Privacy policy

7Dreams is run by Elitte Ltd, registered in England and Wales under company number 17451127, registered office 167-169 Great Portland Street, 5th Floor, London W1W 5PF. Elitte Ltd is the controller of the personal data described here. Write to contact@7dreams.co.uk for anything in this policy; there is no separate data protection officer.

This policy covers the website and everything you do on it: browsing, opening an account, entering a competition online or by post, paying, and winning. It is a draft prepared with the owner's solicitor and is dated at the foot of the page.

Your account: the email address you sign in with, your legal first and last name, your date of birth as you declared it, the country you live in, a handle shown on public surfaces (your initials unless you change it), a city if you add one, and the time you accepted the terms and finished your profile. A phone number and a postal address are held only if you add them in your settings; a postal address is needed to match a postal entry to your account.

Signing in: a magic-link token or six-digit code that expires with the email it came in; a record of each signed-in session with the IP address and browser it came from; a link to your Google or Apple account if you chose to sign in that way, holding only that provider's identifier for you and an encrypted sign-in token; and a passkey's public key if you registered one. We never hold a password.

Entering: each entry with its ticket numbers, route and status; the one answer you gave to a competition's skill question, whether it was right, and a keyed digest of the IP address it came from; a postal entry's date of receipt and the answer written on it; your position on a leaderboard by paid tickets held; your spend limits, breaks and self-exclusions.

Paying: each order with its amount, reference, the IP address it was placed from, the country on your account, and the time you confirmed that entering is lawful where you are; each payment with the reference our payment provider gives it, the amount, its status, and a minimised copy of the provider's notification holding only the fields we need to fulfil the order. We never see or hold your card number: the card form belongs to the payment provider.

Winning: a win and the choice you made, a top-three place, each payout with a transfer or tracking reference (never a bank detail), whether staff verified your age, identity and residence and how, a handover photograph and story only if you agreed to one, and whether you consented to filming.

Messages: the emails we have queued or sent you by category, your notification switches, and whether you have agreed to or refused marketing emails, with the date and the place you chose. Email changes keep both the old and the new address for a year. We do not hold a record of what you write to us by email beyond the mailbox it arrives in.

Running the site: a log of every action a member of staff takes on your account, with any reason they typed; keyed digests of email addresses and IP addresses used to rate-limit sign-ins, answers and ticket lookups; and the register described under breaks and self-exclusion below.

To run the competition you entered (UK GDPR Article 6(1)(b), our contract with you): your account, entries, ticket numbers, the skill question and your answer, orders and payments, the entrant list, the draw, contacting a winner, and the service emails that come with those steps, such as the sign-in email, the order confirmation, a refund notice, the draw listing, the result, and a leaderboard overtake.

To meet our legal obligations (Article 6(1)(c)): keeping accounting and payment records, keeping the published entrant list and draw record checkable, refusing entry to anyone under 18, verifying a winner before a prize is paid, and answering a request about your data.

For our legitimate interests (Article 6(1)(f)): keeping the site secure and detecting fraud and account farming (session records, the keyed IP digests, rate limits, the Turnstile check), fixing faults (error reports), understanding how the site is used in aggregate (the analytics described on the cookies page), keeping a record of staff actions on accounts, and keeping the break and self-exclusion register so that a pause you asked for is honoured. You may object to any of these; see your rights below.

With your consent (Article 6(1)(a)): the email about new competitions where you switched it on yourself, analytics cookies, your handover photograph or story, and filming at a handover. You can withdraw each of these at any time, and withdrawing does not affect what was done before. Customers are emailed about new competitions unless they refuse; see Marketing and service messages below.

We hold nothing in the special categories of Article 9 and no criminal-offence data under Article 10. A break or self-exclusion is a preference you set, not a health record, and we do not infer anything from it. We make no decision about you by automated means that has a legal or similarly significant effect: a wrong answer or a spend limit applies a rule you were shown, and a winner is verified by a person.

The entrant list for each competition is published 24 hours before its draw and shows every ticket number with the handle and city holding it. The leaderboard shows handles and cities ranked by paid tickets held. The arrivals feed shows recent handles and cities. A winner's ticket number, handle and city are shown on this site, read out and shown in the live broadcast, and posted on our Telegram channel and social accounts.

Your handle is your initials unless you change it, and a city appears only if you add one. You may choose to appear as an anonymous member instead, at any time, from your settings. From that moment every surface that reads your account live (leaderboard, feed, winners, results, future entrant lists) shows Anonymous member with no city. An entrant list that has already been published is frozen with its checksum and is not rewritten: the handle and city it showed at publication stay on it.

We never publish your name, email address, date of birth, phone number or postal address. If you win, we will ask before any photograph, story or filming, and you may say no.

Our staff. The site has a single admin account, protected by a second factor, and no staff member can read any member record without being signed in to it. The member screens show your email, handle, name, city, country, standing and entries. Your phone number, full name, date of birth and address are shown only when the admin deliberately opens them, and each opening is recorded in the audit log with the time and who did it. The admin does not see your IP addresses; a screen of failed answers groups them by a short keyed digest. A winner's verification tick must be preceded by that recorded opening.

Our processors, listed below, see only what each needs. Nobody else sees your data unless the law requires it of us, in which case we tell you where we lawfully can.

Our database and email, error and analytics processors are in the United Kingdom or the European Union, which the UK recognises as adequate. Cloudflare, Google, Apple and DNA Payments may process data in the United States or elsewhere; where they do, the transfer rests on the UK's International Data Transfer Agreement or Addendum, or on an adequacy regulation, under each provider's own terms.

We send one kind of marketing email: a notice that a new competition has opened. If you have bought an entry, we send it unless you said no. We ask once, with a ticked box at payment that you can untick, and we do not ask again or switch it back on after you have refused. If you have only signed up, or entered free or by post, we send it only if you switch it on in settings.

You can stop it at any time: switch off New competitions in your account settings, or use the unsubscribe link in any of these emails.

The draw listing, the result and the leaderboard overtake are service messages about a competition you are in. Each can be switched off in settings. The sign-in email, order confirmation, refund notice, email-change and details-changed notices, a moved or cancelled competition, and the messages to a winner are part of running your entry and cannot be switched off while you hold an entry.

We never share your details with anyone else for their marketing, and we do not use your data to target you on other sites.

The site is for adults. An account requires a declared date of birth; one that shows under 18 is closed at once and its details deleted, unless it already holds entries, in which case it is closed and locked and staff deal with any paid entries by hand. We check the age, identity and residence of every winner and top-three member before anything is paid, and an entry that fails that check is void.

You may ask for a copy of your data, ask us to correct it, ask us to erase it, ask us to restrict or object to a use of it, and ask for it in a portable form. Write to contact@7dreams.co.uk from the address on your account and we answer within one month. Name, date of birth and address can be corrected in your settings, except that a date of birth is locked once staff have verified it.

A copy of your data: our admin produces a JSON file from the database with everything above that is yours, including your sessions' IP addresses and the staff actions recorded against your account. It leaves out which option you chose on a question, because that would publish a live answer key, and leaves out staff working notes that are about our process rather than you.

Erasure: your account is anonymised in place rather than deleted, because your entries, orders and any win hang off it. Your name, email, handle, city, phone, date of birth, country, address, photo, sessions, sign-in links, Google or Apple links, passkeys, notification switches and marketing consent are removed or overwritten, the IP address on your orders and answers is removed, and nothing is ever sent to the old address again. What stays is the draw and money record (ticket numbers, orders, payments, refunds, payouts, your place on a frozen entrant list), the fact and method of a verification, the record of staff actions, your breaks and self-exclusions, and the register digest, each for the reason given above.

We cannot erase an account while it holds a live checkout or an unpaid order, a refund or dispute still open, a valid entry in a competition that has not been drawn and settled, a win whose choice or payout is still pending, or a top-three place not yet paid. We will tell you which, and erase as soon as it clears.

You may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 at any time, and you do not have to raise it with us first. We would rather hear it first.

The date at the foot of this page is the date this policy was last changed. A change that affects what we collect or why is announced on this page before it takes effect, and where it touches something you consented to, we ask again.