Your details, explained in plain English

When you scan a Merry Hill Pass code and complete an entry we record: your first name, email address and postcode, a confirmation that you are 16 or over, your marketing preference, your answer to the event question, which code you scanned and where, plus the date and time of the scan and of your entry.

If you redeem an in-mall reward we also record that the reward was redeemed, when, and which staff member processed it.

We use your details to enter you in the draw, check you are eligible, stop duplicate entries, send your entry confirmation and any reward code, and tell you if you are selected as a winner. That is a contract you enter into by taking part.

We also use them to measure how the events are performing, for example how many people entered from each postcode area and how many collected each stamp. This is our own legitimate interest in running better events, and it is reported in summary form rather than as individual records.

Marketing is separate. It only happens if you tick the marketing box, and it never affects your entry.

The marketing tick box is optional. Competition entry is never conditional on it. If you opt in you can change your mind at any time by using the unsubscribe link in any message we send, or by asking at the Guest Services Desk.

After your first entry we save your first name, email and postcode in your phone's own browser storage. That is not a cookie: it is not sent to us, not shared with any other website, and not used to track you around the internet. It simply means that when you scan another code we can skip the details form and go straight to the question.

We also keep the confirmation for the entry you have just made for as long as that browser tab stays open, so refreshing the page does not lose your reward code.

You are always in control. Choosing "Not you?" clears the saved details immediately, and clearing your browsing data in your phone settings removes them too.

Our team, and the staff who administer the Pass. If you redeem a reward, the retailer honouring it sees only what they need to give it you, such as your first name and the reward code. We use suppliers to host this website and to send your confirmation emails; they act on our instructions and may not use your details for anything else. We never sell your details.

The competition runs for a year. Your entry is kept for that year so the draw can be run and prizes awarded, and it is deleted a year after you entered, unless we are required to hold on to something for a legal or accounting reason. Marketing consent is kept until you withdraw it. Confirmation emails are kept only as long as needed to prove delivery.

You can ask us for a copy of what we hold about you, ask us to correct anything wrong, ask us to delete it, withdraw marketing consent, or ask us to stop using your details. Ask at the Guest Services Desk and we will handle it. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office.

Details are stored in a private database that is not open to the public, access is limited to staff who need it, and challenge answers and reward codes are hidden from visitors so the draws stay fair.

If we change anything important we will update this page and its "last updated" date, and for anything significant we will tell you in the confirmation email we already hold your address for.