Privacy Policy

1. Who we are

Day Out With The Kids Ltd ("DOWTK", "we", "us") is the data controller for personal data collected through the Merlin Summer of Stays entry form. You can contact us at hello@dayoutwiththekids.co.uk.

Merlin Entertainments Ltd ("Merlin") is a campaign partner and prize provider. Where we share competition data with Merlin for the purposes set out below, Merlin acts as an independent controller for its own subsequent use of that data.

2. The information we collect

When you enter the competition we collect:

• your first name and last name;
• your email address;
• the page on which you tell us you found the hidden sun;
• a short description of your family and why you would like to win;
• your consent choices in respect of marketing and terms;
• basic technical information automatically collected by our website, such as IP address, device type and browser, for security and analytics purposes.

3. How we use your information

We use your personal data to:

• administer the competition, including reviewing entries, verifying correct answers, drawing a winner and delivering the prize;
• contact you about your entry, including notifying the winner;
• share the winner's contact details with Merlin so that the resort stays can be booked and coordinated;
• send you DOWTK marketing emails, where you have opted in;
• protect against fraud and enforce our terms;
• comply with our legal and regulatory obligations.

4. Legal bases

We process your personal data under the following lawful bases of the UK GDPR:

• Contract: processing necessary to administer the competition you have entered.
• Consent: for marketing communications. You can withdraw consent at any time.
• Legitimate interests: for fraud prevention, security, analytics on our website and the reasonable promotion of the campaign in ways that do not override your rights.
• Legal obligation: where we are required to retain records or respond to lawful requests from regulators or authorities.

5. Who we share your data with

We share personal data with:

• Merlin, for prize fulfilment and coordination of stays with the winner;
• our hosting, database, email and analytics service providers, who process data on our behalf under written contracts;
• professional advisors, regulators or authorities where required by law.

We do not sell your personal data.

6. International transfers

Some of our service providers may process data outside the UK. Where this happens we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement, to protect your data to a standard equivalent to UK law.

7. How long we keep your data

• Entry data: kept for the duration of the competition and for up to 12 months after the Closing Date for prize administration, audit and dispute resolution.
• Winner records: retained for up to 6 years to comply with audit and tax requirements.
• Marketing data: kept until you unsubscribe or otherwise withdraw consent.

8. Your rights

Under UK data protection law you have the right to: access your personal data; have inaccurate data corrected; have data erased in certain circumstances; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting the lawfulness of earlier processing.

To exercise any of these rights, please email hello@dayoutwiththekids.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we have handled your data.

9. Security

We use appropriate technical and organisational measures to protect your personal data, including encrypted transport, access controls and trusted hosting providers. No system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date below will reflect the most recent changes.