Privacy Policy

1. Introduction

Dundee United Development Association (DUDA) is committed to protecting your privacy and handling your personal information responsibly, securely and transparently.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, register for an account, participate in the United Futures Lottery or DUDA Matchday Draw, purchase tickets, claim prizes or otherwise communicate with us.

We aim to comply with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

This policy explains how your personal information is processed. It does not require you to consent to processing that is permitted under another lawful basis.

2. Who We Are

Dundee United Development Association (DUDA) operates the United Futures Lottery and DUDA Matchday Draw, which help raise funds to support youth development associated with Dundee United Football Club.

For the personal information that we determine how and why to process, DUDA acts as the data controller.

Contact details:

Dundee United Development Association
Tannadice Park
Tannadice Street
Dundee
DD3 7JW

Email: admin@unitedlottery.co.uk
Website: www.unitedlottery.co.uk

3. Information We Collect

Depending on how you interact with DUDA, we may collect the following information:

Personal and contact information

Full name
Postal address
Email address
Telephone number
Date of birth or information required to confirm eligibility, where applicable

Lottery participation information

Lottery membership and account details
Allocated lottery numbers or seats
Ticket purchases and entries
Payment confirmations and transaction references
Draw participation history
Prize winnings and claims
Correspondence relating to participation

Account information

Registration details
Protected account login credentials
Account preferences
Account security information

Website and technical information

IP address
Browser and device information
Website access times
Necessary session information
Information required to maintain website functionality and security

Payment card information

DUDA does not collect, receive, process, store or have access to customers' payment card details.

All payment card information is handled directly by our appointed payment partners, - Cashflows for online transactions and MyPos for matchday draw ticket sales at the stadium - through their secure payment processing systems.

DUDA receives only the transaction information necessary to confirm payments, administer lottery entries, maintain financial records and respond to payment enquiries.

Cashflows handles payment card data in accordance with its applicable security standards and privacy arrangements.

4. How We Use Your Personal Information

We use personal information to:

Register and administer lottery participants and accounts.
Process lottery entries and record payment confirmations.
Conduct draws and administer prizes.
Contact winners and arrange prize distribution.
Respond to customer enquiries and complaints.
Maintain financial and administrative records.
Meet legal and regulatory obligations.
Protect the security and reliability of our website.
Communicate important information about lottery participation.

Where permitted by law, we may also send information about DUDA activities and relevant lotteries. Where consent is required for marketing, we will obtain it.

5. Lawful Bases for Processing

We process personal information under one or more of the following lawful bases:

Contract: To register participants, administer lottery entries, maintain accounts and fulfil obligations associated with participation.

Legal obligation: To comply with applicable legal, financial, accounting, tax and lottery-related requirements.

Legitimate interests: To securely operate our services, maintain accurate records, prevent fraud, respond to enquiries and improve administration, where these interests are not overridden by individuals' rights.

Consent: For activities where we ask for permission, such as certain marketing communications.

Where consent is our lawful basis, it may be withdrawn at any time.

6. Sharing Your Personal Information

DUDA does not sell personal information to third parties.

We may share necessary information with:

Cashflows, our payment processing partner.
Website hosting and technical support providers.
Email and communications service providers.
Authorised lottery administrators and agents.
Accountants, legal advisers and other professional advisers.
Dundee United Football Club where necessary for specific prize arrangements.
Regulators, law enforcement bodies and other authorities where legally required.

We limit disclosures to information reasonably necessary for the relevant purpose and apply appropriate data protection safeguards.

7. Lottery Winners and Publicity

Information about winning entries and prize winners may be published in connection with the United Futures Lottery and DUDA Matchday Draw.

This may include winners' images, names, prize details and relevant draw information.

Results may be published through the United Lottery website, DUDA and Dundee United Football Club communications, social media, stadium announcements and relevant media publications.

This supports transparency in the operation of the lotteries and allows participants to identify winning entries.

We will ensure that any publication of personal information has an appropriate lawful basis and is proportionate to its purpose.

Where consent is legally required for a particular use, we will seek that consent.

For enquiries about winner publicity, contact admin@unitedlottery.co.uk.

8. Cookies and Website Technologies

The United Lottery website uses only cookies that are necessary for the operation, functionality and security of the website.

These include:

Strictly necessary cookies

Used to support essential website operations, secure browsing, account authentication, session management and other core functionality.

Functional cookies

Used to support website features and remember settings where necessary to provide services requested by visitors.

We do not use:

Analytics or website tracking cookies.
Advertising cookies.
Marketing or retargeting cookies.
Third-party behavioural tracking cookies.

We do not use cookies to create advertising profiles or track visitors across unrelated websites.

Cookies that are strictly necessary to provide a service requested by a visitor, or otherwise fall within an applicable legal exemption, do not require prior consent under UK cookie rules.

Any functional cookie that does not qualify for an exemption will only be used with the consent required by law.

Visitors can manage or delete cookies through their browser settings. Disabling essential cookies may affect the operation of website features.

9. Payment Processing and Security

All online card payments made through www.unitedlottery.co.uk are processed by our authorised payment partner, Cashflows.

DUDA does not receive, handle, store or have access to debit or credit card numbers, card security codes or other payment card details.

When making a payment, customers provide their card information directly to Cashflows through its secure payment processing facilities.

Cashflows is responsible for handling the payment card data it receives in accordance with its applicable legal, privacy and security obligations.

DUDA retains only the limited payment confirmation and transaction information required for lottery administration, accounting, reconciliation and customer support.

For more information about how Cashflows processes personal data, customers should refer to Cashflows' own privacy information.

10. How We Protect Your Information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

These measures may include secure website connections, account access controls, protected credentials, restricted administrative access and appropriate system maintenance.

DUDA uses Cashflows for the secure processing of payment card information rather than collecting or holding that information itself.

No system can guarantee absolute security, but we take reasonable steps to protect the personal information within our control.

11. How Long We Keep Your Information

Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods depend on the information involved and relevant legal requirements.

Account information may be retained while an account remains active and for an appropriate period afterwards.

Lottery participation, transaction and prize records may be retained for administration, audit, dispute resolution and legal compliance.

Financial records are retained for the applicable accounting and tax retention periods.

Correspondence and technical records are retained according to their administrative and security purposes.

Where information is no longer required, we will securely delete or anonymise it unless continued retention is legally necessary.

12. Your Data Protection Rights

Under UK GDPR, you have rights over your personal information, subject to applicable conditions and exemptions.

These include:

Access: Request a copy of your personal information.
Rectification: Request correction of inaccurate information.
Erasure: Request deletion in certain circumstances.
Restriction: Request that certain processing activities are limited.
Objection: Object to certain types of processing, including direct marketing.
Data portability: Receive certain information in a commonly used, machine-readable format where applicable.
Withdrawal of consent: Withdraw consent where processing relies on it.
Automated decision-making: Exercise applicable rights concerning certain solely automated decisions with legal or similarly significant effects.

To exercise your rights, email admin@unitedlottery.co.uk.

We will respond in accordance with applicable data protection requirements, normally within one calendar month.

13. Marketing Communications

Where permitted by law, DUDA may communicate information about its lotteries, draws and fundraising activities.

Where marketing requires consent, we will obtain that consent before sending the relevant communications.

You may opt out of direct marketing at any time by contacting admin@unitedlottery.co.uk or using any unsubscribe facility provided.

Essential account, transaction and lottery administration communications may still be sent where necessary.

14. International Data Transfers

Some providers involved in hosting, payment processing, communications or technical support may process personal information outside the United Kingdom.

Where DUDA transfers personal information internationally, we will comply with applicable UK data protection requirements and use appropriate safeguards where necessary.

Further information about relevant international transfers and safeguards may be requested using our contact details.

15. Children's Privacy and Lottery Eligibility

Participation in DUDA lotteries is subject to the eligibility and minimum-age requirements in the applicable Lottery Terms and Conditions and relevant law.

We do not knowingly allow ineligible individuals to participate.

Where necessary, limited personal information may be processed to confirm eligibility.

If information has been collected inappropriately from an ineligible participant, we will take appropriate action.

16. Third-Party Websites

Our website may contain links to external websites, including Dundee United Football Club, Cashflows and other organisations.

External websites are responsible for their own privacy practices.

Visitors should review the relevant privacy notices before providing information to third parties.

17. Changes to This Privacy Policy

We may update this policy to reflect changes to our services, legal requirements or data protection practices.

The latest version will be published on www.unitedlottery.co.uk with the appropriate revision date.

Where changes are significant, we will take appropriate steps to inform affected individuals.

18. Complaints and Contact Information

If you have questions or concerns about how DUDA handles your personal information, please contact:

Dundee United Development Association
Tannadice Park
Tannadice Street
Dundee
DD3 7JW

Email: admin@unitedlottery.co.uk

If you are dissatisfied with our response, you may raise a complaint with the Information Commissioner's Office (ICO).

Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113

You may also have the right to seek a judicial remedy under applicable data protection law.

19. GDPR Compliance

Data Retention: Personal data is retained only for as long as required to meet legal and regulatory obligations and any other applicable retention requirements.

Marketing Practices: Marketing communications are conducted in accordance with GDPR requirements, with legitimate interest relied upon as the lawful basis where appropriate.

Winner Publicity: Prize winners’ personal details are not publicly announced. Winners of prizes exceeding £1,000 are never publicly disclosed.

This Privacy Policy applies to www.unitedlottery.co.uk and associated DUDA lottery services.