Privacy Policy

1. Who We Are

Find2Win ("we", "us", "our") operates the website find2win.com and runs live treasure-hunt competitions across the United Kingdom. We are the data controller for the personal data described in this policy.

Contact: info@find2win.com

2. Data We Collect

We collect the following personal data:

• Email address — collected when you join the waitlist. Used for notifications and, with your consent, marketing communications.
• Phone number (optional) — collected only if you opt in to SMS notifications. Used for hunt launch alerts and, with your consent, marketing messages.
• Postcode — processed to match you with your nearest area. Your postcode is used to determine your postcode district (e.g. "YO11") and is not stored in full. Only the postcode district is retained.

3. How We Use Your Data

We use your data for the following purposes:

• Waitlist notifications: To let you know when a hunt is launching in your area. This is our core service and the primary reason we collect your email.
• Marketing communications: With your explicit opt-in consent, we may send you marketing emails or SMS messages about upcoming hunts, prizes, and Find2Win news.

4. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR):

• Consent (Article 6(1)(a)) — for marketing communications via email and SMS. You can withdraw consent at any time.
• Legitimate interests (Article 6(1)(f)) — for sending transactional waitlist notifications (the service you signed up for).

5. Email and SMS Consent (GDPR + UK PECR)

We comply with both the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR).

• Marketing emails and SMS messages are only sent to individuals who have given clear, affirmative opt-in consent.
• Consent is collected via a clear checkbox (not pre-ticked) on our waitlist form.
• Every marketing email includes an unsubscribe link. SMS messages include opt-out instructions.
• You may withdraw consent at any time by clicking unsubscribe, replying STOP to an SMS, or contacting us at info@find2win.com.

6. Data Processors

We use the following third-party data processor:

• Brevo (formerly Sendinblue) — our email and SMS platform. Brevo processes your email address and phone number on our behalf to deliver messages. Brevo acts as a data processor under a Data Processing Agreement (DPA) compliant with UK GDPR. Brevo's privacy policy is available at brevo.com/legal/privacypolicy.

7. Analytics

We use Plausible Analytics, a privacy-focused, cookieless analytics tool. Plausible does not use cookies, does not collect personal data, and does not track individual users across sites. All data is aggregated. No consent banner is required for Plausible under GDPR or PECR.

8. Incidental Filming

Find2Win hunts take place in public spaces and are broadcast via live stream. Members of the public in the vicinity of a hunt may be incidentally captured on camera. We process this data under legitimate interests (Article 6(1)(f)) as the filming takes place in public areas where individuals have a reduced expectation of privacy. We will take reasonable steps to avoid focusing on bystanders. If you believe you have been filmed and wish to request removal, please contact us at info@find2win.com.

9. Data Retention

• Waitlist data (email, phone, postcode district) is retained until you unsubscribe or request deletion.
• Winner data (name, contact details, video footage) is retained for a minimum of 6 years for legal and tax compliance purposes.
• Analytics data is aggregated and contains no personal information.

10. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email us at info@find2win.com. We will respond within 30 days.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new version number and date.