ScrapBujo Weekly Giveaway Privacy Notice

Effective date: August 29, 2026. Privacy notice version 2026-09-v3. This notice supplements the ScrapBujo Privacy Policy for the weekly printable gift and daily draw.

Who handles the data

ScrapBujo, operated by Juan A. in Ourense, Spain, handles giveaway data. Contact [email protected] or use the ScrapBujo contact and privacy choices pages for questions, access, correction, deletion or consent-withdrawal requests.

Data collected

• Email address, stored in encrypted form plus a keyed one-way matching hash.
• Age and legal-eligibility attestation, rules version and timestamps. The entry form does not request a country, state or province.
• A securely hashed private campaign code; the readable code is sent by email and is not stored in readable form.
• Pseudonymous browser or device and monthly network-prefix signals used for rate limiting and abuse prevention. Raw IP addresses are not stored in giveaway tables.
• Entry, verification, draw, skill-question, claim and protected-download events. Audit metadata excludes emails, codes, tokens and raw IP addresses.
• Only if the separate optional box is selected and the email is verified, consent to receive ScrapBujo discounts, promotions and new-release emails, plus its timestamp. The verified address and consent are synchronized to the same central ScrapBujo subscriber register used by the site’s other email sign-up forms.

Why and on what basis data is used

The minimum data needed for the gift is used to provide the requested entry and six-paper delivery, administer and audit the daily draw, limit duplicate or automated entries, notify potential winners, protect downloads, answer related requests and meet applicable legal obligations. These operational uses are necessary to provide the requested service, administer the published rules, protect the service and comply with law. Optional promotional email use relies on separate consent. Giveaway data is not sold, and emails, codes or download tokens are not placed in Google Analytics.

Email use

Without the optional promotions box, the email address is used only for verification, delivery, entry and result messages, protected-link administration and related support or legal notices. If the optional box is selected, the verified address is added to ScrapBujo’s central subscriber register and ScrapBujo may also send occasional discounts, promotions and new printable releases. That choice does not improve odds and can be withdrawn through the unsubscribe link in every promotional email, the privacy choices page or [email protected]. An unsubscribe is honored by the central register and does not affect giveaway participation.

Retention

Expired unverified requests are removed after approximately seven days. Protected download records expire shortly after their links. Confirmed giveaway participant data without marketing consent is scheduled for deletion 90 days after the campaign ends. Giveaway evidence of an optional marketing selection may be retained for up to 24 months for consent auditing. The central subscriber register retains the active subscription while consent remains in effect; after withdrawal, the minimum suppression record may be kept as needed to honor the opt-out. Detailed security and draw-audit rows are retained for up to 24 months; non-identifying campaign dates, eligible counts, outcome types and audit fingerprints may remain in the public campaign archive.

Service providers and international access

The website host and transactional email infrastructure process data only to operate the service. Data may be processed outside a participant’s country using the safeguards described in the ScrapBujo Privacy Policy. Etsy and social platforms do not receive giveaway entry data merely because their optional links appear on a campaign page.

Choices and rights

Participation and optional promotional consent are separate choices. Depending on location, a person may request access, correction, deletion, restriction, objection or withdrawal of consent and may complain to the relevant data protection authority. Use the ScrapBujo privacy choices page or email [email protected]. ScrapBujo may need to verify the request but will not ask for payment details.

Security and limits

ScrapBujo uses encryption, keyed hashes, expiring tokens, limited-use links, rate limits, data minimisation and aggregate-only administration views. No internet system can be guaranteed completely secure. If a material incident affects participant data, ScrapBujo will respond under applicable requirements.