Retailer Privacy Policy
We (Camelot UK Lotteries Limited, operator of The National Lottery) are committed to protecting your privacy and promise to collect, process and share the data you provide to us, as an interested or operational National Lottery retailer or as a member of staff at a National Lottery retailer, safely and securely. Our Privacy Policy tells you how we do this and what your rights are. Any personal data processed in line with our Privacy Policy is controlled by us, as the data controller.
If you play National Lottery games on the National Lottery website or app, your personal data may be used in other ways too. View our Privacy Policy for players here.
Information we collect about you
- Personal and contact information when you register your interest in becoming a National Lottery retailer and/or become a National Lottery retailer (including as a result of buying a store that already sells National Lottery tickets), register on the retailer website (www.nationallotteryallstars.co.uk), or update any of your information with us, including your name, address, email address, telephone number(s), title, date of birth, gender, store name and address, retailer number and social media username(s) (if you contact us using social media). We may collect some of that contact information when you interact with us including via our Retailer Hotline and Telephone Sales Team.
- Your photograph when we visit your store.
- Details (and copies) of your communications and interactions with us via our Retailer Hotline, Telephone Sales Team or otherwise, including by email, telephone (voice recordings), post and on The National Lottery social media channels.
- Copies of documents you provide to prove your identity and address (including driving licence, passport, and utility bills) when you are in the process of becoming a National Lottery Retailer, or where there is a legal reason to request this from you.
- Transaction details including National Lottery ticket sales, payments of National Lottery prizes by you, payment of retailer commission to you, and any rewards you receive in any retailer incentive scheme.
- Your financial information including your bank account details – with supporting evidence, (which are sent to BACS) when you become a National Lottery retailer (and update that information with us).
- Technical information about your personal device or browser when you use the retailer website, including your internet protocol (IP) address, device ID, browser type and version and time zone setting, which may in some circumstances be personal data.
- We may also receive personal data directly from you or from various third parties and public sources, including from social media channels (if you interact with us through those channels), or other third parties including credit reference agencies.
How and why we use your personal data
In the table below, we set out all of the ways we use your personal data, and why. We have also identified what our legitimate interests are where appropriate.
It is sometimes necessary for us to process your personal data in order to enter into a contract with you, or to satisfy a contractual requirement (referred to as ‘performance of a contract with you’ below), or to comply with a statutory requirement. In those circumstances, if you do not provide the personal data we require, we will be unable to register you (or let you continue to operate) as a National Lottery retailer.
How we use your personal data | Why we use your personal data | |
---|---|---|
Interested retailers |
We use your personal, contact and financial information to record and consider your application to become a National Lottery retailer. |
Necessary for our and your legitimate interests (to ensure we appoint the right retailers). |
Verification |
We will use your personal and contact information, together with copies of documents you provide at our request, to verify your identity during the retailer appointment process and where we are required by law to provide assistance or in order to comply with any request you may make as a National Lottery retailer. |
Necessary for our legitimate interests (to ensure we appoint the right retailers). Necessary for compliance with a legal obligation. |
Setting up and managing your retailer account |
We use your personal and contact information, financial information, and transaction information to set up and manage your retailer account. For example:
|
Necessary for the performance of a contract with you. Necessary for our legitimate interests (to ensure our retailer network is operating at its optimum level). |
Managing your National Lottery All Stars account |
We use your personal and contact information, and transaction information, to manage your National Lottery All Stars account on the retailer website, including keeping it up to date with your rewards. |
Necessary for the performance of a contract with you. |
Communicating with you |
We use the personal and contact information provided by you, copies of your communications with us and, in some circumstances, transaction information, to communicate with you. For example:
|
Necessary for the performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests (to keep our retailers updated). |
Prize draws and competitions |
We may use your personal and contact information, financial information and transaction information as part of a prize draw or competition (including to enter, take part and pay any prizes due as part of that prize draw or competition). |
Necessary for our legitimate interests (to drive retailer engagement). |
Publicity |
We may use your personal and limited contact information, and photos of you, in any publicity materials (including Jackpot magazine). |
With your consent. |
Staff training |
We use copies of your communications with us (including voice recordings) and may use transaction information in order to train our staff. |
Necessary for our legitimate interests (to ensure that we are able to provide the best service to you). |
Market research |
We may use the personal and contact information you have provided to ask you to take part in market research or a survey. We use the results of any surveys or market research that you undertake to improve our business, retailer website and service to you. |
Necessary for our legitimate interests (to assess and improve our service to retailers, the retailer website and our business). |
Technical issues |
We may use technical information, and personal and contact information to resolve or investigate a technical issue, or to administer and protect our equipment and the retailer website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). |
Necessary for our legitimate interests (for running The National Lottery, the provision of administration and IT services, security and fraud prevention). Necessary to comply with a legal obligation. |
Network planning and insight |
We use your contact information and transaction information for retailer network planning and to obtain business insight. For example:
|
Necessary for our legitimate interests (to ensure our retailer network is operating at its optimum level and to improve and inform our retailer strategy.) |
Analytics |
We use your transaction information, information about your use of the retailer website, and technical information (including about your device) to optimise our service and to improve the retailer website, services, retailer relationships and experiences. |
Necessary for our legitimate interests (to define types of retailers that use the retailer website, to improve and keep the retailer website updated and relevant, to develop our business and to inform our retailer strategy). |
Regulatory compliance |
We may use your personal and contact information, financial information and transaction information to enable us to comply with our legal and regulatory obligations. For example:
|
Necessary to comply with a legal obligation. |
Fraud prevention |
We may use your personal and contact information, financial information, and transaction information, in order to undertake analysis for the purposes of identifying and dealing with any fraud or fraudulent activity. |
Necessary to comply with a legal obligation. Necessary for our legitimate interests (to ensure that transactions and interactions with us are not fraudulent). |
We use your personal data to create aggregated data sets. You are not identifiable from that aggregated data and it is not considered personal data.
However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.
How we share your data with third parties
We sometimes share the data we collect from you with the following trusted third parties:
- Banks and payment providers – to enable payments to be collected from and made to you.
- Our IT system providers – in order to provide and repair / upgrade National Lottery equipment, software and systems to allow you to operate as a retailer and to allow on-site visits, and to communicate with you.
- Marketing agencies – for the purposes of sending you Jackpot magazine, and other marketing communications by post, on the retailer website or on social media.
- Printing agencies – for the purposes of sending you relevant content.
- Field service agencies – for the purposes of carrying out retailer visits and regulatory audits (including Operation Child visits).
- Engagement agencies – to provide and host our retailer website and manage the All Stars rewards process.
- Online survey companies and market research agencies – to undertake surveys (including for example, our retailer satisfaction survey) and other market research and to analyse the results.
- Digital analytics companies – for the purposes of website analytics and reporting in respect of our analytics and marketing.
- Public relations agencies – for the purposes of managing external communications about us and our winners and retailers.
- Professional advisers including lawyers, bankers, auditors and insurers – to enable them to provide consultancy, banking, legal, insurance and accounting services.
- The Gambling Commission – for legal and regulatory purposes as required under our licence to operate The National Lottery.
- Police or other such regulatory authority - as part of an investigation or otherwise for legal or regulatory purposes.
- Dispute Resolution agencies – for the purposes of dealing with any complaints and disputes.
- Credit reference agencies – for the purpose of checking your credit history during the process of becoming a retailer and whilst you are a retailer (for example if you miss a payment), and to comply with our insurance and regulatory obligations.
- Debt recovery agencies – for the purpose of recovering debts owed by you to us.
- Security companies – for the purposes of security, including prevention and detection methods, for the protection of The National Lottery.
- Auditors – to audit our systems and transactions for the purposes of ensuring efficiency, or regulatory or contractual compliance.
- UK law enforcement agencies and third party security companies – for the purposes of ensuring that we comply with the law and have adequate security measures in place.
- We will disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or request. We do this in order to protect our rights, property or safety or those of our players, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- In the event of another operator being awarded a future license to operate The National Lottery, there might be a transfer of retailer data from Camelot to the Gambling Commission and the new operator. If this happens, we will notify you of the transfer.
How we protect your personal data
We have put various measures in place to protect your personal data:
- We are independently certified to a number of industry recognised standards, including ISO27001 which helps us maintain the highest levels of security across our entire business.
- We are a founding member of the World Lottery Association (WLA) and therefore comply with, and are regularly audited to, the WLA Security Control Standards for our gaming processes.
- Our retailer website is accessed using https rather than http, meaning that all information that is sent and received is encrypted for additional security. You can see this in the address bar of your browser.
- As described in this Privacy Policy, we may in some instances disclose your personal data to third parties. Where we do, we require that third party to have appropriate technical and organisational measures in place to protect your personal data; however in some instances we may be compelled by law to disclose your personal data to a third party, and have limited control over how it is protected by that party.
- The retailer website is regularly audited to ensure it meets our security requirements.
Your personal data may be processed outside the UK or European Economic Area (EEA) – including by staff operating outside the UK or EEA who work for us or for one of our third parties mentioned. That includes to the maintenance companies we use to repair our lottery terminals.
Where your personal data is transferred outside of the UK or EEA, we require that appropriate safeguards are in place. To find out more about the appropriate safeguards that we have in place, please contact us.
How long we keep your personal data
We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
At the end of that retention period, your data will either be deleted or anonymised (so that it can no longer be associated with you) for research or statistical purposes.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances you may be entitled to ask us to delete your data: see ‘Your rights’ below for further information.
Your rights
You have the right:
- to ask us not to process your personal data where it is processed on the basis of legitimate interests, if there are no compelling reasons for that processing;
- to request from us access to personal information held about you (see below);
- to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
- to ask that we stop any consent-based processing of your personal data after you withdraw that consent;
- to ask, in certain circumstances, to delete the personal data we hold about you;
- to ask, in certain circumstances, for the processing of that information to be restricted;
- to ask, in certain circumstances, for data portability; and
- to ask us not to use your personal data for direct marketing, if we start sending direct marketing to you.
Contact us
If you have any questions about our Privacy Policy, including any requests to exercise your rights, please contact the Data Protection Officer using the details set out below:
By post to:
Data Protection Officer
Camelot UK Lotteries Limited
Tolpits Lane
Watford
Hertfordshire
WD18 9RN
By email to:
In order to request a copy of the personal data that Camelot holds about you, please send your request by post in writing to the Data Protection Officer at the above address. To enable us to verify your identity and process your request, you must include all of the following information and documentation with your request:
- your full name and retailer number;
- a description of the data that you are requesting, including a date range;
- a copy of your current and valid photo ID (e.g. passport photo page);
- proof of your address in the form of a photocopy of a utilities or service provider bill;
- the date of the request; and
- if your request relates to the retailer website, the email address registered to your All Stars account.
If you are unhappy with our processing of your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) at any time. The ICO’s contact details are available here: https://ico.org.uk/concerns/. We would, however, appreciate the chance to deal with any concerns before you approach the ICO, so please contact the Data Protection Officer by email in the first instance.
Cookies
We use cookies and similar technologies to recognise you, your browser and your device. We also allow certain third parties to use cookies and pixels while you are on the retailer website, which collect information about your browsing habits and usage.
There are four main types of cookies and technology. Here's how and why we use them:
Strictly necessary cookies
These are cookies that are required for the operation of our retailer website. Without these cookies, you will not be able to use some functionality on our website, such as signing into your All Stars account.
Performance cookies
These cookies collect information about how you use the retailer website and help us improve the way our retailer website works.
Functionality cookies
These cookies allow us to identify whether you are logged into your All Stars account and to remember choices you make, in order to improve your experience of the retailer website.
Advertising cookies and pixels
Our partners place third party cookies and pixels onto the retailer website on our behalf. These cookies record your visit to the retailer website and the pages you have visited. We use this information to make the retailer website more user friendly. You can opt out of these cookies but doing so may affect your use of the retailer website. More information about these types of cookies and opting out information can be found in Manage your cookies.
Below is a list of our partners that may place cookies, pixels or other similar technology on your browser or device when visiting our retailer website:
Partner name | What their cookies are used for |
---|---|
Google Analytics is a web analytics service that tracks and reports on retailer website traffic, pages visited and device/browser type. | |
VIMEO | Vimeo’s cookies help the Vimeo player work on the retailer website, and save the user’s preferences when playing videos from Vimeo on the retailer website. |
Manage your cookies
For more information about cookies, how to opt out and the steps you can take to protect your privacy on the internet, go to http://www.youronlinechoices.com/uk/ – the guide to online behavioural advertising and privacy. This website is operated by the Internet Advertising Bureau, the industry body for online advertising. On here you'll find information about how behavioural advertising works, how to opt out, further information about cookies and the steps you can take to protect your privacy on the internet.
If you'd prefer to restrict, block or delete cookies from the retailer website, you can do so in your browser settings. If you choose to disable cookies, then please note that this may limit the way you use the retailer website. For example, you may have to re-enter information that would have ordinarily been stored as a cookie.
How to control cookies on your desktop:
Internet Explorer cookies information
How to control cookies on your mobile device:
Changes to this Privacy Policy
Any changes that we may make to our Privacy Policy in the future will be posted on the retailer website. Where appropriate, we will notify you of the changes when you next visit the retailer website, or by any other form of communication we decide.
This Privacy Policy was last updated on 8th March 2021.