Terms & Conditions
and Privacy Policy

1 Introduction & Parties

These Terms & Conditions ("Terms") govern your use of the HeyComps platform, operated by HeyComps (part of Hey Wave Digital Ltd), a company registered in England and Wales under Company Number 17291142, whose registered address is 125 Princess Avenue, Worthing, United Kingdom, BN13 1AS ("HeyComps", "we", "us", or "our").

By accessing or using the HeyComps platform — including our website, vendor portal, competition embeds, deal embeds, and any related application or API (collectively the "Platform") — you confirm that you have read, understood, and agree to be bound by these Terms. If you do not agree, you must not access or use the Platform.

These Terms apply to all users including competition and deal entrants ("Entrants"), Shopify and Wix store owners who create and run competitions or deals via the Platform ("Vendors"), individuals or businesses who create and run competitions or deals via the Platform independently of any connected Shopify or Wix store ("Creators"), and visitors to our public pages. Vendors and Creators are referred to together as "Organisers" wherever an obligation, right, or liability provision in these Terms applies equally to both.

Definitions:

• "Competition" — a prize draw organised independently by an Organiser using HeyComps tools, in which Entrants enter for a chance to win a prize.
• "Deal" — a discount code offer created independently by an Organiser using HeyComps tools, in which visitors submit their email to receive a promotional code.
• "Prize" — any item, experience, gift card, or other reward offered by an Organiser in connection with a Competition.
• "Embed" — an iframe widget generated by HeyComps that Organisers place on their own websites or (for Vendors) Shopify stores to display a Competition or Deal.
• "Landing Page" — a Competition's or Deal's own page hosted directly on the heycomps.com domain, provided by HeyComps as an alternative to an Embed for Organisers who do not embed on their own website.
• "Shopify" — Shopify Inc., a third-party e-commerce platform. HeyComps integrates with Shopify's API on behalf of Vendors but is not affiliated with, endorsed by, or a subsidiary of Shopify Inc.
• "Content" — any text, images, data, or other material submitted by an Organiser or Entrant to the Platform.

These Terms were last updated on 25 July 2026. We reserve the right to update these Terms at any time. Continued use of the Platform after updates constitutes acceptance of the revised Terms.

2 Nature of the Platform

HeyComps is a technology platform only. We provide software tools that enable Organisers to independently organise, manage, and run competitions and deals. HeyComps is not an organiser, promoter, advertiser, co-promoter, or principal of any Competition or Deal hosted on the Platform.

This applies identically and without distinction regardless of whether a Competition or Deal is displayed via a Landing Page on the heycomps.com domain or via an Embed on the Organiser's own website, Shopify store, or other platform. Providing a heycomps.com Landing Page as a convenience to Organisers who do not embed does not make HeyComps an organiser, promoter, or co-promoter of that Competition or Deal, and does not increase HeyComps' responsibility or liability in any way beyond what is set out in these Terms.

Each Competition and Deal is created, managed, and fulfilled exclusively by the independent Organiser. HeyComps is not a party to any agreement, arrangement, or obligation between an Organiser and a Member or Entrant. No relationship of agency, partnership, joint venture, employment, or franchise is created between HeyComps and any Organiser by virtue of these Terms or any use of the Platform.

HeyComps makes no representations or warranties regarding the accuracy, completeness, legality, or quality of any Competition or Deal listed on the Platform, or regarding any Organiser's ability or willingness to fulfil prizes or honour promotional codes.

Entrants and visitors acknowledge that their participation in any Competition or Deal is entirely at their own risk and that their recourse in respect of any prize, discount code, or promotional benefit lies solely with the relevant Organiser.

3 Eligibility

To use the Platform as an Entrant or visitor, you must:

• Be aged 18 or over (or the age of majority in your jurisdiction if higher);
• Be legally permitted to participate in prize competitions in your country of residence;
• Provide accurate and truthful information when entering a Competition or revealing a Deal;
• Not be an employee, contractor, director, or immediate family member of HeyComps or of the Organiser running the Competition or Deal you wish to enter;
• Comply with any additional eligibility requirements set by the Organiser for a specific Competition or Deal (including geographic restrictions).

To use the Platform as a Vendor or a Creator, you must additionally:

• Be a legitimate business or individual operating a lawful commercial enterprise;
• If registering as a Vendor: operate an active Shopify or Wix store in good standing;
• If registering as a Creator: hold a HeyComps Creator account in good standing, independent of any Shopify or Wix store;
• Hold a valid HeyComps subscription plan;
• Have the legal authority to bind your business or organisation to these Terms;
• Comply with all applicable laws in your jurisdiction relating to competitions, promotions, prize draws, consumer protection, advertising, and data protection.

HeyComps reserves the right to verify eligibility at any time and to suspend or terminate accounts where eligibility cannot be confirmed.

4 Accounts & Security

To access the vendor portal, you must create an account. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. You agree to:

• Provide accurate and complete registration information;
• Keep your login credentials secure and not share them with third parties;
• Notify us immediately at hey@heycomps.com if you suspect unauthorised access to your account;
• Not create multiple accounts or impersonate another person or entity.

Account data is stored securely using Supabase, a third-party database and authentication provider. HeyComps implements appropriate technical and organisational security measures but cannot guarantee absolute security against all threats. You use the Platform at your own risk.

HeyComps may suspend, restrict, or terminate any account that we reasonably believe has been compromised, used in breach of these Terms, or used fraudulently, without prior notice.

5 Entrant & Visitor Rules

When participating in a Competition or revealing a Deal code, you agree to:

• Provide an accurate email address and, where required, your name and delivery address;
• Enter only once per Competition per person unless multiple entries are explicitly permitted by the Organiser;
• Not use bots, scripts, or automated tools to enter Competitions or reveal Deal codes;
• Not share, transfer, or sell your winner status, claim token, or discount codes to third parties;
• Provide a valid delivery address within the geographic restriction specified for any Competition you enter;
• Claim any prize within the 48-hour window specified following notification, failing which the Organiser may, at their sole discretion, re-draw a new winner;
• Accept that discount codes issued in connection with a Competition or Deal are subject to the Organiser's own store or redemption-page terms, are single-use unless stated otherwise, and cannot be combined with other offers unless expressly stated.

No purchase necessary. Entry to HeyComps competitions does not require any purchase.

HeyComps accepts no liability for: lost or delayed prize deliveries; prizes that differ from their description; an Organiser's insolvency or closure; discount codes that fail to apply due to an Organiser's own store or redemption-page configuration; or any loss or disappointment arising from non-winning status. Entrants' sole recourse in connection with any prize or promotional benefit is against the relevant Organiser.

6 Organiser Obligations — General

As an Organiser, you accept sole responsibility for all Competitions and Deals you create and publish on the Platform. You agree to:

• Ensure all Competitions and Deals comply with applicable laws in all territories where they are promoted, including the UK Gambling Act 2005 (prize competitions vs lotteries distinction), the CAP Code, the Consumer Rights Act 2015, and any applicable consumer protection, advertising standards, and promotional marketing legislation;
• Ensure your competition or promotion rules are clear, fair, and accessible to all entrants before they participate;
• Not use the Platform for any fraudulent, deceptive, or misleading promotion;
• Not offer prizes that are unlawful, counterfeit, offensive, or that you do not have the legal right to offer;
• Not discriminate against entrants on protected characteristics;
• Cooperate with HeyComps in good faith and provide accurate information when requested;
• Immediately notify HeyComps at hey@heycomps.com of any complaint, dispute, legal challenge, regulatory enquiry, or data breach related to your use of the Platform.

HeyComps reserves the right to remove any Competition or Deal from the Platform at any time without prior notice where we reasonably believe it violates these Terms, applicable law, or is likely to bring HeyComps into disrepute. This applies equally to Competitions and Deals displayed on a heycomps.com Landing Page and those Embedded on an Organiser's own website — the manner of display does not affect HeyComps' right to remove non-compliant content.

7 Organiser Obligations — Competitions

In respect of each Competition you create on the Platform, you agree that:

• You are the sole organiser and promoter of the Competition and bear full legal responsibility for it as a promotion;
• You will fulfil the stated prize to the verified winner promptly, fully, and without condition, regardless of any technical issue on the HeyComps Platform;
• For Shopify Product prize delivery (Vendors only): you will not sell, remove, or otherwise dispose of the product selected as a prize once a Competition is live; inventory reservation by HeyComps is a tool to assist you, but ultimate responsibility for prize availability rests with you;
• For Prize Library delivery (Creators only): any claim URL, voucher code, or claim instructions you store against a prize are your sole responsibility to keep accurate and valid; HeyComps stores this information securely on your behalf but does not verify, guarantee, or take any responsibility for its accuracy, validity, or redeemability;
• For Manual Prize delivery: you will contact the winner directly and fulfil the stated prize at your sole cost and responsibility; HeyComps will not create a Shopify order and has no involvement in or liability for delivery;
• You will respect the winner's delivery address and privacy and handle their personal data in accordance with Clause 9 of these Terms and all applicable data protection law;
• You will promptly notify HeyComps if you are unable to fulfil a prize for any reason;
• Where you choose to reject a winner and trigger a re-roll, you will record and retain an accurate reason for rejection which may be audited by HeyComps to verify fair conduct of the Competition;
• You are responsible for ensuring your Competition constitutes a lawful prize competition (i.e. involves an element of skill or satisfies the free entry route test under UK law) and is not an unlicensed lottery.

8 Organiser Obligations — Deals

In respect of each Deal you create on the Platform, you agree that:

• The discount percentage and all deal terms displayed are accurate and will be honoured for any valid code issued;
• Vendors: unique discount codes generated by HeyComps via the Shopify Price Rule API are single-use and subject to your Shopify store's checkout configuration; you are responsible for ensuring your Shopify store is configured to accept such codes;
• Creators: the single shared discount code and redemption link you provide are your sole responsibility to keep accurate and valid; HeyComps has no involvement in, and no visibility or control over, whether the code is honoured at the destination you specify;
• You will not issue codes for products or discounts that are unavailable, discontinued, or misrepresented;
• You accept sole responsibility if a visitor is unable to redeem a code due to your own store or redemption page's configuration, closure, or any other issue within your control;
• You will not artificially inflate the stated "original price" or "saving" in a manner that constitutes a misleading commercial practice;
• Email addresses collected from Deal reveals are your data and you are solely responsible for complying with all applicable data protection and marketing laws in respect of how you use them.

9 Data Protection & Organiser Responsibilities

Organiser as Data Controller. For the purposes of UK GDPR (UK General Data Protection Regulation) and, where applicable, EU GDPR, each Organiser is the data controller in respect of any personal data collected from their Competition entrants or Deal reveal participants via the HeyComps Platform. HeyComps acts as a data processor, processing that personal data solely on the Organiser's instructions and in accordance with these Terms.

Each Organiser is solely responsible for:

• Having a valid lawful basis under Article 6 UK GDPR for all processing of entrant personal data;
• Providing adequate privacy notices to their entrants before or at the point of data collection, informing them of how their data will be used;
• Responding to data subject rights requests (including access, rectification, erasure, and portability) from their entrants within applicable legal timeframes;
• Ensuring any marketing communications sent to entrants who opt in comply with PECR (Privacy and Electronic Communications Regulations) and applicable anti-spam law;
• Notifying relevant supervisory authorities (including the UK Information Commissioner's Office) of any personal data breach involving entrant data within required timeframes;
• Complying with all data protection laws in all jurisdictions in which they operate or promote Competitions or Deals.

Data Processing Agreement. These Terms, read together with our Privacy Policy, constitute a Data Processing Agreement for the purposes of Article 28 UK GDPR. HeyComps commits to: processing personal data only on documented instructions from the Organiser (as embodied in these Terms and the Platform's functionality); implementing appropriate technical and organisational security measures; not engaging sub-processors without notice; assisting Organisers in fulfilling their GDPR obligations where technically feasible; and deleting or returning personal data upon termination of the Organiser's account.

Sub-processors. HeyComps uses the following sub-processors to deliver the Platform: Supabase (database and authentication), SendGrid (transactional email), Vercel (hosting), Shopify (e-commerce API integration, Vendors only), and Stripe (payment processing, Creators only). A current list of sub-processors is available on request from hey@heycomps.com.

HeyComps accepts no liability for any Organiser's failure to comply with data protection obligations, and each Organiser shall indemnify HeyComps against any claims, penalties, fines, or losses arising from such failure.

10 Prize Fulfilment Disclaimer

HeyComps has no involvement in and no liability for the physical delivery of any prize to any competition winner, or the honouring of any discount code by any Organiser.

HeyComps provides software tools that may facilitate: the notification of Organisers of winner addresses; for Vendors, the optional creation of Shopify orders on a Vendor's Shopify store and the generation of discount codes via the Shopify API; and for Creators, the secure storage of claim URLs and voucher codes within the Prize Library. These are automated technical tools only. HeyComps does not inspect, verify, handle, ship, insure, or guarantee any prize or promotional benefit, and does not verify the accuracy or continued validity of any claim URL or voucher code stored in the Prize Library.

If an Organiser fails to fulfil a prize, delivers an incorrect prize, delivers a damaged or defective prize, or fails to honour a discount code, the Entrant's or winner's sole legal recourse is against the Organiser. HeyComps may, entirely at its discretion and without any obligation, attempt to mediate between an Entrant and an Organiser as a courtesy, but this does not constitute acceptance of any liability by HeyComps.

Winners acknowledge that: prizes are subject to availability; prizes cannot be exchanged for cash or alternative items unless the Organiser expressly agrees; and prize values stated are approximate and may vary.

11 Shopify Integration & Creator Platform Tools

HeyComps integrates with the Shopify API (for Shopify Vendors) and the Wix API (for Wix Vendors) to provide certain functionality including product synchronisation, discount code generation, inventory reservation, and order creation. These integrations are subject to Shopify's and Wix's own terms of service and API policies, which may change without notice to HeyComps.

HeyComps accepts no responsibility for:

• Shopify platform outages, downtime, or API unavailability that affect the Platform's functionality;
• Changes to the Shopify API that require HeyComps to modify or discontinue any feature;
• Any Vendor's Shopify store configuration, billing status, or app permissions that affect the Platform's ability to perform its functions;
• The accuracy of product data, inventory counts, or pricing information retrieved from Shopify's API.

By connecting their Shopify or Wix store to HeyComps, Vendors authorise HeyComps to access the API scopes required to operate the Platform. Vendors may revoke this access at any time by uninstalling the HeyComps app from their Shopify Admin or Wix dashboard, which will terminate the Platform integration for that store.

Creators do not connect a Shopify or Wix store and instead use the HeyComps Prize Library and, where applicable, Stripe for subscription billing. HeyComps accepts no responsibility for: Stripe outages, downtime, or API unavailability affecting billing; changes to the Stripe API that require HeyComps to modify or discontinue any billing feature; or the accuracy, validity, or continued redeemability of any claim URL or voucher code a Creator stores in the Prize Library. This is a technical storage and billing tool only, provided on the same "no involvement in fulfilment" basis set out in Clause 10.

12 Embeds, Landing Pages & Third-Party Websites

HeyComps provides Organisers with an embed code (an iframe widget) to display Competitions and Deals on their own websites and, for Vendors, Shopify stores, and/or a Landing Page hosted directly on heycomps.com. HeyComps' role, responsibilities, and liability are identical regardless of which of these an Organiser chooses to use, or whether they use both. By using an Embed and/or a Landing Page, Organisers acknowledge that:

• An Embed is displayed on third-party websites outside HeyComps' control; HeyComps is not responsible for the performance, availability, or appearance of any third-party website;
• A heycomps.com Landing Page is provided purely as a convenience and technical hosting service; providing it does not make HeyComps an organiser, promoter, co-promoter, or party to the Competition or Deal displayed on it, and HeyComps accepts no greater liability for content on a Landing Page than it does for the same content displayed via an Embed;
• Organisers are responsible for ensuring their own website (where used) meets all applicable legal requirements, including accessibility standards, cookie consent, and privacy notices;
• HeyComps may update the Embed's or Landing Page's functionality, appearance, or behaviour at any time; Organisers may need to re-copy embed codes to benefit from updates;
• HeyComps' embed branding tools (theme, accent colour, font) are provided as a courtesy feature; HeyComps makes no guarantee that a particular branding configuration will render correctly in all browsers or devices;
• Competitions and Deals may be published to a heycomps.com Landing Page and/or an Embed without prior review or approval by HeyComps. The Organiser is solely responsible for the content, legality, and conduct of anything they publish, and HeyComps' lack of pre-publication review does not create any liability on HeyComps' part — see Clause 16 for the full limitation of liability.

13 Subscriptions & Payments

Access to Organiser features requires an active HeyComps subscription.

Vendors: subscription fees are billed through Shopify App Billing and appear on the Vendor's regular Shopify invoice. Vendors must maintain a valid Shopify store and active Shopify App Billing to access paid features.

Creators: subscription fees are billed directly by HeyComps via Stripe, our third-party payment processor. HeyComps does not store full card details; these are processed and stored by Stripe in accordance with Stripe's own security standards and privacy policy. Creators must maintain a valid payment method on file with Stripe to access paid features.

Current plans (subject to change):

• Vendor Growth Plan: Includes a 14-day free trial. No charge on activation. First payment collected on day 15. Full access to all Platform features during the trial. Cancellation before day 15 incurs no charge.
• Vendor Deals Plan: Billed immediately on activation. No free trial.
• Creator plans: Include a 14-day free trial. No charge on activation. First payment collected via Stripe on day 15. Cancellation before day 15 incurs no charge.

All fees are quoted exclusive of VAT. VAT (where applicable) will be charged at the prevailing rate. Fees are non-refundable except where required by applicable consumer law.

HeyComps reserves the right to change subscription prices with not less than 30 days' written notice to Organisers. Continued use of the Platform after a price change constitutes acceptance of the new price.

Upon cancellation of a subscription: the subscription remains active until the end of the current billing period; no further charges are taken; Competitions and Deals become inaccessible to visitors after the subscription lapses; and Organiser data is retained for 90 days after account closure in accordance with our Privacy Policy.

14 Intellectual Property

All software, code, design, trade marks, logos, text, graphics, and other content created by or for HeyComps ("HeyComps IP") is owned by or licensed to HeyComps and protected by copyright, trade mark, and other intellectual property laws. You may not reproduce, distribute, modify, or create derivative works from HeyComps IP without our prior written consent.

By submitting Content to the Platform (including competition descriptions, deal descriptions, banner images, and terms and conditions), Organisers grant HeyComps a non-exclusive, royalty-free, worldwide licence to use, store, display, reproduce, and transmit that Content solely as necessary to operate and provide the Platform.

Organisers represent and warrant that they own or have the necessary rights to any Content they submit, and that such Content does not infringe the intellectual property rights, privacy rights, or other rights of any third party.

The HeyComps name, logo, and branding may not be used by Organisers in any marketing material, press release, or public statement without HeyComps' prior written consent.

15 Prohibited Conduct

You must not use the Platform to:

• Violate any applicable law, regulation, or third-party right;
• Conduct, organise, or promote an unlicensed lottery, illegal gambling activity, or any promotion that requires regulatory approval which has not been obtained;
• Engage in or facilitate fraud, deception, identity theft, or financial crime;
• Upload or transmit malware, viruses, or any code designed to disrupt, damage, or gain unauthorised access to any system;
• Scrape, crawl, or systematically extract data from the Platform without HeyComps' prior written consent;
• Reverse-engineer, decompile, or attempt to extract the source code of the Platform;
• Use automated tools (bots, scripts) to enter competitions, reveal deal codes, or interact with the Platform;
• Create fake entries, fake accounts, or artificially inflate entry counts or view counts;
• Harass, threaten, or abuse HeyComps staff, other Vendors or Creators, or Members;
• Use the Platform for any purpose that competes with or is intended to replace HeyComps' core business.

Breach of this clause may result in immediate account suspension or termination without notice, and may be reported to law enforcement agencies.

16 Limitation of Liability & Indemnification

16.1 Disclaimer of warranties. The Platform is provided "as is" and "as available" without warranty of any kind, express or implied, including without limitation any implied warranty of merchantability, fitness for a particular purpose, non-infringement, accuracy, or uninterrupted availability. HeyComps does not warrant that the Platform will be error-free, that defects will be corrected, or that the Platform or its servers are free of viruses or other harmful components. HeyComps does not guarantee any specific level of uptime or availability of the Platform, and accepts no liability for any loss, damage, or negative outcome arising from downtime, outages, bugs, glitches, or other technical errors affecting the Platform, whether or not such errors are within HeyComps' reasonable control.

16.2 Aggregate liability cap. To the maximum extent permitted by applicable law, HeyComps' total aggregate liability to any user (whether in contract, tort including negligence, breach of statutory duty, or otherwise) arising out of or in connection with these Terms or the use of the Platform shall not exceed the greater of: (a) the total subscription fees actually paid by that Organiser to HeyComps in the three (3) calendar months immediately preceding the event giving rise to the claim; or (b) one hundred pounds sterling (£100).

16.3 Exclusion of indirect loss. To the maximum extent permitted by applicable law, HeyComps shall not be liable for any: loss of profits; loss of revenue; loss of business; loss of anticipated savings; loss of goodwill; loss of data; wasted management or staff time; or any indirect, special, consequential, exemplary, or punitive loss or damages, regardless of whether HeyComps was advised of the possibility of such losses.

16.4 Third-party acts. HeyComps accepts no liability whatsoever for any act or omission of any Organiser, any entrant, Shopify, Wix, Stripe, SendGrid, or any other third party. HeyComps is not liable for: an Organiser's failure to fulfil a prize; an Organiser's failure to honour a discount code; an Organiser's breach of data protection law; an Organiser's compliance or non-compliance with competition law, gambling law, or any other applicable regulation; or any dispute between an Organiser and an Entrant.

16.5 No liability for Competitions or Deals, regardless of hosting method. Without limiting the generality of the foregoing, and for the avoidance of all doubt: HeyComps accepts no liability whatsoever, of any kind, for any Competition or Deal published on the Platform, or for any loss, cost, damage, claim, or consequence of any kind arising from it — whether arising from the Competition or Deal itself, its administration, its fulfilment, or an Organiser's compliance or non-compliance with any legal or regulatory requirement applicable to it. This applies identically and without any distinction whether the Competition or Deal is displayed via a Landing Page on the heycomps.com domain, or Embedded on the Organiser's own website, Shopify store, or other platform. HeyComps permits Organisers to publish Competitions and Deals to the Platform without prior review or approval; this absence of pre-publication review does not create, extend, or imply any liability on HeyComps' part, and responsibility for any misuse of the Platform, or for any Competition or Deal that does not comply with applicable law, rests entirely and exclusively with the Organiser who created and published it.

16.6 Consumer rights. Nothing in these Terms excludes or limits HeyComps' liability for death or personal injury caused by our negligence; fraud or fraudulent misrepresentation; or any other liability that cannot be excluded or limited by English law. If you are a consumer, you may have statutory rights that cannot be excluded by contract, and these Terms do not affect those rights.

16.7 Organiser indemnification. Each Organiser agrees to indemnify, defend, and hold harmless HeyComps, its officers, directors, employees, agents, and licensors from and against any and all claims, demands, actions, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising out of or in connection with: (a) the Organiser's use of the Platform; (b) any Competition or Deal created by the Organiser, however it is hosted or displayed; (c) the Organiser's breach of these Terms; (d) the Organiser's breach of any applicable law or regulation; (e) the Organiser's failure to fulfil a prize or honour a discount code; (f) the Organiser's breach of data protection obligations; or (g) any Content submitted by the Organiser. This indemnification obligation survives termination of the Organiser's account.

17 Termination & Suspension

HeyComps may, at its sole discretion and without prior notice or liability:

• Suspend or terminate any user's access to the Platform for breach of these Terms;
• Remove or take down any Competition or Deal that violates these Terms or applicable law;
• Suspend the Platform for maintenance, upgrades, or security reasons;
• Discontinue the Platform entirely, with reasonable notice where practicable.

Vendors and Creators may cancel their subscription at any time via the Billing & Plan page in their portal, or by contacting hey@heycomps.com. Cancellation takes effect at the end of the current billing period. No refund is provided for the current period unless required by law.

Upon termination of an Organiser account for any reason: live Competitions and Deals will be deactivated; Organiser data will be retained for 90 days and then deleted in accordance with our Privacy Policy; obligations that by their nature should survive termination (including Clause 9 data protection obligations, Clause 16 liability limitations, and Clause 16.7 indemnification) shall survive.

18 General Provisions

Force majeure. HeyComps shall not be liable for any delay or failure in performance of the Platform caused by circumstances beyond our reasonable control, including without limitation: acts of God; war; terrorism; riot; civil commotion; pandemic; governmental action; power or internet failure; cyberattacks; or failure of third-party services including Shopify, Wix, Stripe, Supabase, or SendGrid.

Governing law & jurisdiction. These Terms and any dispute or claim arising out of or in connection with them shall be governed by and construed in accordance with the laws of England and Wales. Each party irrevocably agrees that the courts of England and Wales shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these Terms, except that HeyComps may seek injunctive relief in any jurisdiction.

Dispute resolution. Before commencing legal proceedings, parties agree to attempt to resolve any dispute by good faith negotiation for a period of 30 days following written notice of the dispute. This does not restrict either party's right to seek urgent interim relief from a court.

Entire agreement. These Terms, together with the Privacy Policy and any plan-specific terms communicated to you at the time of subscription, constitute the entire agreement between you and HeyComps in relation to the Platform and supersede all prior agreements, representations, and understandings.

Severability. If any provision of these Terms is found to be invalid, unlawful, or unenforceable, that provision shall be severed from the remainder of the Terms, which shall continue in full force and effect.

No waiver. Any failure by HeyComps to enforce any provision of these Terms shall not constitute a waiver of our right to enforce it in the future.

Assignment. You may not assign or transfer your rights or obligations under these Terms without HeyComps' prior written consent. HeyComps may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets, with notice to affected users.

Notices. Notices to HeyComps under these Terms should be sent to hey@heycomps.com or by post to 125 Princess Avenue, Worthing, United Kingdom, BN13 1AS. Notices from HeyComps to you will be sent to the email address registered on your account.

Changes to Terms. HeyComps may update these Terms at any time. We will provide not less than 14 days' notice of material changes by email to registered users. Continued use of the Platform after that notice period constitutes acceptance of the updated Terms. The current version of these Terms is always available at heycomps.com/terms.

19 Creator Collaborator Program

HeyComps offers certain Creators a "Collab" plan that provides tools to invite other Creators ("Collaborator-Creators") to help build, promote, and run Competitions on the inviting Creator's behalf (the "Collab Program"). This Clause 19 applies to any Creator who subscribes to or participates in the Collab Program, whether as the inviting, paying Creator (the "Program Owner") or as an invited Collaborator-Creator.

19.1 HeyComps' role is limited to providing tools. HeyComps provides the Platform functionality that enables a Program Owner to invite, connect with, message, and assign Competitions to Collaborator-Creators, and that enables a Collaborator-Creator to accept such invitations and access performance statistics for Competitions assigned to them. HeyComps is not a party to, and has no involvement in, the commercial or contractual relationship between a Program Owner and a Collaborator-Creator.

19.2 No payouts, commission handling, or payment processing by HeyComps. HeyComps does not calculate, collect, hold, process, or distribute any commission, fee, or payment of any kind between a Program Owner and a Collaborator-Creator. Any commission structure, fee arrangement, or other payment agreed between a Program Owner and a Collaborator-Creator is a private arrangement between those two parties, made and settled entirely outside the Platform. Where a Program Owner provides a discount code, promotional link, or other tracking mechanism to a Collaborator-Creator for this purpose, that mechanism (and any third-party affiliate tracking software used to administer it) is the Program Owner's sole responsibility; HeyComps has no involvement in, and no visibility or control over, whether any resulting commission is calculated correctly or paid.

19.3 No liability for disputes between Program Owner and Collaborator-Creator. HeyComps accepts no responsibility and no liability for any dispute, non-payment, underpayment, disagreement over commission terms, or other disagreement arising between a Program Owner and a Collaborator-Creator. The sole legal recourse for any such dispute lies between the Program Owner and the Collaborator-Creator directly. HeyComps may, entirely at its discretion and without any obligation, attempt to mediate as a courtesy, but this does not constitute acceptance of any liability by HeyComps, consistent with the approach set out in Clause 10.

19.4 Connections require approval. No Collaborator-Creator is connected to a Program Owner, and no Competition may be assigned to a Collaborator-Creator, without the Program Owner's explicit acceptance of the connection. HeyComps does not vet, endorse, or take responsibility for any Program Owner's or Collaborator-Creator's decision to connect with, accept, or decline any other user.

19.5 Entrant data. Consistent with Clause 9, the Program Owner remains the data controller for all entrant personal data collected on Competitions run under the Collab Program, regardless of which Collaborator-Creator promoted the Competition. Collaborator-Creators are provided with aggregate performance statistics only (such as entry counts and trends) and are not given access to entrant names, email addresses, or any other entrant personal data.

19.6 Program Owner responsibility for Collab Competitions. All obligations set out in Clauses 6, 7, 9, and 10 of these Terms apply in full to any Competition created under the Collab Program, and remain the sole responsibility of the Program Owner regardless of which Collaborator-Creator is assigned to promote it or which of their websites the Competition is embedded on.

1 Who We Are

This Privacy Policy explains how HeyComps (part of Hey Wave Digital Ltd), Company Number 17291142, of 125 Princess Avenue, Worthing, United Kingdom, BN13 1AS ("HeyComps", "we", "us", "our") collects, uses, stores, and shares personal data when you use the HeyComps platform as a Vendor, Creator, entrant, or visitor.

This policy applies to data processed by HeyComps as a data controller (in respect of Vendor and Creator account data and platform usage data) and as a data processor acting on behalf of Vendors and Creators (in respect of entrant and visitor data).

We are committed to protecting your personal data and processing it in accordance with UK GDPR and the Data Protection Act 2018. If you have any questions about this policy, contact us at hey@heycomps.com.

Note to Vendors and Creators: you are the data controller for personal data collected from your competition entrants and deal reveal participants. Please read Section 6 carefully.

2 Summary

In plain English, here is what you need to know:

• We collect only the data we need to operate the Platform.
• We do not sell your personal data to third parties.
• Vendors and Creators are responsible for how they use entrant data they collect through HeyComps tools.
• We use Supabase (database), SendGrid (email), Vercel (hosting), Shopify (Vendor API integration), and Stripe (Creator billing). These are our sub-processors.
• Data is stored in the European Economic Area (EEA) or on servers that meet UK adequacy standards.
• You have rights over your data. Contact hey@heycomps.com to exercise them.

3 Data We Collect

3.1 Vendor account data (HeyComps as data controller)

• Name, email address, and password (via Supabase Auth)
• Shop name, Shopify domain, and Shopify OAuth tokens
• Subscription status and billing references (via Shopify App Billing)
• Competition and deal content you create (titles, descriptions, images, T&Cs)
• Platform usage data and activity logs
• Communications you send to HeyComps support

3.1a Creator account data (HeyComps as data controller)

• Display name, email address, and password (via Supabase Auth)
• Profile details you choose to add, including bio, avatar, and social media handles
• Subscription status and billing references (via Stripe)
• Prize Library entries you create, including any claim URL or voucher code you choose to store
• Competition and deal content you create (titles, descriptions, images, T&Cs)
• Platform usage data and activity logs
• Communications you send to HeyComps support

3.2 Entrant / visitor data (HeyComps as data processor on behalf of Vendors and Creators)

• Email address (required for competition entry and deal reveals)
• Name (optional, if required by the Organiser)
• Delivery address (collected only from competition winners at the prize claim stage)
• Marketing opt-in status (yes/no)
• Entry timestamp and source

3.3 Technical and usage data

• IP addresses (for security, fraud prevention, and view tracking)
• Browser type and device information
• Pages visited and features used
• Session data stored in sessionStorage (for view deduplication — this data never leaves your browser)

We do not collect payment card data directly. Vendor payment processing is handled by Shopify and their payment processors; Creator payment processing is handled by Stripe.

4 Lawful Basis for Processing

We rely on the following lawful bases under Article 6 UK GDPR:

• Contract (Article 6(1)(b)): Processing Vendor and Creator account data to fulfil our subscription agreement with you; processing entrant data to facilitate competition entry and prize delivery as contracted with Organisers.
• Legitimate interests (Article 6(1)(f)): Analytics and platform improvement; fraud prevention and security monitoring; communicating relevant product updates to Vendors and Creators; view and usage tracking to operate the Platform effectively.
• Consent (Article 6(1)(a)): Marketing communications to entrants or visitors who have opted in to receive marketing from a specific Organiser (Organisers are responsible for obtaining and recording this consent).
• Legal obligation (Article 6(1)(c)): Retaining financial records for tax and accounting compliance; responding to lawful requests from supervisory authorities.

5 How We Use Your Data

Vendor and Creator data is used to:

• Provide, operate, and improve the Platform
• Process your subscription and manage billing (via Shopify App Billing for Vendors, via Stripe for Creators)
• Integrate with your Shopify store via the Shopify API (Vendors only)
• Send transactional emails (account verification, winner notifications, subscription updates)
• Provide support and respond to enquiries
• Detect and prevent fraud and misuse
• Comply with legal obligations

Member and entrant data is used to:

• Register competition entries and deal reveals
• Notify winners and facilitate the prize claim process
• Enable Organisers to view and manage their entries and reveals
• Generate anonymised analytics on entry volumes and view counts
• Enable Organisers to send marketing to opted-in entrants (subject to the Organiser's own compliance obligations)

We do not use personal data for automated individual decision-making that produces legal or similarly significant effects.

6 HeyComps as Data Processor — Organiser Responsibilities

When HeyComps collects personal data from competition entrants or deal reveal participants on behalf of an Organiser, HeyComps acts as a data processor. The Organiser is the data controller for that data.

This means that each Organiser is independently and solely responsible for:

• Having a valid lawful basis to collect and process entrant personal data;
• Providing a privacy notice to entrants that explains how their data will be used by the Organiser;
• Ensuring any marketing sent to opted-in entrants complies with PECR and all applicable law;
• Responding to data subject access requests, erasure requests, and other rights requests from entrants within applicable legal deadlines;
• Notifying supervisory authorities of any personal data breach involving entrant data;
• Complying with all applicable data protection laws in all territories where they operate.

HeyComps expressly disclaims all liability for any Organiser's failure to comply with their data controller obligations. Organisers shall indemnify HeyComps in full against any claim, fine, penalty, or loss arising from the Organiser's failure to comply with applicable data protection law.

Our processing of entrant data on Organisers' behalf is governed by the data processing provisions in Clause 9 of the Terms & Conditions.

7 Data Storage & Security

All Platform data is stored by Supabase, hosted in the United Kingdom (London) region. Website and embed delivery is provided by Vercel, which may use servers in the EEA and United States (subject to appropriate transfer safeguards including Standard Contractual Clauses). For more information on Supabase's hosting regions, see supabase.com/docs/guides/platform/regions.

HeyComps implements the following technical and organisational security measures:

• Data encryption in transit (TLS/HTTPS) for all Platform communications
• Data encryption at rest for database storage
• Row-level security policies to ensure Vendors and Creators can only access their own data
• Access controls limiting staff access to personal data on a need-to-know basis
• Regular security monitoring and vulnerability assessment

Despite these measures, no method of electronic storage or transmission is 100% secure. HeyComps cannot guarantee absolute security and accepts no liability for unauthorised access to personal data resulting from a security breach beyond our reasonable control.

In the event of a personal data breach affecting HeyComps as data controller (Vendor account data), we will notify affected Vendors and the ICO where required by law within 72 hours of becoming aware of the breach.

8 Data Sharing & Sub-Processors

HeyComps does not sell personal data to any third party. We share data only in the following circumstances:

• Supabase: Database hosting and authentication. Data is stored and processed by Supabase in the United Kingdom (London). Supabase Privacy Policy · Supabase Hosting Regions
• SendGrid (Twilio): Transactional email delivery (winner notifications, account emails). SendGrid Privacy Policy
• Vercel: Website and embed hosting. Vercel Privacy Policy
• Shopify: E-commerce API integration for Vendor stores only. Data shared with Shopify is governed by Shopify's own policies. Shopify Privacy Policy
• Stripe: Payment processing for Creator subscriptions only. Data shared with Stripe is governed by Stripe's own policies. Stripe Privacy Policy
• Organisers: Entrant data (email, name, marketing opt-in, winner address) is visible to the relevant Vendor or Creator whose Competition or Deal the entrant participated in.
• Legal and regulatory: We may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required by law or court order.

We require all sub-processors to maintain appropriate data protection standards and enter into data processing agreements with us.

9 Cookies & Tracking

The HeyComps Platform uses a minimal set of cookies and browser storage:

• Authentication cookies: Set by Supabase to maintain your login session. These are strictly necessary and cannot be disabled without preventing access to the Platform.
• sessionStorage (browser-side): Used within competition and deal embeds to deduplicate view tracking per browser session. This data is stored entirely in your browser and is never transmitted to HeyComps' servers.
• Analytics: We use Google Analytics (GA4) to measure aggregate platform usage. No personally identifiable information is sent to Google Analytics. You may opt out using standard browser settings or our cookie consent tool.

We do not use advertising cookies, tracking pixels for third-party advertising, or any form of cross-site behavioural tracking.

10 Your Rights

Under UK GDPR, you have the following rights in respect of personal data for which HeyComps is the data controller (primarily Vendor and Creator account data):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right not to be subject to automated decision-making: We do not make solely automated decisions that significantly affect you.

To exercise any of these rights, contact us at hey@heycomps.com. We will respond within one calendar month.

Entrant and visitor rights: If you are an entrant in a competition or have revealed a deal code, HeyComps processes your data on behalf of the relevant Organiser. To exercise your rights in respect of that data, you should contact the Organiser directly. You may also contact HeyComps, and we will assist where possible, but the data controller responsibilities rest with the Organiser.

ICO complaints: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been processed unlawfully. Visit ico.org.uk or call 0303 123 1113.

11 Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

• Vendor account data: Retained for the duration of the active subscription and for 90 days following account closure, after which it is permanently deleted.
• Competition entry data: Retained for 24 months from the date of the competition's closure, to support audit trails and fair draw verification, then deleted.
• Deal reveal data: Retained for 12 months from the reveal date, then deleted.
• Winner address data: Retained for 6 months from the date of prize fulfilment confirmation, then deleted.
• Financial records: Retained for 7 years as required by UK tax law, after which they are permanently deleted.
• Support communications: Retained for 2 years from the date of the last communication.

Vendors and Creators may request earlier deletion of specific entrant data records where required by data subject erasure requests, subject to any overriding legal retention obligation.

12 Children

The Platform is not directed at, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from persons under 18. If we become aware that we have collected personal data from a person under 18 without appropriate parental consent, we will delete it promptly.

Vendors and Creators are responsible for ensuring that their Competitions and Deals are not targeted at or accessible to minors, and that their own privacy notices and participation rules address minimum age requirements appropriately.

13 International Data Transfers

HeyComps is based in the United Kingdom. The Platform processes data under UK GDPR (for UK-based Organisers and entrants) and, where Organisers target entrants in the European Economic Area, EU GDPR may also apply.

Where we transfer personal data outside the UK or EEA (for example, to Vercel's US-based servers), we ensure that appropriate safeguards are in place, including UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs) approved by the European Commission.

Vendors and Creators who operate in or target entrants from multiple jurisdictions are solely responsible for ensuring their use of HeyComps complies with all applicable data protection laws in those jurisdictions, including but not limited to: EU GDPR, California CCPA, Canadian PIPEDA, and Australian Privacy Act 1988.

14 Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. We will provide not less than 14 days' notice of material changes by email to registered Vendor and Creator accounts. The current version is always available at heycomps.com/terms.

This Privacy Policy was last updated on 25 July 2026.

15 Contact

For any questions about this Privacy Policy, to exercise your data rights, or to report a data protection concern, please contact us:

• Email: hey@heycomps.com
• Post: HeyComps (part of Hey Wave Digital Ltd), 125 Princess Avenue, Worthing, United Kingdom, BN13 1AS
• Company Number: 17291142 (England & Wales)

If you are unsatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint · 0303 123 1113.

These Terms & Conditions and Privacy Policy were last updated on 25 July 2026. They are provided for informational purposes and do not constitute legal advice. HeyComps recommends that Vendors and Creators obtain independent legal advice to ensure their use of the Platform complies with all applicable laws in their jurisdiction, including competition law, data protection law, advertising standards, and consumer protection legislation.