Privacy policy

Purchases. Name, email, phone, billing and shipping address, and order details, processed through Shopify and our payment provider. We do not store card numbers.

Free online entry. Full legal name, email, mobile number (verified by a one-time code), date of birth, street address, city, state and ZIP, your IP address and browser, and the time of entry.

Mail-in entry. The details you hand-write on your card, the postmark date, and a scan of the card.

Instagram. If you comment on an official drop post or share it to your story with a mention of @gtagiveawaysusa, we receive your Instagram account ID, username, the comment text or story media, and whether you follow us, through Meta’s APIs. Story media is kept only as a low-resolution evidence frame.

Account. If you sign in, your Shopify customer ID and email, used to show your entries.

• To credit entries to one real person and to detect duplicate, automated or fraudulent entries.
• To verify the winner’s identity and eligibility before a prize is awarded, as the Official Rules require, including matching the details on the entry against government-issued identification.
• To deliver orders and the prize, issue tax forms, and meet sweepstakes registration and record-keeping obligations in New York, Florida and elsewhere.
• To contact you about the drop you entered: the one-time code, winner notification, and service messages about your order.

We do not sell your personal information. We do not use your mobile number or email for marketing unless you separately opt in, and you can withdraw that opt-in at any time.

Shopify (orders and checkout), our payment provider, Twilio (one-time codes and carrier checks), the U.S. Census Bureau geocoder and USPS data (address validation), Meta (Instagram entries), our fulfilment partner (shipping), and [ADMINISTRATOR], the independent administrator who holds the entry manifest and conducts the drawing. Each receives only what its role requires. We disclose information when the law requires it, for example sweepstakes filings, tax reporting, or a lawful request.

Entry and verification records are kept for the period the Official Rules and state sweepstakes laws require after the drawing, then deleted or anonymised. Order records are kept as required by tax and accounting law. Instagram story frames are deleted at the end of that retention period.

You can ask us to access, correct or delete your personal information, or to stop any marketing, by emailing privacy@gtagiveaways.com or writing to the address in Section 8. Deleting entry data before a drawing voids the related entries. Residents of California and other states with privacy laws have the rights those laws provide; we do not sell or share personal information for cross-context behavioural advertising.

Data is encrypted in transit, access is limited to people who administer the promotion, and webhook deliveries from Shopify and Meta are cryptographically verified before they are processed.

The shop and the promotion are for adults. We do not knowingly collect information from anyone under 18.

[U.S. ENTITY], [U.S. ADDRESS] · privacy@gtagiveaways.com

Privacy contacts: Teslim Olunlade and Samin Chowdhury.

Draft for counsel review. Bracketed values are placeholders.