LEGAL
Privacy Policy
How we collect, use, and protect your personal data.
Last updated: May 2026
1. Who We Are
Dream To Reality Ltd is the data controller for all personal data collected through dreamtoreality.co.uk. Our registered office is 25 Clark Street, Coventry, CV6 7HE. This means we are responsible for deciding how and why your personal data is used.
Dream To Reality Ltd
Registered in England and Wales
Company Number: 17203555
ICO Registration Number: 00014074743
Contact: info@dreamtoreality.co.uk
If you have any questions about how we handle your personal data, please contact us at the email address above before using this site.
2. Data We Collect
We collect and process the following categories of personal data:
- Account and identity data: your name, email address, date of birth, home address, and phone number, collected when you register or update your account.
- Entry data: the competitions you have entered, the number of tickets purchased, your skill question answers, and your assigned ticket numbers.
- Payment data: payment transactions are processed by our payment provider, Cashflows. We do not store your full card details.
- Technical data: your IP address, browser type and version, device identifiers, pages visited on our site, and how you arrived at our site (e.g. from a search engine or advertisement).
- Marketing preferences: your consent (or withdrawal of consent) to receive marketing communications from us.
- Communications data: records of any correspondence you send us, including complaints and enquiries.
3. How We Use Your Data & Lawful Bases
We use your personal data only for the purposes described below, each supported by a lawful basis under UK GDPR:
- To run competitions and contact winners — including ticket allocation, draws, winner notification, and prize delivery. Lawful basis: performance of a contract with you.
- To verify age and prevent fraud — including age checks, identity verification, and detecting suspicious activity. Lawful bases: legal obligation and legitimate interests.
- To process payments — passing necessary data to our payment provider to complete transactions. Lawful basis: performance of a contract.
- To send marketing communications — where you have opted in to receive news, offers, and competition updates from us. Lawful basis: consent (you can withdraw at any time).
- To improve our service — analysing how visitors use the site to improve performance and user experience. Lawful basis: legitimate interests.
- To comply with legal obligations — including record-keeping, responding to regulatory requests, and meeting our obligations under UK law. Lawful basis: legal obligation.
4. Who We Share Data With
We share your personal data only where necessary, and only with the following categories of recipients:
- Payment provider (Cashflows): to process your payments securely.
- Email/communications provider ([TODO — email provider, e.g. Brevo]): to send you transactional emails (entry confirmations, winner notifications) and, where you’ve consented, marketing emails.
- Hosting and infrastructure providers: companies that host and operate our website and databases on our behalf.
- Regulatory authorities and law enforcement: where we are legally required to do so.
We do not sell your personal data to any third party, and we do not share it for third-party marketing purposes.
5. International Transfers
Some of our service providers operate outside the United Kingdom. Where your personal data is transferred outside the UK, we ensure that appropriate safeguards are in place — for example, the use of UK-approved standard contractual clauses or transfers to countries with an adequacy decision from the UK Secretary of State.
For more information about the safeguards in place for any specific transfer, please contact us at info@dreamtoreality.co.uk.
6. Data Retention
We keep your personal data only for as long as is necessary for the purposes set out in this policy, and to comply with our legal obligations. In practice this means:
- Account data: retained for as long as your account is active, plus a reasonable period thereafter to allow for disputes or legal claims.
- Competition entry records: retained for at least 6 years after a competition closes, in line with standard record-keeping and limitation periods.
- Marketing consent records: retained until you withdraw consent, plus a short period thereafter to maintain a suppression record.
- Technical/log data: typically retained for up to 12 months.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access: to request a copy of the data we hold about you.
- Right to rectification: to have inaccurate data corrected.
- Right to erasure (“right to be forgotten”): to request deletion of your data in certain circumstances.
- Right to restriction: to ask us to limit how we use your data.
- Right to object: to object to processing based on legitimate interests.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please email info@dreamtoreality.co.uk. We will respond within one calendar month. We may need to verify your identity before processing your request.
8. Cookies
We use cookies and similar technologies to operate this site and, with your consent, to analyse usage. Full details of the cookies we use, their purpose, and how to manage your preferences are set out in our Cookie Policy.
9. Marketing
We will only send you marketing communications (such as newsletters and competition alerts) if you have given your explicit consent. You can withdraw consent at any time by:
- clicking the “unsubscribe” link in any marketing email we send; or
- emailing info@dreamtoreality.co.uk to request removal from our mailing list.
Withdrawing consent will not affect transactional communications (such as entry confirmations and winner notifications), which we need to send in order to run your competition entries.
10. Data Security
We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. These measures include encrypted storage of sensitive data (such as date of birth), HTTPS across the site, and restricted access to personal data by staff.
While we do our best to protect your data, no internet transmission is completely secure. You submit data at your own risk. If you believe your account has been compromised, please contact us immediately at info@dreamtoreality.co.uk.
11. Complaints
If you are concerned about how we handle your personal data, please contact us first at info@dreamtoreality.co.uk and we will do our best to address your concern.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
Information Commissioner’s Office
Website: ico.org.uk
Helpline: 0303 123 1113
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data practices. The current version is always published on this page with the date shown at the top. We encourage you to check this page periodically.
Dream To Reality Ltd
Company Number 17203555 · ICO Registration 00014074743 · Registered in England and Wales