Last Updated: 03/12/2025
ClanLoot (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our website www.clanloot.co.uk, purchase Mystery Boxes, or enter Prize Competitions.
By using our website, you agree to the practices described in this policy.
---
1. Who We Are
Business Name: ClanLoot
Email: clanloot@outlook.com
Website: www.clanloot.co.uk
ClanLoot operates as an independent UK business.
For data protection purposes, we act as the Data Controller.
---
2. What Personal Data We Collect
We collect and process the following information when you interact with our site:
2.1 Information You Provide Directly
Full name
Email address
Phone number
Billing and delivery address
Payment information (processed securely by third-party providers)
Answers to skill-based questions (Prize Competitions)
Free entry submissions via email
Order details (Mystery Boxes and competition entries)
2.2 Automatically Collected Data
IP address
Device type
Browser type
Cookies and tracking data
Pages visited and time spent on the website
2.3 Competition-Related Data
Entry method (paid or free)
Number of entries
Draw numbers
Winner verification information (proof of ID/age/address)
We only collect data necessary to operate our services safely and legally.
---
3. How We Use Your Data
We use your data for the following purposes:
3.1 To Process Orders & Deliver Mystery Boxes
Managing payments
Confirming orders
Dispatching items
Customer support
3.2 To Manage Prize Competitions
Validating entries
Contacting winners
Sending draw numbers
Verifying age and identity
Publishing winner details (first name, initial & town only)
3.3 To Improve Our Website
Monitoring performance
Analysing customer behaviour
Detecting fraud or misuse
3.4 Legal & Compliance
Meeting UK competition regulations
Maintaining financial and audit records
Preventing fraud
We do not sell personal data.
---
4. Legal Basis for Processing
Under UK GDPR, we process your data using the following legal bases:
Contractual necessity – to process orders or entries
Legal obligation – to comply with UK competition regulations
Legitimate interests – fraud prevention, site optimisation
Consent – for marketing or cookies
You may withdraw consent at any time.
---
5. How We Store & Protect Your Data
We take data security seriously. Measures include:
Encrypted payment processing
Secure servers
Limited internal access
Regular security monitoring
Secure password and access controls
We store personal data only as long as necessary for legal, transactional, or regulatory requirements.
---
6. Sharing Your Data
We only share your data with trusted third parties when necessary:
6.1 Service Providers
Payment processors (e.g. Stripe, PayPal)
Email platforms
Website hosting
Delivery couriers
6.2 Competition Transparency
Winner details may be shared publicly: first name, initial, and town only, unless you request anonymity.
6.3 Legal Requirements
We may share data with authorities if required by law.
We never sell personal data to third parties.
---
7. Free Entry Route Data
Free entry emails must include personal information to allow fair processing.
These entries are treated exactly the same as paid entries and stored securely.
---
8. Cookies & Tracking
Our website uses cookies to:
Improve site performance
Enable login and checkout functions
Measure traffic and behaviour
Personalise user experience
Users may disable cookies in their browser settings, but doing so may impact site functionality.
A full cookie policy can be provided if required.
---
9. Your Rights
Under UK GDPR, you have the right to:
✔ Access
Request a copy of your personal data.
✔ Rectification
Correct inaccurate or incomplete information.
✔ Erasure (“Right to be forgotten”)
Request deletion of your data once obligations are complete.
✔ Restriction
Limit how we process your data.
✔ Objection
Stop certain types of processing, such as marketing.
✔ Data Portability
Request a transferable copy of your data.
To exercise any right, email us at: clanloot@outlook.com
We may require proof of identity for security purposes.
---
10. Data Retention
We keep data only as long as necessary for:
Order fulfilment
Competition verification
Legal recordkeeping
Fraud prevention
Tax/accounting requirements
Competition winner verification records may be stored for audit purposes for up to 6 years, as required under UK law.
---
11. Children’s Privacy
Mystery Boxes may be purchased by under-18s with parental permission.
Prize Competitions are strictly 18+ only.
We do not knowingly collect data from children without parental/guardian consent.
---
12. Marketing Communications
We may send occasional marketing emails only with your consent.
You can unsubscribe at any time via:
The email “unsubscribe” link
Contacting us at clanloot@outlook.com
---
13. Links to External Websites
Our site may contain links to third-party websites.
We are not responsible for their content, privacy practices, or policies.
---
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in law, business practices, or services.
The latest version will always be available on our website.
---
15. Contact Us
For questions, complaints, or data requests, contact us at:
📧 Email: clanloot@outlook.com
We aim to respond to all data requests within 30 days.