Last updated: June 2026
We’re a small, one-person hobby project, so we keep things simple: we only collect the bare minimum data needed to run our fun armchair treasure hunts, and we never sell or share your information for marketing purposes.
This notice explains exactly what we collect, how we use it, how long we keep it, and your rights under UK GDPR. It’s all about transparency and trust — because we want you to feel safe joining the mystery.
When you enter a paid hunt, we collect:
Your full name
Your email address
Your submitted answer
Payment information is processed securely by our payment providers: PayPal and Stripe. We do not store full payment card details on our own servers — Stripe handles card payments securely on our behalf.
We use your name and email address only for:
Processing your hunt entry
Contacting you if you win
Sending important hunt communications (e.g. winner announcements, next hunt notifications)
Responding to any questions you send us
Your submitted answer is only used to judge the competition.
We process your data on the basis of:
Legitimate interests — to run a fair and transparent competition, contact winners, and manage the hunt properly
Your consent — for optional marketing emails about future hunts (you can withdraw this consent at any time)
Live Stream Transparency: When a hunt concludes, we stream a live random draw on Facebook to pick the winner from the correct entries.
The name of qualifying entrants are visible on screen during this live broadcast to demonstrate compliance with UK prize competition guidelines.
We do not sell, rent, or share your data with third parties for marketing purposes.
PayPal — for prize payouts (when you win)
Stripe — for processing entry payments
(Both providers have their own strong privacy policies and security standards.)
Hunt entries: Kept until the hunt ends + a short period afterwards.
Winner information: Kept for up to 3 years (for legal and transparency reasons).
Marketing emails: Kept until you unsubscribe.
Under UK GDPR you have the right to:
Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing
Restrict processing
Withdraw consent for marketing emails at any time (simple “unsubscribe” or email us)
We will respond to rights requests within 30 days (usually much faster).
We use reasonable technical and organisational measures to protect your data (e.g. secure email providers, no unnecessary storage).
However, no system is 100% secure — we cannot guarantee absolute security.
We may update this privacy notice from time to time.
The latest version will always be on this page.
Significant changes will be highlighted.
If you have any questions about this privacy notice or how we handle your data, email us: Here
We’re real people running a fun hobby project and happy to help!
Follow us on Facebook
Part of the Sleuths Group
Visit our sister sites - footballsleuths - celebritysleuths - music sleuths
2026 sofasleuths.co.uk – Sofa Sleuths. All rights reserved.