隐私政策 — Coforyou

1. Who is responsible

COMPANY LEGAL NAME of REGISTERED ADDRESS is responsible for the personal information described here. You can reach our data protection contact at DATA PROTECTION CONTACT, or through the contact form on this site.

2. What we collect

We collect what the service actually needs, and no more:

Account details — your name, display name, email address, mobile number, language and country.
Claim information — the campaign, the channel you bought through, the purchase date and amount, and the receipt or order confirmation you upload. Receipts often contain more than the purchase itself; we use only what is needed to assess and reconcile the claim.
Account activity — your points balance and history, membership tier, campaign entries, prize wins and reward redemptions.
Prize collection details — the recipient name, verified mobile number and delivery address you confirm when you win.
Messages you send us through the contact form, including any attachment.
Technical information — device, browser and general location derived from your IP address, and how you use the site.

3. Why we use it, and on what basis

To operate your account, assess claims, credit points, run draws, deliver prizes, answer your questions, keep the service secure, detect fraudulent claims, and meet our record-keeping obligations.

Our lawful basis for each of these purposes is LAWFUL BASIS.

4. Winner announcements are public

This is the one place your information is deliberately shown to people who are not you. When you win, we publish a shortened form of your name and the last four digits of your member number on a public page, with the campaign, prize and draw date.

That page can be reached without signing in and may be indexed by search engines. Your full name, contact details, address and collection arrangements are never published.

You can ask not to appear. Tell us before the draw closes and we will record it against your account.

5. Who we share it with

Partner brands, for reconciliation. To confirm a claimed purchase is real, we share what is needed to match it against the brand’s own sales record. What passes between us is WHAT IS SHARED WITH PARTNER BRANDS.

Delivery partners, when you win a prize, so they can deliver it — the recipient name, mobile number and address you confirmed.

Service providers who host the site, send our email and store uploaded receipts, under contract and only on our instructions.

Authorities, where the law requires it.

We do not sell personal information, and we do not share it with partner brands for their own marketing unless you have separately agreed to that.

6. Where it is processed

The site and its data are hosted on infrastructure that may process information outside your own country. Where information is transferred across borders, we rely on TRANSFER SAFEGUARDS.

7. How long we keep it

Account information is kept while your account is open. Claim records and receipts are kept CLAIM RETENTION PERIOD, because a claim can be reconciled, queried or reversed after it is approved. Published winner records are kept WINNER RECORD RETENTION PERIOD.

When you close your account we delete or anonymise what we no longer need, keeping only what we are required to retain.

8. Your rights

You can ask for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Some of your account information you can see and correct yourself in your profile.

Where a request would remove something we need to keep — a claim record under reconciliation, for example — we will explain what we are keeping and why.

The specific rights available to you depend on where you live: APPLICABLE PRIVACY RIGHTS AND COMPLAINT ROUTE.

9. Cookies and measurement

We use what the site needs to work — keeping you signed in and remembering your language. Any measurement or analytics we add beyond that is described here: ANALYTICS AND COOKIES IN USE.

10. Security

We protect information in transit and at rest, restrict who can see uploaded receipts, and design screens so that private details stay behind sign-in. No system is perfectly secure, and we will tell you and the relevant authority if a breach affects you.

11. Changes to this policy

We update this policy when what we do changes. The date at the top of the page tells you when it last changed, and we will tell you directly about changes that materially affect you.