Last updated: February 2026
This Privacy Policy explains how Winabrandnew, operated by Wwwanted B.V., collects, uses, stores, and protects your personal data. We are committed to safeguarding your privacy and ensuring compliance with the UK GDPR and the EU GDPR.
1. Who We Are
Winabrandnew is operated by:
Wwwanted B.V.
CoC number: 55786146
Sperwershof 10, 7622BP Borne, The Netherlands
Email: support@winabrandnew.com
Wwwanted B.V. is the data controller responsible for processing your personal data.
2. Data We Collect
We may collect and process the following types of personal data:
- Identification data: name, email address, phone number, date of birth
- Account data: login details, subscription preferences (email/SMS), SSO account links
- Payment data: credit purchase details (amount, method, transaction ID) – processed securely by our payment provider (Mollie)
- Participation data: Challenge entries, scores, timings, and prize claims
- Communication data: records of emails, SMS notifications, and support requests
- Technical data: IP address, device/browser type, and security/fraud detection data (e.g., fingerprinting logs)
We do not collect or store sensitive categories of data (such as health information).
3. How We Use Your Data
Your personal data is used only for the following purposes:
- To administer and operate Challenges
- To verify eligibility and determine winners
- To process payments and credit purchases
- To deliver prizes and handle claims (including identity/address verification)
- To send service communications (e.g., Challenge updates, results)
- To send promotional communications (only if you have subscribed via email or SMS)
- To prevent fraud, abuse, or technical misuse of our platform
- To comply with legal and regulatory obligations
- To analyse website usage and improve our services
- To deliver targeted advertising on social media platforms
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contractual necessity: to perform our agreement with you when you participate in a Challenge or purchase credits.
- Legitimate interests: to ensure fair play, security, fraud prevention, and to improve our services.
- Consent: for marketing communications via email or SMS, and for non-essential cookies (you may withdraw at any time).
- Legal obligations: to comply with tax, accounting, and regulatory requirements.
5. Cookies, Analytics & Advertising
We use cookies and similar technologies to improve your experience, analyse how our website is used, and deliver targeted advertising.
5.1 Google Analytics 4
We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited. GA4 collects information about:
- Pages you visit and how long you spend on them
- How you arrived at our website (referral source)
- Your approximate location (country/city level)
- Device and browser information
- Interactions with our website (clicks, scrolls, form submissions)
This data is processed to understand user behaviour and improve our services. Google may transfer data to servers in the United States. Google is certified under the EU-US Data Privacy Framework. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
5.2 Google Tag Manager
We use Google Tag Manager (GTM) to manage tracking scripts on our website. GTM itself does not collect personal data, but it enables us to deploy analytics and marketing tags. All tags deployed via GTM are governed by this Privacy Policy.
5.3 Facebook Pixel (Meta)
We use the Facebook Pixel, a tracking tool provided by Meta Platforms Ireland Limited. The Facebook Pixel collects information about:
- Pages you visit on our website
- Actions you take (registrations, purchases, challenge participation)
- Device and browser information
This data is used to:
- Measure the effectiveness of our Facebook/Instagram advertising
- Create custom audiences for targeted advertising
- Optimise ad delivery to reach people likely to be interested in our services
Meta may transfer data to servers in the United States. Meta is certified under the EU-US Data Privacy Framework. You can opt out of personalised advertising by adjusting your Facebook Ad Preferences.
5.4 TikTok Pixel
We use the TikTok Pixel, a tracking tool provided by TikTok Technology Limited. The TikTok Pixel collects information about:
- Pages you visit on our website
- Actions you take (registrations, purchases, challenge participation)
- Device and browser information
This data is used to:
- Measure the effectiveness of our TikTok advertising
- Create custom audiences for targeted advertising
- Optimise ad delivery to reach relevant users
TikTok may transfer data to servers outside the EU/UK. You can opt out of personalised advertising by adjusting your TikTok settings or visiting TikTok's Privacy Policy for more options.
5.5 Google reCAPTCHA
We use Google reCAPTCHA to protect our website from spam and abuse. reCAPTCHA analyses your behaviour on our site (mouse movements, time on page) to determine if you are human. This service is provided by Google and is subject to Google's Privacy Policy.
5.6 Essential Cookies
We use essential cookies that are strictly necessary for the operation of our website, including:
- Session cookies to keep you logged in
- Security cookies to prevent fraud
- Preference cookies to remember your settings
These cookies do not require consent as they are essential for the website to function.
6. Sharing of Data
We do not sell your personal data. We only share data when necessary:
- With payment providers (Mollie) to process transactions securely.
- With analytics providers (Google Analytics) to analyse website usage and improve our services.
- With advertising platforms (Meta/Facebook, TikTok) to measure advertising effectiveness and deliver targeted ads.
- With authentication providers when you choose to sign in using a third-party service:
- Google Sign-In: We receive your name, email address, and profile picture from Google.
- Facebook Login: We receive your name and email address from Facebook (Meta).
- Sign in with Apple: We receive your name and email address (or a private relay email) from Apple.
These providers only share data when you explicitly authorise the connection. We do not share your Winabrandnew activity back with these providers beyond what is necessary for authentication.
- With messaging providers (Infobip) to send SMS notifications you have subscribed to.
- With email providers (Mailgun) to deliver transactional and marketing emails.
- With error monitoring services (Sentry) to identify and fix technical issues. This may include anonymised technical data.
- With hosting and infrastructure providers under strict data processing agreements.
- With regulators or authorities where legally required.
All processors act under our instructions and comply with GDPR.
7. International Transfers
Your personal data may be transferred outside the UK/EU if required for service delivery. This includes:
- Google services (Analytics, Tag Manager, reCAPTCHA, Sign-In) – Google is certified under the EU-US Data Privacy Framework
- Meta services (Facebook Pixel, Facebook Login) – Meta is certified under the EU-US Data Privacy Framework
- TikTok (TikTok Pixel) – TikTok has implemented Standard Contractual Clauses for data transfers
- Apple (Sign in with Apple) – Apple has implemented Standard Contractual Clauses
- Mailgun (email delivery) – Mailgun operates under Standard Contractual Clauses
- Infobip (SMS delivery) – Infobip operates under Standard Contractual Clauses
- Sentry (error monitoring) – Sentry is certified under the EU-US Data Privacy Framework
In all cases, we ensure adequate safeguards are in place, including standard contractual clauses (SCCs) approved by the European Commission or UK ICO, or certification under an approved data transfer mechanism.
8. Data Retention
We retain your personal data only as long as necessary:
- Account and participation data: while your account remains active
- Credit balance data: 12 months from date of purchase (credits expire after this period as stated in our Terms & Conditions)
- Payment and transaction records: minimum 7 years (legal obligation)
- Refund request records: retained with payment records (7 years) for legal and accounting purposes
- Prize claim information: up to 90 days after claim period closes
- Marketing subscriptions: until you unsubscribe
- Fraud/security logs: up to 24 months
- Analytics data: 14 months (Google Analytics default retention)
- Advertising data: as per platform policies (typically 180 days to 2 years)
After these periods, data will be securely deleted or anonymised.
9. Your Rights
You have the following rights under UK/EU GDPR:
- Access: request a copy of your personal data.
- Rectification: correct inaccuracies.
- Erasure: request deletion of your data ("right to be forgotten"). Please note: if you request account deletion, any unused credits will be forfeited in accordance with our Terms & Conditions (Section 6.2).
- Restriction: limit how your data is processed.
- Portability: receive your data in a structured format.
- Objection: opt out of processing for legitimate interests (e.g., marketing, profiling for advertising).
- Withdrawal of consent: unsubscribe from promotional messages or opt out of tracking at any time.
To exercise your rights, contact us at support@winabrandnew.com.
10. Security
We implement technical and organisational measures to protect your data against loss, misuse, and unauthorised access, including:
- Encrypted communications (SSL/HTTPS)
- Restricted access to personal data
- Fraud detection and monitoring
- Secure data storage with EU/UK-based providers
- Regular security audits and monitoring
11. Children
Our services are not directed at persons under 18. We do not knowingly collect personal data from minors. If we become aware of such collection, data will be deleted immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on our website with a new "last updated" date.
13. Complaints
If you have concerns about how your data is processed, please contact us at support@winabrandnew.com. You also have the right to lodge a complaint with:
- The Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or
- The UK Information Commissioner's Office (ICO) if you are located in the UK.
Contact
Wwwanted B.V.
CoC number: 55786146
Sperwershof 10, 7622BP Borne, The Netherlands
Email: support@winabrandnew.com
