Last updated: 1 November 2026
This policy explains what personal data Cash Run collects when you use cashrun.co.uk, enter our draws or follow us on social media, how we use it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
Cash Run Limited (company number 17314258) is the data controller for your personal data. Registered office: Suite 6, The Workshop, Wharf Road, Eastbourne, East Sussex, BN21 3FG. For anything about your data, email hello@cashrun.co.uk.
2. What we collect
- Identity: name, date of birth (to confirm you are 18+), and proof of identity if you win.
- Contact: email address, phone number and postal address.
- Entry details: draws entered, ticket numbers, answers, orders and prizes won.
- Payment: card payments are handled by Stripe. We never see or store your full card number. We hold the bank details you give us to pay a prize.
- Postal entries: the details you include on your free postal entry.
- Technical: IP address, device and browser type, and pages visited, collected through cookies (see section 7).
- Messages: anything you send us by email, social media or our forms, including reviews from our Share Your Win form.
3. How and why we use it
| Purpose | Lawful basis |
|---|---|
| Running draws: taking entries, allocating tickets, picking and contacting winners, paying prizes | Contract |
| Checking age and identity before paying a prize, and preventing fraud | Legal obligation and legitimate interests |
| Keeping order and accounting records | Legal obligation |
| Sending you emails about new draws and offers | Consent, or legitimate interests for past customers (you can opt out at any time) |
| Measuring our Meta (Facebook and Instagram) adverts and showing ads to people who have visited our site | Consent (cookie banner) |
| Answering questions and complaints | Legitimate interests |
4. Winners
We publish winners’ first name and surname initial, the winning ticket number and the prize on our website and social media. Draws are filmed and posted on Facebook. We only use a winner’s photo, video or review with their permission.
5. Who we share data with
We never sell your data. We share it only with providers who help us run Cash Run, under contracts that protect it:
- Stripe: card payments.
- Brevo: sending our emails.
- Meta Platforms Ireland: advert measurement and audiences, only if you accept cookies.
- Our website host and plugin providers: running the website.
- Our bank, accountants and professional advisers.
- Police, regulators or courts, if the law requires it.
Some providers may process data outside the UK. Where they do, the transfer is protected by UK adequacy regulations or approved contract clauses.
6. How long we keep it
- Orders, entries and prize payments: 6 years after the end of the financial year, for tax and accounting.
- Winner ID checks: 6 years, for fraud prevention and audit.
- Marketing list: until you unsubscribe, or 2 years after your last entry.
- Your account: until you ask us to close it, apart from records we must keep as above.
- Cookie choice: 12 months.
7. Cookies
Essential cookies keep your basket, login and checkout working. They do not need consent.
Meta Pixel (marketing) tells us which visits and purchases came from our Facebook and Instagram adverts, and lets us show ads to people who have visited our site. It only runs if you click Accept on our cookie banner. You can change your choice at any time using the Cookie settings link, or by clearing cookies in your browser.
8. Your rights
You can ask to see, correct or delete your data, object to or restrict how we use it, or take a copy of it. You can withdraw consent or unsubscribe from emails at any time. Email hello@cashrun.co.uk and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
9. Age
Cash Run is for people aged 18 and over in the UK. We do not knowingly collect data from anyone under 18. If we find we have, we delete it and void any entry.
10. Changes
We will update this page if anything changes and show the new date at the top.