Information Commissioner's Office (ICO) if you believe we're mishandling your data — see ico.org.uk. We'd ask you to raise the concern with us first so we have a chance to put it right.

To exercise any of these rights, email privacy@rawwins.co.uk. We'll respond within one calendar month.

7. How we protect your data

We use industry-standard technical and organisational measures to keep your data safe — including TLS encryption in transit, encryption at rest on our database provider, role-based access controls, and short-lived authentication tokens. No system is 100% secure, but we work to limit the impact of any incident and will notify you and the ICO without undue delay if a breach affecting your data occurs.

8. Cookies

The pre-launch site uses only the cookies required to make it work — for example, an admin-only preview cookie and a session cookie if you sign in. We do not use third-party advertising, tracking, or analytics cookies on the coming-soon page.

9. Changes to this notice

We'll update this notice when Raw Wins launches and again whenever our practices change. The date at the top of this page reflects the most recent version. If a change materially affects how we use your data, we'll let you know by email before it takes effect.

10. Contact

JCL Marketing Ltd
Email: privacy@rawwins.co.uk