This policy explains how Vantage Motorsport ("we", "us", "the league") collects, uses and protects your personal data when you register for and use this website. We are committed to handling your data in line with the UK GDPR and the Data Protection Act 2018.
1. Who we are
The data controller responsible for your personal data is Lilian Sinclair (Vantage Motorsport / Point Vantage), based in the United Kingdom.
You can contact us about privacy by email at liliansinclair93@gmail.com, or by post at 27 Clements Lane, London, EC4N 7AE, United Kingdom.
2. The data we collect
Information you give us
- Account details — your email address and a password (which we store only as a secure one-way hash, never in readable form).
- Driver profile — your name, nationality, preferred race number, and optionally your Discord handle and social links.
- Communications — messages, incident reports and anything else you submit through the site.
- Consents and preferences — the agreements you accept at sign-up and your settings (language, theme, email opt-ins).
Information we collect automatically
- Technical data — your IP address and browser user-agent, recorded when you sign in and for active login sessions, to keep your account secure.
- Local storage — small pieces of data stored in your browser to keep you signed in and remember your preferences. See our Cookie Policy.
Information generated by competing
- Competition data — your race entries, results, penalties and standings, which form part of the league's sporting record.
3. How we use your data, and our lawful bases
- To run your account and the competition (create your account, enter you in championships, publish results and standings). Lawful basis: performance of a contract with you.
- To keep the league secure and fair (authentication, preventing abuse, steward decisions, audit logging). Lawful basis: our legitimate interests in operating a clean, accountable competition.
- To communicate with you about race operations (confirmations, briefings, service messages). Lawful basis: performance of a contract and legitimate interests.
- To send optional newsletters and announcements, only where you have opted in. Lawful basis: consent, which you can withdraw at any time in My account.
- To meet legal obligations where they apply. Lawful basis: legal obligation.
4. Cookies and local storage
We use essential browser storage to keep you signed in and functional storage to remember your settings. We do not use advertising cookies. Full details, including how to control them, are in our Cookie Policy.
5. Who we share it with
We do not sell your personal data. We share it only with service providers ("processors") who help us run the site, and only as needed:
- Hosting and database — the provider that hosts this website and its database.
- Email delivery — the service we use to send verification, password-reset and (if you opt in) newsletter emails.
- Discord — if you choose to join our community server, your use of Discord is governed by Discord's own privacy policy.
- Google Fonts — our pages load fonts from Google, which receives your IP address to serve them. See the Cookie Policy.
Your name, race number, nationality and competition results are shown publicly on standings, results and driver pages — that is an inherent part of taking part in a public league.
6. International transfers
Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or the International Data Transfer Agreement) to protect your data.
7. How long we keep it
- Account and profile data — for as long as your account is active. If you delete your account, we remove your login and personal details.
- Competition results — retained as part of the permanent sporting record, shown under your driver name, even after account deletion. This reflects the integrity of historical standings.
- Security logs — kept for a limited period for fraud prevention and troubleshooting.
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you — you can download it any time from My account → Download my data.
- Rectify inaccurate data — edit it in My account.
- Erase your data — delete your account in My account, subject to the competition-record retention above.
- Restrict or object to certain processing.
- Data portability — receive your data in a machine-readable format.
- Withdraw consent at any time, where we rely on consent.
To exercise any right, contact us using the details in section 1.
9. Security
Passwords are stored using strong one-way hashing. Login sessions and reset links are stored only as hashes. The website connects to its database using a restricted account. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
10. Age
You must be at least 16 years old to register. We do not knowingly collect data from anyone under 16.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed. Significant changes will be communicated where appropriate.
12. Complaints
If you have a concern, please contact us first and we'll try to resolve it. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling their helpline on 0303 123 1113.