Data processing terms
Last updated October 22, 2026
- When your business puts information about people into ScreenWick or LotteryWick (your staff, your customers' details in a promotion, a vendor contact), your business decides what to do with it and we process it only to run the service for you.
- We use a short list of service providers, named below, and tell you before we add one.
- Need a signed agreement for your records or a chain's policy? Email us and we will send one.
1. Roles
For personal data that you or your users put into the service ("customer personal data"), your business is the controller and iSmart Web, which operates ScreenWick and LotteryWick, is the processor. For account, billing and website data about you as our customer, we are the controller and the Privacy Policy applies.
2. What we process and why
| Data | People | Purpose |
|---|---|---|
| Names, emails, roles, sign-in history | Your owners, managers and staff | Accounts, permissions and the activity log |
| Lottery counts, pack and settlement records with the staff member who entered them | Your staff | LotteryWick back office and reports |
| Images, video and text you upload | Anyone shown in your content | Showing it on your screens |
| Contact details in forms, leads and vendor records | People you add | The features you use them in |
3. Our commitments
- We process customer personal data only on your documented instructions, which are these terms, your settings and your use of the service.
- Everyone at iSmart Web with access is bound by confidentiality, and access is role-based and logged.
- Security: encrypted connections, hashed passwords, separated customer accounts, nightly backups and restore drills.
- We help you answer requests from people to access, correct or delete their data, mostly through the dashboard; anything it cannot do, we do for you on request.
- We tell you without undue delay, and within 72 hours of confirming it, if a security incident affects your customer personal data, with what we know and what we are doing.
- When your account closes, we delete or anonymize customer personal data within 90 days, except records the law requires us to keep. You can export your content before then.
- We give you the information you reasonably need to show compliance, and answer a reasonable security questionnaire once a year.
4. Sub-processors
| Provider | What they do for us |
|---|---|
| Hostinger | Server hosting for the websites, dashboard and database |
| Cloudflare | DNS, email routing and storage of uploaded media |
| Resend | Sending account and alert emails |
| Stripe | Card payments, invoices and receipts |
We will post changes to this list here at least 14 days before a new provider starts, and email account owners who have asked us to. You can object for a reasonable reason; if we cannot address it, you can cancel and get a prorated refund of any prepaid term.
5. Where data is stored
Our servers and providers are mainly in the United States. Where a provider handles data elsewhere, it does so under its own data protection terms and recognized transfer safeguards.
6. Getting a signed agreement
These terms apply automatically. If you need a countersigned copy, or your chain or network has its own data processing agreement, email hello@lotterywick.com.
