call back
click here

Data Compliance


Dataxcel Ltd  – Data Compliance Policy Updated November 2016 

The Policy covers the collection and processing of data for our two core data collection sites, and and is focussed on the key components of the GDPR due to go Live May 2018

Updated: November 2016

Author: Data Protection Officer at Dataxcel on behalf of the brands Winnersville and Freeprizedraws

This policy is displayed in conjunction with our company Data Protection Handbook and Privacy Policy which can be provided upon request:

Data Protection Compliance and the protection of the data subject’s privacy rights are at the core ethos of Dataxcel’s data usage policy.

Background: We collect data online from our managed consumer facing websites, in Ireland and the UK.

Our registered address is Dataxcel Ltd, 29 Lower Patrick Street, Kilkenny, Co. Kilkenny.

Dataxcel Ltd is registered as a Data Controller and Data Processor with the office of the Data Protection Commissioner in Ireland and the Information Commissioner’s office in the UK.

Our Data Protection registration numbers are:

Ireland:  11223/A

UK:         ZA060682  

All data collected is compliant with the current Data Protection Act of 1988 and 2003 and the Privacy and Electronic Communications Regulations of 2011, and all rellevant industry regulatory bodies.

All data is collected with the focus on legitimate and unambiguous consent by the data subject. Our consent statements and consent process have received guidance from external Data Protection Consultants, IDMA, and the Office of the Data Protection Commissioner in Ireland.

Our core consent statement at all data collection touchpoints focus on the following statement which is a mandatory opt in tick box process. The words terms and conditions, privacy policy and third parties are all dynamic links explaining in a full and transparent format the use and sharing of the data subject’s data in order to meet the contact expectations around ”Fair Processing”.

‘’By ticking this box you understand and agree to all the terms and conditions and our privacy policy. By registering with (Freeprizedraws) you agree to be contacted by Freeprizedraws and by carefully selected third parties for marketing purposes and understand you can be contacted by telephone, sms, email and postal. You can unsubscribe from such communications at any time.’’

The dynamic link to third parties lists by vertical sector the brand names we will share the data with in the future, providing the data subject the choice to opt in or not.

Note the following core Data Usage rules for any data supplied by Dataxcel or their associated parties:
  • Rule one applies to Real Time Leads onlyData subjects who consent to a specific brand partner to contact them by telephone. For Ireland we pre screen landline data against the NDD. 
  • Rule Two applies to List Rental Data only – All data is pre – screened against the NDD, MPS and internal DNC/UNSUB/Suppression Data Sets.
  • Rule Three applies to Telephone data usage: All  outbound calls, the first line of the script must include a statement clarifying the source of the data and allowing the data subject the choice to continue with the call or not.  
Email Data

– Dataxcel will remain the gate keepers for such data and will deploy email campaigns from creatives sent to Dataxcel Ltd deployment team. If a client wishes to take email data in house for internal deployment a Data Processor agreement must be agreed and signed in advance to the transfer of data.

Postal data:

The source of the data should be, where possible, stated in the opt out statement.


– The source of the data must be stated in the first 27 characters of the text as follows

”As a member of Freeprizedraws” or Winnersville apply as appropriate.

Retention of Data

All one time use list rental orders must be deleted from all servers within 30 days of the data supply. If the data has not been used you need to contact your account manager for a data resupply. An email confirming the data has been removed from all servers to be sent to

Data Protection

The first principle of the Data protection legislation requires data controllers to process personal information “fairly and lawfully”. The legislation requires that where data is obtained from data subjects the data controller must ensure, so far as practicable, that the data subject is provided with or has made readily available to him the following information:

  • • The identity of the data controller
  • • The purpose or purposes for which the data is intended to be processed,
  • • Any further information which is necessary taking into account the specific circumstances in which the data is to be processed to enable the processing in respect of that data to be fair.

We make all data subjects aware of how their data will be processed, the purpose of the processing (direct marketing) and the brands their data may be passed onto. As stated above at consent stage we provide the data subject a dynamic link to third parties so the data subject can view who the data may be shared with and is provided with full transparency as to the intended use of their data and by who..

Data Subject Access Requests:

Under the data protection act individuals can exercise their right to object to the disclosure of their personal data to third parties for marketing purposes. Data subjects can also revoke their consent to the processing of their personal data for direct marketing purposes, including future marketing approaches from the data controller itself.

As such Dataxcel Ltd has provided several touch points by which data subjects can contact us to revoke their consent for their details to be used for marketing purposes.

Firstly in all communications to our users we provide the option at the start of every communication the option to update their data preferences through the My Preference section of our data collection site and

An example of the my preference section and process can be viewed here

Once a user updates their data preferences the database is updated in real time and the marketing database flagged accordingly. Secondly we have a dedicated Data Protection officer with a support team who are trained in handling a range of complaints/enquiries that have the authority and experience to resolve complaints and answer enquiries.

Thirdly we have assigned a dedicated telephone number and postal address to take in data subject queries and complaints:

Opt-out information can also be sent to the email address or and such requests are processed within 48 hours by the data protection team. The data protection team will record the data subject’s ’ Full Name, Address, eircode or postcode, Telephone Number and email address to ensure accurate suppression.

These details are added within 24 hours to Winnersville’s/freeprizedraws ‘Do Not Contact File’ by our Data Protection Team. Details marked as “ do no contact” will no longer be used by Dataxcel Ltd in the production of real time leads or data for direct marketing campaigns. Where a multiple use license is in place, a pre agreed data feed will be set up to provide updated DNC data for all data touch points with a client.