Last updated: Aug 1, 2026
Winza is operated by wiCreate Media Tech (“Winza”, “we”, “us”). This policy explains what personal information we collect when you visit our website, create an account, or take part in a campaign built on our platform; how we use that information; who we share it with; and the rights you have over it.
Winza plays two different roles. When you visit winza.cc or sign up as a customer, we are the controller of your information and this policy applies directly. When a brand uses Winza to run a campaign, that brand is the controller of the participant data it collects and we act as its processor under our Data Processing Agreement. If you played a campaign and want your data removed, contact the brand that ran it - we will assist them promptly.
1. Information we collect
We collect information you give us, information generated as you use the platform, and a limited amount of information from third parties such as identity providers and billing processors.
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Name, work email, password hash, company, role, phone number | Creating and securing your account, support, billing |
| Campaign configuration | Campaign names, game mechanics, prize inventory, branding assets, entry rules | Delivering the service you configured |
| Participant data | Entries, scores, form submissions, prize claims, and any fields your brand chooses to collect | Processed on your brand's instructions as processor |
| Usage and device data | IP address, browser and device type, pages viewed, referring URL, timestamps | Security, fraud prevention, analytics, performance |
| Billing data | Plan, invoices, billing contact, partial card details held by our payment processor | Processing payments and meeting tax obligations |
| Support and marketing data | Messages you send us, demo requests, newsletter preferences | Responding to you and, with consent, sending updates |
We do not intentionally collect special category data (such as health, biometric, or political information) and ask that you do not configure campaign forms to collect it. Our services are not directed to children under 16, and we do not knowingly collect their data.
2. How we use information
- Providing, maintaining, and improving the Winza platform and website.
- Authenticating users, preventing fraudulent entries, and protecting accounts.
- Producing analytics and reporting on campaign performance for your brand.
- Delivering support, service announcements, and security notifications.
- Processing payments, issuing invoices, and managing subscriptions.
- Sending marketing communications where you have opted in, with an unsubscribe link in every message.
- Meeting legal, tax, accounting, and regulatory obligations.
We do not sell personal information, and we do not use participant data collected through customer campaigns to train models or to market our own services.
3. Legal bases for processing
Where the GDPR or similar laws apply, we rely on the following legal bases:
- Contract - to provide the platform and support to account holders under our Terms of Service.
- Legitimate interests - to secure our services, prevent abuse, understand product usage, and grow our business, balanced against your rights.
- Consent - for optional analytics and marketing cookies and for marketing emails, withdrawable at any time.
- Legal obligation - to retain financial records and respond to lawful requests.
4. Sharing and disclosure
We share personal information only where necessary, and never with data brokers. The categories of recipient are:
- Sub-processors that host, secure, and support the platform. The current list is published in our Data Processing Agreement.
- Our customers, where you participated in a campaign they operate.
- Professional advisers, auditors, and insurers under duties of confidentiality.
- Authorities, where we are legally required to disclose. We notify affected customers unless prohibited by law.
- An acquirer, in the event of a merger, acquisition, or asset sale, subject to this policy continuing to apply.
5. International transfers
Winza hosts and processes information in data centres located in the European Union, including infrastructure provided by Railway, and in East Africa. Where personal information is transferred from the EEA or UK to a destination that is not covered by an adequacy decision - for example, to a support tool hosted in the United States - we rely on the European Commission’s Standard Contractual Clauses, with the UK Addendum where applicable, together with technical measures such as encryption in transit and at rest. Details of the safeguards for a specific transfer are available on request.
6. How long we keep information
| Data | Retention period |
|---|---|
| Account data | For the life of the account, then 90 days after closure |
| Campaign and participant data | As instructed by the customer; deleted or returned within 30 days of contract termination |
| Security and audit logs | 12 months |
| Billing and tax records | 7 years, as required by law |
| Marketing preferences | Until you unsubscribe, plus a suppression record |
7. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct inaccuracies, request deletion, restrict or object to processing, receive your data in a portable format, withdraw consent, and lodge a complaint with a supervisory authority.
To exercise a right, email hello@winza.cc. We verify requests before acting on them and respond within 30 days. Exercising your rights is free and will never result in discriminatory treatment.
8. Security
We encrypt data in transit with TLS 1.2+ and at rest with AES-256, enforce multi-factor authentication and least-privilege access for staff, and monitor our infrastructure continuously. A full description of our controls, certifications, and incident response process is on our Security page. No system is perfectly secure, so please use a strong, unique password and enable multi-factor authentication.
9. Cookies
We use strictly necessary cookies to keep the site secure and functional, and optional analytics and marketing cookies that only load with your consent. You can change your choice at any time. Full details of every cookie we set, its purpose, and its lifetime are in our Cookie Policy.
10. Changes to this policy
We may update this policy as our services evolve. When we make material changes we will update the date at the top of this page and notify account holders by email or through an in-product notice at least 30 days before the change takes effect.
Contact us
Data protection contact
Questions about this policy, or want to exercise a right? Email hello@winza.cc or write to wiCreate Media Tech, Legal Team, and we will respond within 30 days.Related documents