Privacy notice

Version 2026-10-02. This explains how [COMPANY LEGAL NAME] Ltd (company number [COMPANY NUMBER], ICO registration [ICO REGISTRATION NUMBER]) uses personal data for Did You Get In?. We are the controller. Contact: privacy@yougetin.co.uk, or write to [REGISTERED OFFICE ADDRESS].

What we collect

• Your email when you start the survey: so you can pick up where you left off, to link your answers to your draw entry, and to contact you if you win. We don't send marketing unless you separately opt in.
• Survey answers, including unfinished ones: we save answers as you go, so if you stop part-way we keep what you've answered so far. Unfinished answers are not included in published results.
• Who referred you: if you tell us, we store the name or email you typed, and use it only to credit their bonus entries.
• Survey answer details: your ticket sale outcome, devices, browsers, connection, providers, timings, group and syndicate size, Glastonbury history, and optionally the first half of your postcode and a tip. We never ask for your registration number, full postcode, booking screenshots or ticket details.
• Account and entry data: your email address, name and sign-in provider if you use Google or Microsoft, your eligibility confirmations, and your marketing choice.
• Purchases: what you bought and when. Card payments are handled by Stripe; we never see your full card details.
• Security data: a one-way salted hash of your IP address, used to stop abuse. We don't store your IP address itself.
• Usage data: anonymous page and step counts, without cookies.

Why we use it, and our lawful basis

• Running the survey, saving progress and publishing aggregated results: legitimate interests in producing research that's useful to the people who take part. Results only ever show totals and percentages, with groups under 20 people hidden.
• Running the prize draw, checking eligibility and contacting winners: performance of our contract with you (the draw terms).
• Selling and delivering the report, and keeping financial records: contract and legal obligation.
• Preventing fraud, bots and duplicate entries: legitimate interests.
• Marketing emails: your consent, which you can withdraw at any time with the unsubscribe link or by emailing us.

Who we share it with

Our processors: Supabase (database and sign-in), Vercel (hosting), Stripe (payments), Proton (email), and Google or Microsoft if you choose to sign in with them. Some of these process data outside the UK under UK adequacy regulations or the UK International Data Transfer Addendum. We share winners' details with prize providers only as needed to deliver prizes. We never sell personal data. We may share data with regulators or law enforcement where the law requires it.

How long we keep it

• Draw entries and winner records: until 12 months after the draw, then deleted.
• Survey answers and the email you started with: until 12 months after the draw, then the email is deleted and answers are kept only in anonymous form.
• Purchase records: 6 years, for tax law.
• Marketing list: until you unsubscribe, or 3 years without engagement.
• Security hashes and rate-limit data: 30 days.

Your rights

You can ask for access to, correction or deletion of your data, restrict or object to how we use it, and ask for a copy in a portable format. Email privacy@yougetin.co.uk. We reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

The draw and accounts are for people aged 18 and over. We don't knowingly collect data from children.