Privacy policy

Draft pending review. This policy is a working draft and has not yet been reviewed by a legal professional.

Who we are and what this covers

RaceLinq provides online entry, results and website tools to event organisers. This policy explains what personal data we handle and why. It covers two groups of people: organisers, who hold RaceLinq accounts, and entrants, who register for an organiser's event through RaceLinq.

What we collect

• Organiser accounts: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name and email address from Google instead of a password.
• Entrants: the details the organiser's entry form collects — typically your name and email address, plus event details such as date of birth, gender or club where the organiser asks for them — together with your entries, results and transactions.
• Payments: card details are entered directly with Stripe, our payment provider, and never touch RaceLinq's servers.
• Operational records: the logs needed to run and secure the service.

How we use it

• To run the service: taking entries, managing events, publishing the results an organiser chooses to publish, and providing the participant portal.
• To send the email the service needs: entry confirmations, receipts, sign-in codes, entry links and results notifications.
• Marketing email is sent only with your consent, and every marketing email includes a one-click unsubscribe.
• To bill organisers for their plan.

Who is responsible for your data

For organiser account data, RaceLinq is the data controller. For entrant data, the organiser whose event you entered is the controller — they decide what their entry form asks — and RaceLinq processes that data on their behalf to run the event. Questions about how an organiser uses your data are best directed to the organiser; we help where we can.

Payments

Entry payments are taken by Stripe directly on the organiser's own Stripe account — the organiser is the merchant, and the payment appears on your statement under their name. Organiser plan subscriptions are billed by RaceLinq, also through Stripe. Stripe's own privacy policy applies to the payment details you give them.

Cookies

RaceLinq uses a single first-party cookie to keep you signed in. There are no advertising cookies and no third-party trackers.

Where your data lives

The service is hosted on Microsoft Azure. We use Stripe for payments, Azure Communication Services to send email, and Google only when you choose Google sign-in.

How long we keep it

We keep personal data while the account or entry it relates to remains active, and financial records for as long as the law requires us to keep them.

Your rights

You have the rights that data-protection law (UK and EU GDPR) gives you — access, correction, erasure, portability and objection. To exercise them, contact us at [contact address to be confirmed before launch] and we will handle your request; requests about entrant data may involve the organiser, as the controller of that data.

Changes to this policy

We will update the date at the top of this page when this policy changes, and give organisers notice of material changes.