Last reviewed: not yet published
1. Who controls your data
[company name to be confirmed], [registered address to be confirmed], Lebanon.
Contact: hello@winnn.app
2. What we collect
What you give us: name, email, mobile number, delivery address, and your district. If you contact us, whatever you include in that message.
From Google, if you sign in that way: your name, email and profile picture. Nothing else. We never receive your Google password.
Created by using Winnn: orders, tickets, draw entries, results, and fulfilment status.
Collected automatically: IP address, browser and device type, and pages visited. If you use "find my district", your approximate location is used once to choose a district and is not stored as coordinates.
We never see your card details. Payments are handled by our payment provider, which returns only a confirmation and a reference.
3. Why we use it
| What for | Why we are allowed to |
|---|---|
| Processing and fulfilling orders | To perform our contract with you |
| Issuing tickets and running draws | To perform our contract with you |
| Contacting winners | To perform our contract with you |
| Preventing fraud and securing accounts | Our legitimate interest |
| Marketing by email, push or WhatsApp | Your consent |
| Accounting and legal records | Legal obligation |
4. Marketing, and how to stop it
You control each channel separately in your profile: email, push notifications and WhatsApp. You can turn any of them off at any time, and every marketing email carries an unsubscribe link.
Turning off push deletes the notification subscriptions stored for your devices.
Order confirmations, receipts and winner notifications are not marketing and are sent regardless.
5. Who we share it with
- Promoting businesses, for in-store draws. The name and contact details of a registered ticket holder, so a winner can be identified and contacted. That business becomes an independent controller of that data and its own privacy policy then applies.
- Participating businesses, for collection orders. Your name and order number.
- Delivery partners. Your name, address and phone number.
- Service providers that run our infrastructure: hosting, database, email delivery, push notifications and payment processing.
- Authorities, where the law requires it.
We do not sell your data.
6. Where it is held
Our database is hosted in Frankfurt, Germany. Some service providers process data elsewhere. Where data leaves Lebanon or the EU, we rely on the standard contractual protections offered by that provider.
7. How long we keep it
- Account details: while your account is open, then 12 months.
- Orders, tickets and draw records: 7 years, for accounting and so any draw can be audited.
- Marketing preferences: until you change them.
- Push subscriptions: until you disable notifications or the device expires them.
8. Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to stop using it for marketing. Write to hello@winnn.app and we will reply within 30 days.
Deleting your account does not remove tickets already entered into a draw that has not yet taken place, or records we are required to keep.
9. Cookies
We use only the cookies the site needs to work: keeping you signed in, and remembering your cart and chosen district. We do not use advertising cookies.
10. Children
Winnn is not for anyone under 18 and we do not knowingly collect data from children. If you believe we have, contact us and we will delete it.
11. Security
Data is encrypted in transit and at rest, and access is restricted and logged. No system is perfectly secure. If a breach affects you, we will tell you.
12. Changes
We will post any changes here and update the date above. Material changes will be notified by email.