Data Protection Policy for Competition Entries

 1. Introduction

Wick’d Soy Candles ("the Company") is committed to protecting the privacy and personal data of its customers. This policy outlines how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (GDPR) as applied in the Isle of Man.

2. Data Collection

Personal Data Collected: For competition entry, we collect the following personal data:

  - Full Name

  - Phone Number

Purpose of Collection: The personal data collected is used exclusively for administering the competition, including participant verification, winner notification, and prize distribution.

 3. Lawful Basis for Processing

The Company processes personal data based on the following lawful bases under GDPR:

Consent: Participants must provide explicit consent to the collection and use of their personal data for competition purposes.

Legitimate Interest: The Company has a legitimate interest in processing data to conduct the competition and ensure its proper management.

 4. Consent and Rights of Data Subjects

Obtaining Consent: Consent is obtained through a clear opt-in mechanism during the entry process, detailing the purpose of data collection and usage.

Rights of Data Subjects: Participants have the right to:

  - Access their personal data held by the Company.

  - Rectify inaccurate or incomplete data.

  - Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

  - Request the deletion of their data ("right to be forgotten"), subject to certain conditions.

  - Object to the processing of their data, particularly in cases related to marketing.

  - Data portability, allowing them to request their data in a structured, commonly used, and machine-readable format.

 5. Data Use and Processing

Limited Use: Personal data will be used only for the purposes stated at the time of collection and will not be used in a manner incompatible with these purposes.

Marketing Communications: Participants may choose to receive marketing communications by opting in. They can opt out at any time.

 6. Data Security and Retention

Security Measures: We implement appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction.

Retention Period: Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Data not needed for ongoing purposes will be securely deleted or anonymized.

7. Data Sharing and Transfer

Third-Party Sharing: Personal data will not be shared with third parties without the explicit consent of the participant, unless required by law or for the purposes of administering the competition through third-party service providers who are bound by confidentiality agreements.

International Transfers: If personal data is transferred outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards in accordance with GDPR requirements.

8. Data Breach Management

In the event of a data breach that poses a risk to participants’ rights and freedoms, the Company will notify the Isle of Man Information Commissioner and the affected individuals as required by law.

9. Contact Information

For any questions, concerns, or requests related to this data protection policy, please contact:

Data Protection Officer (DPO): Janette Pledger

Email: info@wickdsoy.co.uk

Phone: 07624473480

- **Address**: 3 Alexander Drive, Douglas, IM2 3QD 

10. Policy Updates and Compliance

This policy is reviewed regularly and updated as necessary to comply with changes in laws and business practices. Participants will be notified of significant changes.

The Company complies with the GDPR as applied in the Isle of Man and other relevant data protection laws.

---