Privacy Policy

1. Information We Collect

We collect information you provide directly during registration:

• Full name, email address, and contact details
• Emergency contact information
• Cycling insurance policy number and expiry date
• Billing and shipping addresses for merchandise orders

We also collect usage data automatically, including your IP address, browser type, pages visited, and session duration, to improve site performance and security.

2. Strava Integration Disclosure

The HORR LOOP Challenge integrates with Strava, Inc. to track and display cycling activities linked to the event. When you connect your Strava account:

• We may read your public and activity-level cycling data to verify participation and aggregate challenge statistics.
• We do not modify, delete, or otherwise control your Strava data.
• Strava's own Privacy Policy governs how Strava handles your information.
• You can revoke Strava access at any time through your Strava account settings.

3. Cookies and Tracking

We use the following cookie categories:

• Essential cookies — required for site functionality, authentication, and checkout. Cannot be disabled.
• Analytics cookies — help us understand how visitors use the site so we can improve performance. These do not identify individual users.
• Marketing cookies — currently not used by HORR LOOP. We do not run third-party advertising or retargeting campaigns.

You can manage cookie preferences through your browser or device settings. Disabling non-essential cookies may affect site functionality.

4. How We Use Your Data

We use your information to:

• Process event registrations and send confirmations
• Communicate event updates, safety alerts, and rider briefings
• Process merchandise orders and arrange shipping
• Publish leaderboards and aggregate challenge statistics
• Respond to enquiries submitted through our contact form
• Comply with legal obligations and resolve disputes if necessary

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined above. Registration and order records are retained for a minimum of 3 years for accounting and legal compliance. Strava integration data is removed within 30 days of event completion unless you request earlier deletion.

6. Your Rights

Under applicable data protection law you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing activities
• Withdraw consent at any time where processing is consent-based
• Request portability of your data in a machine-readable format

To exercise any of these rights, contact us via the Contact page. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including encryption in transit (TLS), access controls on our servers, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Third-Party Services

We may share your data with trusted third-party service providers who process it on our behalf:

• Frappe Cloud — hosting and infrastructure for our web application
• Strava, Inc. — activity tracking integration (see Section 2)
• Shipping carriers — for fulfilment of merchandise orders
• Payment processors — for secure handling of registration and order payments

All third-party processors are contractually bound to handle your data securely and only for the purposes we specify.

9. Children's Privacy

The HORR LOOP Challenge is open to participants aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that such data has been collected, it will be deleted immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated via email to registered participants and posted on this page with an updated “Last updated” date.

11. Contact Us

For any privacy-related questions, data access requests, or concerns, reach out through our Contact page or contact us directly via the channels listed there.