Privacy Policy

Sep 3, 2025 · 5 min read

Privacy Policy

Last Updated: September 3, 2025

This Privacy Policy explains how Spark Chance (“we,” “us,” or “our”) collects, uses, discloses, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to information collected through our website (the “Website”) and related services.

  1. Who We Are

SparkChance are the data controller responsible for your personal data.

For questions about this Privacy Policy or our data practices, please contact us at:

Email: data@sparkchance.co.uk

2. Personal Data We Collect

We may collect and process the following types of personal data:

  • Identity and Contact Data: Name, email address, phone number, or other details you provide when contacting us or registering for an account.
  • Technical Data: IP address, browser type, device information, operating system, and other technical details collected automatically when you visit our Website.
  • Usage Data: Information about how you use our Website, such as pages visited, time spent, and links clicked.
  • Marketing and Communications Data: Your preferences for receiving marketing communications and your communication preferences.

We may also collect anonymised or aggregated data that does not identify you directly.

3. How We Collect Your Data

We collect personal data through:

  • Direct Interactions: When you fill out forms, subscribe to newsletters, or contact us directly.
  • Automated Technologies: Through cookies, server logs, and similar technologies when you interact with our Website. You can manage cookie preferences through our cookie consent tool.
  • Third Parties: From analytics providers (e.g., Google Analytics), advertising networks, or other service providers, subject to your consent where required.

4. How We Use Your Data

We use your personal data for the following lawful purposes under the UK GDPR:

  • To Provide and Improve Our Services: To operate the Website, process transactions, and enhance user experience (legitimate interest).
  • To Communicate with You: To respond to inquiries, provide customer support, or send service-related updates (contractual necessity or consent).
  • For Marketing: To send promotional materials or newsletters, where you have provided consent or where permitted under legitimate interests.
  • To Ensure Security: To monitor and protect the Website from fraud or security threats (legitimate interest).
  • To Comply with Legal Obligations: To meet regulatory requirements under applicable laws.

We process your personal data based on:

  • Consent: For marketing communications or non-essential cookies.
  • Contractual Necessity: To fulfill a contract, such as providing services you’ve requested.
  • Legitimate Interests: For improving our Website, ensuring security, or marketing to existing customers, provided your rights are not overridden.
  • Legal Obligation: To comply with laws or regulations, such as tax or reporting requirements.

6. Sharing Your Data

We may share your personal data with:

  • Service Providers: Third parties providing hosting, analytics, payment processing, or other services, acting as data processors under strict agreements.
  • Legal Authorities: When required by law or to protect our rights.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, with appropriate safeguards.

We do not sell your personal data to third parties.

7. International Transfers

If we transfer your personal data outside the UK, we ensure it is protected by:

  • Transferring to countries with an adequacy decision under the UK GDPR.
  • Using Standard Contractual Clauses or other approved mechanisms to safeguard your data.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, access controls, and secure servers. However, no system is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:

  • Contact data is retained until you request deletion or it is no longer needed for the purpose provided.
  • Technical data is typically retained for 12 months for analytics purposes.

10. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data in certain circumstances.
  • Restriction: Limit how we process your data.
  • Data Portability: Receive your data in a structured, commonly used format.
  • Object: Object to processing based on legitimate interests, including marketing.
  • Withdraw Consent: Withdraw consent at any time where consent is the basis for processing.

To exercise these rights, contact us at data@sparkchance.co.uk

We will respond within one month, though this may be extended for complex requests.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

11. Cookies

Our Website uses cookies to enhance your experience. For more details, including how to manage cookies, see our Cookie Policy.

Our Website may contain links to third-party websites. We are not responsible for their privacy practices, and you should review their policies before providing personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Significant changes will be notified to you where required.

14. Contact Us

For questions or concerns about this Privacy Policy, please contact: