Privacy Policy

Effective date: 27 September 2026 · Version 2026-09-27-v1

This notice explains how Concept Games ("we", "us" or "our") collects and uses personal information when you use the One Big Ticket mobile prize-ordering service. Concept Games is the data controller.

Concept Games
Marcon House
Wyther Lane
Leeds
LS5 3BT
Telephone: 0113 230 2666
Website: www.conceptgames.co.uk
Privacy enquiries: privacy@obtshop.co.uk

Information we collect

• Your email address and any name or contact details you choose to provide.
• Your order, collection code, selected prizes, ticket information and order status.
• For customer play-card orders, the minimum card reference and balance information needed to validate and fulfil the order.
• Your marketing choice and when, where and under which wording it was made or withdrawn.
• Limited technical and security information generated by our hosting service.

Why we use it and our lawful bases

Purpose	Lawful basis
Accepting, validating, fulfilling and updating you about your prize order.	Performance of our contract with you.
Preventing duplicate ticket use, misuse and fraud, and keeping the service secure.	Our legitimate interests in protecting customers and the business.
Meeting accounting, legal and regulatory obligations.	Compliance with a legal obligation.
Sending optional marketing emails about our own offers, news and events.	Your consent. Marketing is not required to place an order.

Marketing emails

We send marketing email only where you actively select the separate, unticked marketing option. We record the consent date, source and wording. You can withdraw at any time using the unsubscribe option in a marketing email or by contacting us. Withdrawal does not affect earlier lawful processing. We keep a minimal suppression record so we do not contact you again by mistake.

Who we share information with

Access is limited to authorised staff who process orders or manage customer preferences. Contracted website, database, email, security and IT providers may process information only on our instructions and under appropriate data-protection terms. We do not sell personal information. We may disclose it where required by law or for legal claims.

International transfers

We aim to keep this service's information in the UK or European Economic Area. If a provider transfers it elsewhere, we require an approved legal safeguard and appropriate security measures.

How long we keep information

• Order and transaction records: normally six years after the relevant accounting period where needed for legal, accounting or dispute purposes.
• Marketing contact and consent records: while consent remains current, with inactive records reviewed at least every 24 months.
• Opt-out records: the minimum email and preference information needed to honour the objection.
• Routine security and diagnostic logs: normally no longer than 90 days unless needed for an incident.

We securely delete or anonymise information when it is no longer required.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability, or object to use of your information. You always have the right to object to direct marketing and withdraw marketing consent. Contact privacy@obtshop.co.uk. We may need to verify your identity and will normally respond within one month.

Children

Prize orders may be used by families, but our email marketing option is for people aged 18 or over. We do not knowingly use a child's email address for direct marketing.

Cookies and local storage

We use only storage necessary for the basket, ticket scanning, security and order process. We do not currently use advertising cookies. Optional analytics or advertising technologies will not be enabled without the explanation and consent required by law.

Security

We use encrypted connections, access controls, restricted staff access and audit records. No internet service is risk-free, but we review safeguards and limit collection to what is needed.

Complaints

Please contact us first so we can try to resolve your concern. You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Changes to this notice

We review this notice regularly. Material changes will be shown here and, where appropriate, brought to affected customers' attention. A new marketing purpose will require a new choice where consent is the lawful basis.