This Privacy Notice is provided by Weetabix Limited (“we“, “us”,or “our”), of Burton Latimer, Kettering, Northamptonshire NN15 5JR, in our capacity as a promoter of the Weetabix Baked with Lyle’s Golden Syrup Promotion (the “Prize Draw“).

We are a ‘controller’ for the purposes of the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018 (collectively the “Data Protection Laws“), which means that we are responsible for how we use your personal data.

We understand that the security of your personal data is extremely important and we are committed to respecting your privacy and safeguarding your personal data. This Privacy Notice is a summary of what we do with your personal data in relation to the Prize Draw and you should read it together with our main Privacy Policy (which can be found at Weetabix: Privacy Policy). Our main Privacy Policy contains more information about how we process your personal data and your rights under the Data Protection Laws. Separately, the terms and conditions of the Prize Draw can be found at (“Prize Draw T&Cs“).

Here are the details of how we use your personal data for the Prize Draw:

  • We collect and process your social media handle in order to process your entry into the Prize Draw and to contact you if you are successful.
  • If you are a winner, we will:
    • contact you by direct message on Instagram to notify you of this and to ask you to confirm your eligibility, in line with our Prize Draw T&Cs;
    • collect and process your name, age, postal address and email address in order to verify your eligibility and arrange delivery of the prize;
    • share your personal data with our promotional partners and/or agencies (including Tate and Lyle and Frank), as appropriate, so we and they can provide you with your prize;
    • make your name and location (city or county) available to people requesting that information in accordance with the Prize Draw T&Cs and to comply with the requirements under the UK Code of Non-broadcast Advertising and Direct & Promotional Marketing (the “CAP Code“).

As provided in the CAP Code, the winner can object to us publishing or making available their name or ask us to reduce the amount of information published or made available. If you want to contact us for this purpose then please email us at  Please note that this does not affect our obligation to provide the relevant information and the winning entries to the Advertising Standards Authority, the UK’s regulator of advertising, if required to do so.

  • We are permitted to process your personal data on the basis that it is necessary for our performance of the contract you have agreed to enter with us (i.e. the Prize Draw T&Cs).  If you do not provide your information to us, you will not be able to participate in our Prize Draw. If you are a potential winner, as part of the Prize Draw, and you do not provide the additional information we request (as set out in the second bullet above “If you are a winner”), then we will not be able to confirm and provide your prize.
  • If you are not successful in the Prize Draw, we will delete your personal data collected for the Prize Draw within the period of three months following the selection of winners. If you are a winner, as part of the Prize Draw, we will securely retain your personal data until three months after the completion of the Prize Draw, all elements of the prize and any related publicity activities. After this date your personal data will be deleted.
  • We use external providers that process your personal data for this Prize Draw as part of the services (such as hosting, security, promotional administration and/or prize fulfilment) which they offer to us. We take steps to ensure that our service providers process your data in accordance with the Data Protection Laws, only use it in accordance with our contract with them and keep it secure. If you would like more information about our processors, please contact us at
  • We do not transfer your personal data outside the UK and the European Economic Area.
  • We strive to implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data. We follow recognised industry practices for protecting our IT environment and physical facilities.

Find more information, including all the rights you have as data subjects (including your right to access your personal data and your right to complain to a data protection authority), here in our main Weetabix: Privacy Policy.