Privacy Notice

Version: 1.0 | Effective Date: 11/07/2026

TechFutara Ltd (trading as Hotstepa) ("we", "us", "our") respects your privacy and is committed to protecting personal data in accordance with applicable privacy laws including the UK GDPR.

This Privacy Notice explains how we collect, use, and share your personal data when you use our platform and participate in Hot Deals.

Commercial Disclosure: TechFutara Ltd (trading as Hotstepa) may receive commission or referral fees from Partners when users complete qualifying campaign conditions.

1. Purposes and Lawful Bases for Processing

We process your personal data for specific purposes, relying on valid lawful bases under the UK GDPR:

Processing PurposeData UsedIntended Lawful Basis
Registering you for a Hot DealEmail address, campaign detailsProcessing necessary for the performance of a contract (or steps requested before entering one)
Sending instructions and deal progress remindersEmail address, deal progressPerformance of a contract
Sharing data with the campaign organiser to administer the dealEmail address, campaign registration status, completion statusPerformance of a contract or steps requested before entering into a contract, where the sharing is necessary to administer the selected Hot Deal
Verifying deal steps with a Named PartnerPartner UID, verification eventsPerformance of a contract or steps requested before entering into a contract, where the sharing is necessary to administer the selected Hot Deal
Location and campaign-availability checksApproximate location derived from IP addressLegitimate interest (operating geographically restricted campaigns lawfully and securely)
Security and fraud preventionIP address, device info, activity logsLegitimate interest (protecting platform integrity and users)
Hotstepa marketing emails about other dealsEmail address, marketing preferencesConsent
Non-essential analytics and advertising trackingDevice and usage dataConsent

2. Information Required to Participate

You must provide a valid email address to start a Hot Deal. We use it to create and manage your participation and to send the instructions, progress messages, and reward information required for that deal. If you do not provide an email address, you cannot start the deal.

Where a Hot Deal involves a third-party Partner account, you must also provide the UID, account number, or other identifier specified for the Named Partner associated with the selected Hot Deal. Without this identifier, Hotstepa cannot match your Partner activity to your Hot Deal, confirm completion of the required steps, or determine whether you appear eligible for Partner confirmation.

Providing permission for Hotstepa marketing is entirely optional. Refusing or withdrawing marketing permission does not prevent you from joining or completing a Hot Deal. Optional analytics and advertising cookies are also not required to participate.

3. Automated Verification and Deal Eligibility

For some Hot Deals, Hotstepa automatically compares information received from a Partner with the published campaign requirements and timestamps in our systems. For example, the system may check whether:

  • a Partner account has been created;
  • required identity (KYC) checks have been completed;
  • a qualifying deposit has been made (and meets the required amount);
  • the required holding period has elapsed;
  • all campaign deadlines have been met.

Where all required conditions are confirmed, the system may automatically determine that the published campaign conditions appear to have been completed. Where required, Partner confirmation or reconciliation may still take place before reward fulfilment.

If information is missing, inconsistent, or indicates that a condition has not been completed, the system may mark the step as incomplete, delay reward confirmation, or refer the matter for manual review.

You may ask us to review a verification result, provide additional information, correct inaccurate information, or contest an automated eligibility decision by contacting the@hotstepa.com.

4. Location and Campaign-Availability Checks

We use your IP address to derive an approximate country or region. We do not use this process to determine your precise physical location. We use this information to determine which Hot Deals and Partner offers may be displayed or made available to you, apply geographical restrictions, prevent misuse, and comply with campaign and regulatory requirements.

We may also ask you to confirm your country of residence. Where the country you provide conflicts with technical or Partner information, we may prevent access to the relevant campaign or request further information.

5. Data Sharing and Partner API Flow

Sharing with Campaign Organisers:

To administer the specific Hot Deal, we share your email address, campaign registration status, deal-completion status, and reward-fulfilment information with the respective Campaign Organiser. We do not share your IP address with the Organiser, and Hotstepa does not provide your personal data to the Organiser for their own unrelated or general marketing.

Partner Account Verification:

Some Hot Deals require you to create an account directly with a named third-party Partner associated with the selected Hot Deal. Your account with that Partner is governed by the Partner's own terms and privacy information. After creating your Partner account, you must provide Hotstepa with your Partner UID.

Information Sent to Partner:

  • Partner UID
  • Campaign ID
  • Periodic reconciliation data/reports containing qualification status

Information Received from Partner:

  • Account creation status
  • KYC completion status
  • Deposit completed status
  • Deposit amount
  • Deposit date

Hotstepa does not receive your Partner password or full access to your Partner account. We combine Partner verification information with campaign rules and timestamps held by Hotstepa to determine your progress.

We may also provide the Partner with periodic reconciliation reports to compare campaign records, resolve discrepancies, and calculate amounts payable between Hotstepa and the Partner. Your email address is NOT provided to the Partner by Hotstepa unless the relevant campaign notice expressly states otherwise.

6. International Transfers

Some service providers may process data outside the United Kingdom. Where we transfer your data internationally, we ensure appropriate safeguards are implemented, such as relying on adequacy regulations or standard contractual clauses approved for use in the UK. You can request further information about these safeguards by contacting us.

7. Data Retention

We retain personal data only as long as reasonably necessary:

  • Active Deals: Retained for the duration of the deal.
  • Completed Deals: Retained for 12 months.
  • Expired / Withdrawn Deals: Retained for 6 months.
  • UID Verification Logs: Retained for 24 months to facilitate partner reconciliation and audit requirements.
  • Security & Fraud Logs: Retained for 24 months.
  • Consent Records: Retained for 6 years.
  • Marketing Consent: Retained until withdrawn, plus 6 years as evidence of compliance.
  • Cookie Consent: Retained for 12 months.

8. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data;
  • Request correction of inaccurate data;
  • Request deletion of your data (subject to legal or contractual retention needs);
  • Object to processing, specifically including an absolute right to object to direct marketing;
  • Request restriction of processing;
  • Request data portability;
  • Withdraw consent at any time (this does not affect the lawfulness of processing carried out before withdrawal).

To exercise these rights, please email the@hotstepa.com. We may require you to verify your identity before processing your request. We aim to respond to all valid requests within one month.

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Updates to this Notice

We may update this Privacy Notice when our processing changes. We will display the effective date and, where changes materially affect you, bring them to your attention through an appropriate notice. Where new consent is required, we will request it separately.


Active Data Controllers & Processors

Hotstepa operates promotional campaigns on behalf of the following active organisers and partners. When you register for a specific campaign, your data is shared with the respective entities as outlined below.

Found & Valued Ltd Organisation

Role:
Data Controller for respective campaign
Address:
30 London Road, Sawbridgeworth, England, CM21 9JS
Contact:
Data Shared:
Email address, IP address, and registration status
Purpose:
To manage event or platform access and conduct related marketing.

Panama Alive B.V. Organisation

Role:
Data Controller for respective campaign
Address:
Oostelijke Handelskade 4, 1019 BM, Amsterdam
Contact:
Data Shared:
Email address, IP address, and registration status
Purpose:
To manage event or platform access and conduct related marketing.

Gimansio SL Organisation

Role:
Data Controller for respective campaign
Address:
Alonso cano 63
Contact:
Data Shared:
Email address, IP address, and registration status
Purpose:
To manage event or platform access and conduct related marketing.

Green Concierge Organisation

Role:
Data Controller for respective campaign
Address:
Ibiza
Contact:
Data Shared:
Email address, IP address, and registration status
Purpose:
To manage event or platform access and conduct related marketing.

Bybit Partner

Role:
Data Processor (Identity & Action Verification)
Address:
Not specified
Contact:
Not specified
Data Shared:
Your Unique Identifier (UID) and related verification actions (e.g., KYC status, deposit events). Your email address is NOT shared with the Partner by Hotstepa.
Purpose:
To verify you have completed the required steps for the deal so we can issue your reward.