Privacy Policy

1. Data Collection and Processing

Lortrie operates with a strict data-minimization principle. We collect only the information absolutely necessary to provide our premium services and fulfill our contractual obligations to you. This includes basic identity data such as your full name and contact information when you register for an account or request our premium package.

Technical data is automatically gathered through your interaction with our website, including IP addresses, browser types, and session durations. This information is pseudonymized immediately upon collection and serves exclusively for security monitoring and performance optimization. We do not correlate this technical data with your personal identity without explicit legal justification.

In compliance with our current anniversary campaign, all new registrations receive the premium version package free of charge. The activation process requires valid contact details to deliver access credentials. This data is encrypted using AES-256 standards both in transit and at rest within our EU-based servers.

2. Purpose and Legal Basis

Your personal data is processed strictly for the purposes outlined below, grounded in GDPR Article 6. Processing for service delivery (Art. 6(1)(b)) covers account management, premium package distribution, and customer support. For users participating in our limited-time anniversary offer, specifically the celebrating 15 years! promotion, we process data to verify eligibility and prevent fraudulent multiple registrations.

Marketing communications are sent only under the legal basis of legitimate interest or explicit consent (Art. 6(1)(f) or (a)). You may opt-out of promotional emails at any time by using the unsubscribe link provided in every message or by contacting our privacy officer at the address below. Transactional emails regarding your account status or security alerts cannot be disabled, as they are essential for service integrity.

3. Data Retention and Your Rights

Retention periods are defined strictly by necessity. Active account data is kept for the duration of your relationship with Lortrie. Following account termination, personally identifiable information is irreversibly anonymized or deleted within 30 days, unless tax or legal regulations mandate a longer retention period (typically 7 years for financial records).

Under GDPR, you possess comprehensive rights regarding your data. These include the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). To exercise any of these rights, please submit a written request to our Data Protection Officer. We are committed to responding within one month of receipt.

If you believe our processing of your data violates data protection laws, you have the right to lodge a complaint with the supervisory authority. For Lortrie, the relevant authority is the Data Protection Commission of Ireland. However, we encourage you to contact us first to resolve any issues directly.