IrishLotto · irishlotto.ie · Last updated: February 2026
Right of Access: Request a copy of all personal data we hold about you.
Right to Rectification: Request correction of any inaccurate personal data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten"). We will action this within 30 days.
Right to Data Portability: Receive your data in a structured, machine-readable format (JSON/CSV).
Right to Object: Object to processing of your data for direct marketing or legitimate interests.
Right to Restrict Processing: Request that we limit how we use your data while a complaint is investigated.
Right to Withdraw Consent: Withdraw consent at any time for any processing based on consent.
Legal basis for processing: Contract performance (to provide the service), legitimate interests (security, fraud prevention), and consent (marketing emails — you can unsubscribe at any time).
Data processors we use: Stripe (payments, GDPR-compliant, EU data processing agreement in place), Supabase (database, EU hosting), Vercel (hosting, GDPR-compliant).
International transfers: All data is stored in the EU. Where any processor may transfer data outside the EU, Standard Contractual Clauses (SCCs) are in place.
Email us at hello@irishlotto.ie with the subject line "GDPR Request" and specify which right you wish to exercise. We will respond within 30 days. We may need to verify your identity before processing the request.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Data Protection Commission (DPC) Ireland: dataprotection.ie