At Race Challenges ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our virtual endurance events platform.
Information We Collect
Personal Information
- Name and display name
- Email address
- Phone number
- Date of birth
- Profile photo (optional)
Activity Data
- Strava activity information (when connected)
- Activity screenshots, GPX files, and submissions
- Distance, time, and performance metrics
- Event registrations and participation history
Bank Transfer & Payment Proof Data
- Uploaded bank transfer receipts, deposit slips, and transaction screenshots
- Bank reference numbers, transfer dates, and payment amounts
- Payer name and originating financial institution as displayed on submitted receipts
Organizer Banking & Payout Information
- Bank name, branch routing code, and account type
- Account holder name and encrypted bank account number
- Payout history, calculated platform commissions, and net disbursement records
Technical Information
- IP address and device information
- Browser type and version
- Usage patterns and preferences
Google Sign-In Data
When you sign in with Google, we collect:
- Your name
- Email address
- Profile photo (optional)
We do not access your Google Drive, Gmail, Calendar, or any other Google services. We only use your Google account for authentication purposes.
How We Use Your Information
- Process event registrations and manage your participation
- Verify activity submissions and maintain leaderboards
- Review and verify bank transfer payment proofs for challenge registration approval
- Disburse net event earnings and payouts to verified event organizers
- Send event-related communications and updates
- Coordinate medal collection and distribution
- Improve our platform and user experience
- Respond to your inquiries and support requests
- Comply with legal obligations
Email Communications
By creating an account or registering for an event, you consent to receive email communications from Race Challenges. We send three categories of emails:
Transactional Emails (Required)
These emails are essential for service delivery and cannot be opted out of:
- Registration confirmations and payment receipts
- Bank transfer submission confirmations, approvals, or rejection notices
- Submission status updates (approved, pending review)
- Medal collection notices and QR codes
- Account security notifications (password resets, login alerts)
- Gift code purchase and redemption confirmations
- Organizer payout notifications and balance statements
Event Communications
Sent to registered participants based on their event participation:
- Event reminders and schedule changes
- Event announcements from organizers
- New event notifications relevant to your interests
- Challenge progress updates
Promotional Emails
Marketing communications about our platform and community:
- New event and challenge promotions
- Merchandise updates and offers
- Community news and highlights
- Platform feature announcements
You may opt out of promotional emails at any time by clicking the unsubscribe link included in every promotional email, or by updating your email preferences in your profile settings, or by contacting us at [email protected].
Guest Registrant Communications
If another user registers you as a guest for an event, you will receive transactional and event-related emails for that registration. The person registering you has confirmed they have your consent to share your email address and for you to receive these communications.
Data Sharing and Disclosure
We may share your information in the following circumstances:
- Public Leaderboards: Your name and performance data may be displayed on event leaderboards.
- Service Providers: We work with trusted third-party services including:
- Cloud hosting provider - Web serving and data storage
- Payment processors (Wam, WiPay) - Card payment gateway services
- Google OAuth - Sign-in authentication
- Email service providers - Transactional emails and notifications
- Strava - Activity data integration (when you connect your account)
- Legal Requirements: When required by law or to protect our rights.
- With Your Consent: When you explicitly agree to share your information.
We do not sell your personal information to third parties.
Payment Data Handling & Commercial Billing Role
Race Challenges processes payment and transaction data strictly in its capacity as a specialized event technology platform and authorized commercial ticketing agent (Merchant of Record). Race Challenges is not a bank, e-money issuer, money remitter, or digital wallet provider. All payment data is collected exclusively to process point-of-sale event registrations, verify sales invoices, and reconcile commercial vendor settlements with event organizers.
Card Information Security
- Payment Processor: All payment card transactions are processed by Wam, our PCI-DSS compliant payment service provider.
- Tokenization: Your card details are immediately tokenized and encrypted by Wam. Race Challenges never stores your full card number, CVV, or expiry date.
- Secure Storage: Only tokenized references and the last 4 digits of your card are stored in our systems for display purposes.
- 3D Secure Authentication: Transactions may require 3D Secure (3DS) verification through your card issuer for enhanced security. We do not access your 3DS credentials.
PCI Compliance
We maintain PCI compliance through our partnership with Wam. Card data is processed in a fully isolated, PCI-certified environment. Our platform does not directly handle sensitive card information.
Bank Transfer Proofs and Receipts
For participants who choose to pay registration fees via direct bank transfer to Race Challenges:
- Secure Storage: Uploaded payment receipts, transfer screenshots, and deposit confirmation documents are stored in secure, private storage buckets with strict row-level and role-based access controls.
- Administrative Review: Uploaded receipts are accessed exclusively by authorized Race Challenges billing administrators for the purpose of matching transactions with company banking statements and approving event registrations.
- Access Restrictions: Event organizers and general platform users cannot access, view, or download your uploaded payment receipts or banking screenshots.
Organizer Banking & Payout Data Protection
Banking information provided by event organizers to receive net challenge disbursements from Race Challenges is subject to stringent security measures:
- Field-Level Encryption: Sensitive banking details (such as account numbers) are encrypted at rest using industry-standard AES-256 GCM encryption.
- Confidentiality: Organizer banking details are strictly confidential, masked in administrative dashboards, and never exposed to participants or public APIs.
- Purpose Limitation: Organizer banking records are used exclusively by Race Challenges finance personnel to execute direct payout disbursements.
Transaction Data
We collect and retain the following payment-related information:
- Transaction amount and currency
- Transaction date and time
- Payment method (Card, Bank Transfer, Gift Code, Free Entry)
- Transaction status (successful, failed, pending verification)
- Last 4 digits of card number (for card payments)
- Card brand (Visa, Mastercard, etc.)
- Billing email address
Payment Data Sharing
Payment data is shared only with:
- Wam and WiPay: For payment processing and fraud prevention
- Financial and Banking Partners: For executing bank payouts to event organizers
- Your card issuer: For authorization and 3D Secure verification
- Legal authorities: When required by law or court order
We never sell or share your payment information for marketing purposes.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments. However, no method of transmission over the Internet is 100% secure.
Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal obligations
- Resolve disputes and enforce our agreements
If you delete your account, we will remove your personal information from our active databases within 30 days. Some data may be retained in backup systems for up to 90 days.
International Data Transfers
Your information is stored locally and processed within Trinidad and Tobago. Some cloud infrastructure used for web serving may involve data transfers to other countries. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Your Rights
You have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate or incomplete information
- Request deletion of your personal data
- Opt out of marketing communications
- Withdraw consent where applicable
To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Cookies and Tracking
We use cookies and similar technologies to enhance your experience, analyze usage patterns, and remember your preferences. You can control cookie settings through your browser preferences.
Children's Privacy
Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Race Challenges
Trinidad and Tobago
[email protected]
