Privacy Policy

We, Allwyn Entertainment Ltd (Allwyn), as operator of The National Lottery are committed to protecting your privacy and promise to collect, process and share your data safely and securely when you use our National Lottery Healthy Play website.  This Privacy Policy tells you how we do this and what your rights are. Any personal data processed in line with this Privacy Policy is controlled by us, as the data controller and in line with data protection legislation. 

Processing of data on The National Lottery website is covered by its own Privacy Policy.

Our Privacy Promise

Transparency – We will always tell you what data we are collecting about you and how we use it. 

Security – We are committed to following industry best practice to ensure your data is stored safely and securely. 

Our Privacy Policy

Information we collect about you

Information about how you use the National Lottery Healthy Play website, and where you came to the website from.

Technical information about your device or browser when you use this website including geolocation data to determine where you are accessing the Healthy Play website from, your internet protocol (IP) address, device ID, browser type and version and time zone setting, which may in some circumstances be personal data.

How and why we use your personal data

We use information about your use of the National Lottery Healthy Play website and technical information about your device or where you are accessing the website from, to optimise our service and to improve the website.

Our lawful basis for this processing is that is it necessary for our legitimate interests, to measure the interactions with and effectiveness of this website.

We may share the personal data we collect from you on this website with the following third parties:

• Digital analytics companies – for the purpose of website analytics and reporting in respect of our analytics.
• Auditors – to audit our systems and transactions for the purpose of ensuring efficiency, or regulatory or contractual compliance.
• UK law enforcement agencies and third-party security companies – for the purpose of ensuring that we comply with the law and have adequate security measures in place.

We will disclose your personal information to other third parties if we are under a duty to disclose or share your personal data in order to comply with a legal or regulatory obligation or request. 

How we protect your personal data

We have put various measures in place to protect your personal data.

This website is accessed using https rather than http, meaning that all information that is sent and received is encrypted for additional security. You can see this in the address bar of your browser.

As described in this Privacy Policy, we may in some instances disclose your personal data to third parties. Where we do, we require the third-party to have appropriate technical and organisational measures in place to protect your personal data. However, in some instances we may be compelled by law to disclose your personal data to a third-party and have limited control over how it is protected by that party.

Your personal data may be processed outside the UK or European Economic Area (EEA), including by staff operating outside the UK or EEA who work for us or for one of our third parties mentioned for the purposes of reporting and tracking web and mobile application performance.

Where your personal data is transferred outside the UK or EEA, we require that appropriate safeguards are in place. To find out more about the appropriate safeguards that we have in place, please contact us.

How long we keep your personal data

We will only keep your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purpose of satisfying any legal, accounting, or reporting requirements.

At the end of that retention period, your data will either be deleted or anonymised (so that it can no longer be associated with you) and may be used by us for research or statistical purposes.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your rights

You have the right:

• to ask us not to process your personal data where it is processed on the basis of legitimate interests, if there are no compelling reasons for that processing;
• to request from us access to personal information held about you;
• to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
• to ask us to delete the personal data we hold about you – this is not an absolute right and where there is another reason to retain the data this may take precedence;
• to ask, in certain circumstances, for the processing of that information to be restricted; and
• to ask where relevant, for data portability.

Contact us

If you have any questions about our Privacy Policy, including any requests to exercise your rights, please contact the Data Protection Officer using the details set out below:

By post to:

Data Protection Officer
Allwyn Entertainment Ltd
Tolpits Lane
Watford
Hertfordshire
WD18 9RN

By email to: dpo@national-lottery.co.uk

In order to request a copy of the personal data that Allwyn holds about you, please send your request in writing to the Data Protection Officer at the above address. To enable us to verify your identity and process your request, you must include all of the following information with your request:

1. your full name;

2. a description of the data that you are requesting, including a date range and details of the device you used to access the healthy play website, and

3. the date of the request.

If you are unhappy with our processing of your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) at any time. The ICO’s contact details are available here: https://ico.org.uk/concerns/. We would, however, appreciate the chance to deal with any concerns before you approach the ICO, so ask that you please contact the Data Protection Officer by email in the first instance.

Changes to this Privacy Policy

Any changes that we may make to our Privacy Policy in the future will be available on the website. Where appropriate, we will notify you of the changes when you next visit our website.

This Privacy Policy was last updated 23 January 2024.