Privacy policy

The Policy was last updated on January 2, 2026.

INTRODUCTION
1. ALMAGROVE LTD, a company incorporated and registered in England and Wales under company number 03000668, having its registered office at 458 Wimborne Road, Bournemouth, Dorset, BH9 2EY, United Kingdom and whose contact email is hello@jambala.uk (“Almagrove Ltd”, “Jambala”, “Company”, “we”, “us”, or “our”). The Company operates an interactive prize competition platform under the brand name Jambala, providing online competitions, draws, and related promotional services through its website and associated communication channels. Users, participants, and visitors (including those merely browsing the website) shall be referred to as “You”, “Your”, “Yourself”, or “User”, as the context may require, for the purpose of using the Website and the Services provided thereunder in accordance with this Privacy Policy and Our Terms of Use (as defined below).
2. This Privacy Policy (“Policy”) outlines Our practices and policies, the kinds of information that We may collect from You when You access or use the Website, the reasons and methods for such collection, how We use and disclose the information that We gather from You in connection with Your use of the Website and Services, as well as the security practices and procedures for safeguarding Your privacy in relation to the information shared with Us. You agree to be bound by the provisions of this Policy by accessing and using the Website and Services, which shall be deemed to create a legal contract between You and Us. It is recommended that You read and keep Yourself updated with any modifications to this Policy to ensure that You understand Our policies and practices.
3. Unless otherwise defined in this Policy, all capitalised terms shall have the meaning ascribed to them in Our Terms of Use, accessible at https://jambala.co.uk/terms-and-conditions (“Terms of Use”), or in any other agreement that You may have entered into with Us. This Policy must be read together with, and forms an integral part of, Our Terms of Use, which collectively govern Your access to and use of the Website and Services.
4. For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Almagrove Ltd is the data controller of the personal data described in this Policy. This Policy applies to personal data processed by Almagrove Ltd in connection with the operation of the Jambala prize competition platform and related services (the “Services”) provided via the Website at https://jambala.co.uk, mobile applications, emails, social media pages, messaging platforms, and any other online or offline channels that We operate in relation to those Services (collectively, the “Website”).
5. This Policy shall be read in conjunction with, and construed in accordance with, the laws of England and Wales, including, without limitation, the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), and any other applicable data protection or privacy laws and guidance issued by the Information Commissioner’s Office (ICO). This Policy forms a legally binding electronic agreement between Us and You, governing the processing and protection of Your personal data when You use Our Website or Services.
TYPES OF DATA WE COLLECT
1. Information Provided To Us: We collect the information you voluntarily provide when you create an account, enter a competition, make a payment, or communicate with us. This may include:
  1. Identity and Contact Details: full name, date of birth (to confirm eligibility), email address, phone number, postal address, county and country of residence.
  2. Account Details: username, password, and other registration information.
  3. Payment and Billing Information: billing address and limited payment details (such as the last four digits of your card number or transaction ID).
  4. Communication Data: any correspondence you send us (by email, WhatsApp, social media, or other means) and your marketing preferences.
2. Data Collected Automatically: When you visit or use our Website, certain information is collected automatically through cookies, analytics tools and similar technologies (“Trackers”). This may include:
  1. Technical Data: internet protocol (IP) address, browser type, operating system, device type, device identifiers and time zone.
  2. Usage Data: the pages you visit, features you use, time spent on the Website, and interactions with our communications (such as opening emails or clicking links).
  3. Advertising Identifiers: unique device IDs or cookies used for analytics and targeted advertising, managed in accordance with our Cookie Policy.
3. Optional or Non-Mandatory Data: In some cases, we may ask for additional information (such as survey responses, feedback, or preferences) to help improve our Services. Providing this information is optional, and declining to do so will not affect your access to the core functionality of the Website.
4. Accuracy of Information: You are responsible for ensuring that the personal information you provide to us is accurate, complete, and up to date. Failure to provide certain information may limit our ability to provide you with certain features of the Services.
NOTICE AND YOUR ACKNOWLEDGEMENT
1. Acceptance of this Policy: By accessing or using Our Website and Services, You acknowledge that You have read and understood this Privacy Policy and agree to the collection, use, disclosure, and other processing of Your personal data as described herein. Your continued use of the Website constitutes Your acceptance of this Policy and any updates made from time to time.
2. Lawful Bases for Processing: We collect and process Your personal data only for specific, lawful, and legitimate purposes. Each purpose is supported by one or more lawful bases under the UK GDPR and the Data Protection Act 2018.
  1. Account Creation and Management: To create, verify, and manage Your account, allow You to participate in Our prize competitions, and provide You with access to the Website and Services. Lawful basis: Performance of a contract.
  2. Payment Processing and Prize Fulfilment: To process Your payments, verify Your eligibility, communicate competition results, and fulfil prizes in accordance with Our Privacy. Lawful basis: Performance of a contract and compliance with legal obligations.
  3. Service Communications: To send You necessary service-related messages such as confirmations, notifications of competition entries, results, and updates to Our Terms or this Policy. Lawful basis: Performance of a contract or compliance with legal obligations.
  4. Improvement and Personalisation: To operate, maintain, improve, and personalise Our Website, Services, and user experience based on Your interactions and preferences. Lawful basis: Legitimate interests ensuring We deliver an effective, relevant, and user-friendly platform.
  5. Fraud Prevention and Legal Compliance: To protect the integrity of Our Website, detect and prevent fraudulent or illegal activity, verify age and identity, comply with anti–money laundering laws, and respond to lawful information requests. Lawful basis: Legal obligation and legitimate interests ensuring the safety, security, and compliance of Our operations.
  6. Marketing and Promotional Communications: To provide You with marketing information, newsletters, and promotional offers that may be of interest to You, in accordance with Your preferences. Lawful basis: Consent, or legitimate interests where permitted by law. You may opt out of receiving marketing communications at any time by clicking the “unsubscribe” link in Our emails or contacting Us directly.
  7. Customer Support and Enquiries: To respond to Your enquiries, handle complaints, or provide customer support related to the Website and Services. Lawful basis: Performance of a contract and legitimate interests ensuring efficient service and communication.
  8. Compliance and Protection of Our Rights: To comply with applicable legal and regulatory obligations, respond to court orders or lawful government requests, and protect or enforce Our rights, interests, and the safety of Our users. Lawful basis: Legal obligation and legitimate interests.
3. The Rights of Users: Under the UK GDPR, You have the following rights in relation to Your personal data:
  1. Right of Access: You can ask Us whether We process Your personal data and request a copy of that information.
  2. Right to Rectification: You can request correction of any inaccurate or incomplete personal data We hold about You.
  3. Right to Erasure (“Right to be Forgotten”): You can ask Us to delete Your personal data in certain circumstances, such as when it is no longer needed for the purpose for which it was collected.
  4. Right to Restrict Processing: You can request that We temporarily suspend processing of Your personal data in specific situations.
  5. Right to Data Portability: You can request to receive Your personal data in a structured, commonly used, and machine-readable format and, where feasible, ask Us to transfer it to another controller.
  6. Right to Object: You can object to processing that We carry out based on Our legitimate interests and can object at any time to Your data being used for direct marketing.
  7. Right to Withdraw Consent: You can withdraw any consent You have previously provided. This will not affect the lawfulness of processing carried out before withdrawal.
  8. Right to Lodge a Complaint: You can raise concerns with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
    Website: www.ico.org.uk Telephone: 0303 123 1113
4. International Users: Our Website is operated from the United Kingdom and intended primarily for users located within the UK. If You access the Website from outside the UK, You do so at Your own initiative and are responsible for compliance with local laws where applicable.
MODE AND PLACE OF PROCESSING THE DATA
1. Methods of Processing: We process personal data using secure systems and procedures designed to protect it from unauthorised access, alteration, disclosure or destruction. Processing is carried out by Our authorised personnel or by trusted third parties who provide technical, operational or support services to Us, such as IT, hosting, payment, or marketing partners. All such parties are bound by confidentiality and data protection obligations, and where they act as Our data processors, they do so under written agreements in compliance with the UK GDPR.
2. Place of Processing: Personal data is processed primarily at Our offices in the United Kingdom and through Our secure servers. Some processing activities or support services may be performed by Our affiliates or service providers located in other jurisdictions, where data protection laws may differ from those in the UK. Where We transfer personal data outside the United Kingdom, We ensure that appropriate safeguards are in place such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses to provide an adequate level of protection for Your data.
DATA SHARING AND DISCLOSURE
1. General Disclosure: We value Your privacy and do not sell, rent, or trade Your personal data. We only share personal data when it is necessary for the operation of Our Services, compliance with legal obligations, or the protection of Our legitimate interests, and always in accordance with the UK GDPR.
2. Disclosure to Service Providers: We may share Your personal data with trusted third-party service providers who assist Us in delivering Our Services, including:
  1. IT infrastructure and hosting providers.
  2. Payment processors and fraud prevention partners.
  3. Customer support and communication tools.
  4. Marketing and analytics service providers (subject to Your consent, where applicable) and
  5. Professional advisers, such as auditors, legal counsel, and consultants.
  All such third parties are bound by contractual obligations to keep personal data secure and to use it only for the purpose of providing services to Us.
DATA RETENTION, SUPPRESSION AND MINORS
1. Retention periods. We retain personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable UK law. Indicative retention periods are:
  1. Account profile and contact details: for the duration the account remains active, and for up to six (6) years after last activity, in line with the limitation period under the Limitation Act 1980.
  2. Competition entry, transaction and payment records: for a minimum of seven (7) years from the date of the transaction, in line with HMRC and accounting record-keeping requirements.
  3. Marketing consent records and proof of consent: for the duration of the consent and for two (2) years following its withdrawal, to evidence lawful basis under UK GDPR and PECR.
  4. Customer support correspondence: for up to three (3) years from closure of the relevant matter.
  5. Website analytics and cookie data: in line with the retention period of each underlying tool, as disclosed in Our Cookie Policy.
  At the end of the applicable retention period We will either securely delete the data or anonymise it so that it can no longer be associated with You.
2. Suppression list (self-exclusion and account pause). Where You request a temporary pause, self-exclusion (minimum six months), or permanent closure of Your account, We add Your relevant contact identifiers to an internal suppression list. While on the suppression list We will not send You marketing communications by any channel (including email, SMS and push notifications), and We will not accept entries from Your account. We will however retain a minimum data set (such as Your hashed email address and exclusion start and end dates) for as long as the exclusion is in force, plus six (6) months thereafter for fraud-prevention and audit purposes. You may at any time exercise Your data subject rights in relation to data held on the suppression list by contacting Us at hello@jambala.co.uk.
3. Minors' data. Our Services are intended for users who are aged eighteen (18) or over. We do not knowingly collect personal data from any individual under the age of 18. If We become aware that We have collected personal data from a person under 18, We will (a) close the associated account; (b) delete or anonymise the personal data within thirty (30) days of becoming aware, except where We are required by law to retain specific records (in which case the data will be securely segregated and used solely for that legal purpose); and (c) where appropriate, notify the parent or legal guardian. If You believe that We may have collected personal data from a person under 18, please contact Us promptly at hello@jambala.co.uk so We can take action.

Jambala is a signatory of the DCMS Voluntary Code of Good Practice for Prize Draw Operators (2026). See our public compliance statement at /pages/voluntary-code-compliance for details of every measure we apply, including responsible-play tools, free-entry route, age verification, harm-monitoring, complaints/ADR routes, and verifiable RNG.