1. Who we are and what this notice covers

Yeo Valley Farms (Production) Limited (trading as “Ubley”) is the controller of and responsible for your personal data in connection with the Ubley prize draw (referred to as “Ubley”, “we”, “us” or “our” in this notice). We are a company registered in England and Wales under company number 01283809, with our registered office at Yeo Valley HQ, Rhodyate, Blagdon, Somerset, BS40 7YE.

​

This notice explains how we handle the personal data you provide when you enter the Ubley prize draw. For how we handle personal data in connection with the Ubley website generally, see the Ubley Website Privacy Notice.

​

1. Who can enter.

The prize draw is open to residents of Great Britain (excluding Northern Ireland) aged 18 or over. It is only open to people who receive it through one of our participating publications; it is not open to the general public. The prize draw is not intended for children, and we do not knowingly collect personal data relating to children.

​

2. The personal data we collect

We collect only what you provide to enter and, if you win, to receive your prize:

• Entry Data — your name, email address and delivery address, and the other details requested on the entry form.

• Fulfilment Data — where you win, the information we need to deliver your prize, namely your name, delivery address, company, job title and mobile number.

We do not collect payment or financial data in connection with the prize draw.

​

3. How your personal data is collected

The prize draw is promoted through selected participating publications, each of which emails it to its own subscriber database. You enter by following the instructions in the email from the relevant publication and providing the details requested. We then receive your entry so that we can run the draw and, if you win, fulfil your prize.

Each participating publication is an independent controller of its own subscriber database and of the entry email it sends. This notice covers our use of your personal data as the promoter of the draw; it does not cover how a publication handles its own database, which is governed by that publication’s own privacy policy. We do not pass your entry details back to the publication you entered through, or to any of our promotional partners.

​

4. How we use your personal data and our lawful basis

We use your Entry Data to administer the prize draw — accepting and checking entries and selecting winners at random — and your Fulfilment Data to deliver prizes to winners. We rely on our legitimate interests in running the draw fairly and delivering the prizes entrants have won. We also use this data to keep proper records and to comply with our legal obligations.

​

We make limited winner information (surname and county) available on request, to show that a valid award took place, which we again do on the basis of our legitimate interests in running the draw transparently. We will only use a winner in any post-event publicity with that winner’s consent.

​

We do not use your data for marketing, and we carry out no wider promotional or customer-relationship activity through the prize draw. If that changes in future, we will update this notice and obtain any consent the law requires before contacting you. Winners are selected at random: we do not make decisions about you by automated means that produce legal or similarly significant effects, and we do not profile you.

​

5. Who we share your personal data with

We may share your personal data with:

• Our logistics provider, Virginia Hayward which produces delivery labels for winners’ prizes.

• DPD, our carrier, which delivers prizes to winners.

• Professional advisers and authorities, where we are required to share data to comply with the law or to protect our rights.

Our logistics provider acts as our processor and may only use your data on our instructions and under a written contract. We do not sell your personal data, and we do not share it with any third party for their own marketing.

​

6. Where we store your personal data

We and our service providers store and process your personal data in the United Kingdom. We do not transfer your personal data outside the UK.

​

7. Data security

We have put in place appropriate security measures to protect your personal data against being accidentally lost, used or accessed in an unauthorised way. We also limit access to your personal data to those who need it, and they are subject to a duty of confidentiality.

​

8. How long we keep your personal data

We keep your personal data only for as long as we need it to run the draw and deliver prizes. We will delete entry and fulfilment data within three months of prizes being dispatched, unless we need to keep it longer to deal with a query, complaint or legal claim.

​