Privacy policy

Clear information about what we collect and why.

Who is responsible for your information

Joseph Ryan trading as WinHive is the data controller for WinHive. Contact hello@winhive.co.uk or write to WinHive
Suite 201F
60 Frederick Street
Birmingham
B1 3HS.

Information we collect

We may collect identity and contact details, date of birth, account credentials, address, entry and ticket records, prize choices, payment references and limited card metadata supplied by our payment provider, WinHive transaction IDs, order and ticket records, optional winner feedback and winner photos you choose to submit, the IP address and browser/device information recorded when an entry order is placed, communications including live-chat messages, temporary HiveProof draw-room chat messages, image attachments/screenshots and contact details supplied through live support, complaints, responsible-play settings, referral codes and referral/reward records, affiliate applications, affiliate tracking and signup codes, affiliate earnings and withdrawal records, encrypted temporary bank details supplied by cash-prize winners for payout, encrypted affiliate bank details supplied for payouts, promotional codes and redemption records, Daily Hive Cell claim records including the bee outcome, value, server outcome number, redemption state and hashed IP/browser information used to enforce the free daily limit and investigate abuse, hashed registration IP and browser/device hashes used for referral or promotional-offer abuse checks, hashed live-chat connection information used for spam and abuse controls, security logs, optional privacy-masked session replay activity and marketing preferences. If you choose Continue with Google, Google provides a unique account identifier, your verified email address and basic profile name; WinHive never receives your Google password. We do not receive or store full payment-card numbers or security codes.

Why we use it

  • Contract: create accounts, supply Hive Credit and entries, provide customer support and live chat, administer Daily Hive, referral, affiliate and promotional rewards and draws, contact winners and fulfil prizes.
  • Legal obligations: tax and accounting records, fraud prevention, age and identity checks, consumer rights and regulatory enquiries.
  • Legitimate interests: secure the service, operate and protect Daily Hive, referral, promotional and support services, enforce free-claim limits, prevent abuse, investigate disputes, improve the website and keep auditable records.
  • Consent: optional marketing emails, non-essential cookies, and public display of winner feedback/photos where a winner explicitly agrees. Consent can be withdrawn at any time.

Account security and multiple-account checks

To protect competitions and free promotions from duplicate-account abuse, WinHive uses first-party fraud-prevention signals including keyed hashes derived from IP addresses, a 180-day first-party security device identifier, browser/device request characteristics, normalised email mailbox identity, phone number, saved postal address, name/date-of-birth combinations and the timing of registrations, logins, entries and Daily Hive activity. These signals are used only for security, fraud prevention and promotion integrity.

The system assigns a risk score from several signals. A shared IP address alone does not place an account on hold. Where the combined evidence reaches the review threshold, new entries and Daily Hive claims may be temporarily paused while an administrator reviews the account. Existing tickets and prizes are not automatically voided by the score. Customers can contact WinHive support to explain shared households, devices or connections and request human review.

Optional rewarded surveys

If you choose Earn Hive Credits, WinHive can show surveys supplied by CPX Research. WinHive creates a random survey identifier for your account and sends that identifier to CPX so an eligible completion can be matched back to the correct WinHive account. WinHive does not place your account email address, name or internal database user ID into the CPX survey link. CPX may ask you directly for profile information or survey answers within its own survey experience and processes that information under its own privacy arrangements. CPX sends WinHive a signed transaction reference, reward amount, event status and related technical information so we can add promotional Hive Credit or reverse a reward CPX later cancels.

Who receives it

We share only what is reasonably necessary with Cashflows and relevant acquiring/payment partners, hosting and email providers, Google when you choose its identity service, CPX Research when you voluntarily use rewarded surveys, professional advisers, delivery and prize suppliers, identity/fraud services, independent draw or instant-win auditors, regulators, courts and law-enforcement bodies. We do not sell personal information.

International transfers

Where a supplier processes information outside the UK, we use an approved safeguard such as UK adequacy regulations or contractual protections and assess the transfer where required.

How long we keep it

Account and transaction recordsNormally six years after the relevant transaction or account closure for tax, contract and dispute records.
Entry-order evidenceOrder timestamps, accepted terms hashes, IP addresses and browser/device information are normally retained with the linked transaction for up to six years where needed for fraud, chargeback or contract evidence.
Referral, affiliate and promotional-code recordsNormally six years after the linked reward, affiliate payout or qualifying transaction where needed for accounting, fraud prevention and dispute evidence. Unsuccessful affiliate application details are reviewed periodically and removed when they are no longer needed.
Rewarded-survey recordsCPX transaction references, pseudonymous survey identifiers, credited or reversed Hive Credit amounts and provider-status evidence are normally retained with the linked Hive Credit transaction for up to six years where needed for accounting, fraud prevention and disputes. Survey answers themselves are not collected by WinHive through the CPX survey wall.
Daily Hive recordsDaily Cell outcomes, collection/redemption records and associated hashed abuse-prevention identifiers are normally retained for up to six years where needed to evidence promotional Hive Credit, investigate manipulation or resolve a complaint. Data may be anonymised or removed earlier where it is no longer needed.
Cash-prize winner bank detailsEncrypted and kept only while the cash prize is awaiting payment. The stored account holder name, sort code and account number are automatically deleted when the prize is marked fulfilled or cancelled. A non-sensitive payment reference and payout timestamps may remain with the prize record for accounting and dispute evidence.
Affiliate bank detailsKept only while needed to operate the affiliate payout relationship and any reasonable accounting or dispute period, then deleted or anonymised where appropriate.
Entry, draw and audit recordsNormally six years after the competition closes, longer only where a live dispute or legal requirement applies.
Unsuccessful identity materialOnly for the verification period and a short dispute window unless law requires longer.
Support and live-chat recordsMessages and any screenshots you choose to attach are normally retained for up to two years for customer service, fraud prevention and dispute handling, unless a longer period is needed for a live complaint or legal issue.
HiveProof LIVE draw chatTemporary member messages posted in a HiveProof LIVE draw room are normally removed after 30 days. Draw and audit evidence is retained separately from the chat.
Winner feedback and photosPending winner photos are held in private storage while an administrator reviews them. Denied photos are removed. Approved feedback/photos may remain with the published winner result while consent remains in place and while reasonably needed for prize, reward and audit records. Contact WinHive if you want public-display consent withdrawn.
Marketing consentUntil withdrawn, plus a suppression record so we respect the request.
Security logsNormally up to 12 months unless needed to investigate abuse.
Session replaysOptional privacy-masked interaction replays are normally deleted automatically after 30 days. Sensitive pages and form values are excluded from recording.

Your rights

You may ask for access, correction, deletion, restriction, portability or object to certain processing. You may withdraw consent. Rights can depend on the reason we hold the information. Email us to make a request; we may need to verify identity. You may also complain to the UK Information Commissioner's Office.

Marketing

Marketing signup is optional and unticked by default. We use consent unless the limited customer “soft opt-in” applies and is appropriate. Every marketing message includes an unsubscribe route, and the public unsubscribe form can be used at any time. Service messages about accounts, entries, security or prizes are not marketing.

Optional measurement and cookies

WinHive uses essential session and security cookies. Microsoft Advertising UET loads in Consent Mode with advertising storage denied until you make a choice; Microsoft states that its denied-consent mode does not write UET first-party cookies and limits pre-consent measurement. If you choose to allow optional cookies, WinHive updates Microsoft UET to granted and the Reddit Pixel may also measure page visits and successful registrations attributed to advertising. WinHive may additionally create privacy-masked session replays to understand navigation, scrolling and clicks on ordinary site pages. Sensitive pages and form values are excluded. You can change your choice using Cookie settings in the footer. See the Cookie notice.

Security and changes

We use access controls, secure sessions, password hashing, encrypted SMTP, cash-prize winner bank details and affiliate bank details, unique transaction references, linked provider and order records, audit records and limited administrator access. Transaction and order evidence may be used to investigate refunds, chargebacks, unauthorised-payment reports and account abuse. No system is risk-free. Material privacy changes will be shown clearly and, where appropriate, emailed to account holders.