Privacy & cookies
1. Important information and who we are
This Privacy & Cookies Policy explains how National Treasure Hunt collects and uses personal information when you use the Website or enter a Hunt.
Innovation Systems Ltd (company number 16893892) is the controller responsible for your personal data. Our registered office is 18 Mount Pleasant Terrace, Bentham, North Yorkshire, LA2 7LB. For privacy questions or to exercise your rights, email hello@nationaltreasurehunt.co.uk.
The Website and Hunts are intended for people aged 18 or over.
2. The data we collect about you
Name, date of birth and information reasonably required to verify age or eligibility.
Email address and, for postal entries, postal address. We may also receive other contact details you provide.
The Hunt entered, Squares allocated or claimed, entry method, timestamps, prize and winner information.
Information about payments, refunds, reversals and transaction references. Stripe handles card details; we do not store your full card number.
IP address, browser/device information and identifiers required to operate the Website and map.
Whether you have asked to hear from us about new Hunts.
3. How your personal data is collected
We collect information directly from you when you enter a Hunt, make a payment, submit a postal free-entry request, contact us or choose to receive marketing. We also receive limited information from service providers used to operate the Website, process payments, send email and provide maps.
4. How we use your personal data
We use personal data where necessary to administer Hunts and our contract with Entrants, allocate and identify Squares, process payments, determine and contact winners, pay prizes, prevent fraud, operate and secure the Website, keep financial and competition records, comply with legal or regulatory obligations and respond to enquiries.
We use your information for marketing only where permitted by law and in accordance with the choice you make. We do not automatically add postal free-entry entrants to a marketing list. You can unsubscribe from marketing at any time.
We may publish or make available limited winner information where required to demonstrate that a valid award took place. If a winner objects to publication, we will respect that objection as far as possible, although relevant information may still be provided to the Advertising Standards Authority where required.
5. Disclosures of your personal data
We do not sell or rent your personal data. We may share information with service providers where necessary to operate National Treasure Hunt, including:
- Stripe — payment processing.
- Resend — email delivery.
- Mapbox — map services; your browser communicates with Mapbox when maps load.
- Our hosting and infrastructure providers — Website and database hosting.
- Professional advisers, regulators or authorities — where reasonably necessary or required by law.
We require service providers processing personal data on our behalf to protect it and use it only for the purposes for which it is provided.
6. International transfers
Some of our external service providers may process personal data outside the United Kingdom. Where personal data is transferred outside the UK, we use providers and transfer arrangements intended to ensure that the information receives a level of protection required by UK data-protection law, including applicable adequacy regulations or approved contractual safeguards where required.
7. Data security
We use appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration or disclosure. Access to personal information is limited to people and service providers who need it for legitimate business purposes.
8. Data retention
Entry, transaction and associated records may be kept for up to 7 years where needed for financial, contractual, legal, regulatory or dispute-resolution purposes. Other personal information is kept only for as long as reasonably necessary for the purpose for which it was collected.
Information required to administer a live Hunt or establish and verify its result cannot normally be deleted while that Hunt is still running or while the result is being resolved.
9. Your legal rights
Depending on the circumstances, you may have rights to request access to your personal data, correction, erasure, restriction or objection to processing, and data portability. You may also withdraw consent where processing is based on consent.
To exercise a right, email hello@nationaltreasurehunt.co.uk. We normally respond within one month.
You can complain to the Information Commissioner's Office if you are unhappy with how your information has been handled.
10. Cookies and local storage
We do not use advertising or third-party analytics profiling cookies. The Website stores a random browser identifier used to identify your Squares and may store preferences such as your selected Square colour and sound setting. An administrator session cookie is used only for logged-in administrators.
The map is integral to the service. Mapbox software may store an anonymous usage identifier and receive technical information such as your IP address when map resources are requested.
You can clear browser cookies and local storage using your browser controls. Doing so may remove local identifiers used to show your Squares on that device, although an email link or other recovery method may still be available.
Last updated 13 October 2026.