Effective Date: Friday 24 April 2026
This Privacy Notice explains what Personal Information we collect when you sign up to the Priceless.com UK – Women’s Super League 2025/26 – Win a Mascot Experience – Sweepstakes (“the Campaign”). It describes the types of Personal Information we collect, the purposes for which we collect that Personal Information, the other parties with whom we may share it and the measures we take to protect the security of the data. It also tells you about your rights and choices with respect to your Personal Information, and how you can contact us about our privacy practices. “Personal Information” means any information relating to an identified or identifiable individual.
For more information about Mastercard’s privacy practices in other contexts, please see Mastercard’s Global Privacy Notice at https://www.mastercard.com/us/en/global-privacy-notice.html.
1. Personal Information We May Collect
When you enter the Campaign, we may collect:
- Your full name
- Your phone number
- Your email address
- The match/date selection (or other entry selections)
- Confirmation that the nominated child is aged 5–12 on the day of the chosen match
- Confirmation that participants are 18+ UK resident & Mastercard cardholders only
- 16-digit Mastercard card number for authentication purposes
- Any other information you provide in the entry form or in communications about the Campaign
If you are selected as a winner (or reserve winner), we may collect and process additional information to verify eligibility and fulfil the prize, such as:
- Photographs and/or video footage captured during the prize experience
- Nominated child’s first and last name
- Winner Name
- Winner email address
- Winner phone number
- Confirmation that the nominated child will be between 5 – 12 years old
- Parent/guardian first and last name
- Parent/guardian email address and phone number
- Written confirmation of permission and/or signed consent/disclaimer forms required for participation
- Proof of parental responsibility/guardianship (where required)
- Where necessary, information to deliver the experience safely and effectively (e.g., accessibility requirements and/or emergency contact details)
If you contact us about the Campaign, we may collect:
- Details of your inquiry
- Records of our communications with you
Certain verification information (such as copies of identification, proof of address, and parental responsibility or guardianship documentation) may be collected directly by London City Lionesses or their appointed representatives for the purposes of prize fulfilment and matchday access. Where this occurs, such information will be processed in accordance with London City Lionesses’ own privacy policy.
2. How We May Use Your Personal Information
We may use your Personal Information for the purposes set out below.
|
|
|
|
Administer the Campaign (collect entries, verify eligibility, select winners/reserve winners, notify winners, and deliver prizes). |
Necessary for entering into, or performance of, a contract with you (running the prize draw and delivering the prize). |
|
Ensure the entry form and Campaign platform function properly. |
Legitimate interests (operating and administering the Campaign), and/or necessary to provide the service you request. |
|
Verify eligibility, prevent fraud, and enforce the Campaign Terms & Conditions. |
Legitimate interests (running a fair promotion, preventing fraud, protecting our rights), and/or compliance with a legal obligation. |
|
Coordinate logistics and access for prize fulfilment (including processing parent/guardian and nominated child information required for participation). |
Performance of a contract and/or legitimate interests (delivering the prize experience). Where required, consent (e.g., signed permissions/disclaimers). |
|
Capture and use photographs and/or video footage taken during the prize experience for promotional, publicity, or social media purposes (where applicable). |
Consent (where required under applicable law). |
|
Respond to questions, requests, or complaints relating to the Campaign. |
Legitimate interests (administering the Campaign and handling inquiries) and/or compliance with a legal obligation. |
|
Comply with applicable laws, regulations, and codes of practice (including recordkeeping and responding to lawful requests from authorities). |
Compliance with a legal obligation; and/or legitimate interests. |
|
Evaluate and improve our promotions (e.g., aggregated reporting on participation). |
Legitimate interests (improving our campaigns); we will use aggregated and/or de-identified information where appropriate. |
3. How We Share Your Personal Information
We may share Personal Information with:
- Mastercard’s headquarters in the U.S., our affiliates and other entities within Mastercard’s group of companies.
- Our marketing and experience fulfillment agency - “The Big Group Limited”, and other service providers, acting on our behalf.
- London City Lionesses (“LCL”) (and/or their appointed representatives), where necessary to administer and fulfil the prize experience. LCL may process any Personal Information it receives in connection with the prize fulfilment as an independent controller and as described in its privacy policy.
- The event organizer Women’s Super League Football Ltd (“WSL”) and other third parties involved in delivering the experience, where necessary to facilitate the prize fulfilment and to coordinate the mascot experience. WSL may process any Personal Information it receives in connection with the prize fulfilment as an independent controller and as described in its privacy policy.
- Event venues and stadium operators, to facilitate access, participation, and on-site logistics. Personal Information collected by the Venue/stadium will be processed as per its privacy policy which can be made available on request.
- Third parties in the event of a sale or transfer of our business or assets.
Your Personal Information may be shared by the Event Organizer or our appointed agency with third-party providers on our behalf to deliver the experience; any onward sharing will be subject to the respective provider’s privacy policy.
We may also disclose your Personal Information: (i) if required by law or legal process; (ii) in response to a request from a court, law enforcement authority, or government official; or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation into suspected or actual fraudulent or illegal activity.
4. Your Rights and Choices
Depending on your country, you may have the right or choice to:
- Opt out of some collection or uses of your Personal Information, including the use of cookies and similar technologies, the use of your Personal Information for marketing purposes, the preparation of transaction data for real-time services that your bank or another party may offer you, and the anonymisation of your Personal Information for data analyses.
- Access your Personal Information, obtain a copy of it, rectify it, restrict or object to its processing, or request its deletion, destruction or anonymisation.
- Receive the Personal Information you provided to us to transmit it to another company.
- Withdraw any consent provided.
- Where applicable, lodge a complaint with your relevant supervisory authority or regulator.
You, or a party authorised to act on your behalf, can exercise your rights on Mastercard’s “My Data” portal or by submitting a request as described in the “How to Contact Us” section below.
5. Data Transfers
Mastercard is a global business. We may transfer the Personal Information we collect about you to recipients in countries other than your country, including the United States, where we are headquartered. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your Personal Information to other countries, we will protect that information as described in this Global Privacy Notice, as disclosed to you at the time of data collection or as described in our programme-specific privacy notice.
We comply with applicable legal requirements providing adequate safeguards for the transfer of Personal Information to countries other than the country where you are located. In particular, we have established and implemented a set of Binding Corporate Rules (“BCRs”) that have been recognized by EEA and UK data protection authorities as providing an adequate level of protection to the Personal Information we process globally. A copy of our BCRs is available here.
We may also transfer Personal Information to countries for which adequacy decisions have been issued (see list of countries for which the European Commission has issued an adequacy decision here); see list of countries which the Swiss Federal Council has determined to provide for adequate data protection legislation here), use contractual protections for the transfer of Personal Information to third parties, such as the European Commission’s Standard Contractual Clauses or their equivalent under applicable law, or rely on other data transfer mechanisms or requirements where applicable. Depending on your country, you may contact us as specified in the “How to Contact Us” section below to obtain a copy of the safeguards we use to transfer Personal Information outside of your jurisdiction.
6. How We Protect Your Personal Information
The security of your Personal Information is important to Mastercard. We are committed to protecting the information we collect. We maintain reasonable administrative, technical and physical safeguards designed to protect the Personal Information you provide or we collect against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. We use SSL encryption on a number of our websites from which we transfer certain Personal Information.
In the event of a breach of our security safeguards, we will assess the extent of harm (if any) to individuals, and comply with reporting and notification obligations in accordance with the applicable law.
We also take measures to delete your Personal Information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.
We retain Personal Information only for as long as necessary to fulfil the purposes described in this Privacy Notice, including administering the Campaign, delivering the prize experience, resolving disputes, enforcing our agreements, and meeting applicable legal and regulatory requirements.
For this Campaign:
- Entry-related (participant) information is typically retained for up to 30 days following the conclusion of the Campaign;
- Winner verification and prize fulfilment information is typically retained for up to 30 days after the prize has been delivered, unless a longer retention period is required or permitted by law; and
- Photographs and/or video footage (where captured by Mastercard and/or its agencies and used for promotional/publicity/social media purposes) may be retained for a longer period in line with Mastercard’s marketing content retention practices and may remain available on social media platforms beyond the Campaign end date.
7. How to Contact Us
Mastercard Europe SA is the entity responsible for the processing of your Personal Information (or data controller). You may submit your request to exercise your rights to your Personal Information on Mastercard’s “My Data” portal, or email us at: privacyanddataprotection@mastercard.com., or write to us at:
Europe Data Protection Officer
Mastercard Europe SA
Chaussée de Tervuren 198A
B-1410 Waterloo
Belgium