Privacy Policy

Last Updated: 14 November 2024

Who are we?

We are AP Race, a brand built by Triple Olympic Champion Adam Peaty, where we aim to help every single swimmer, coach and parent become...Better Than Yesterday.

Contact Details

Email: [email protected]

What information we collect, use, and our reasons why

We process the following information to provide and deliver services and goods:

  • Name and contact details
  • Address
  • Date of birth
  • Purchase or account history
  • Payment details (including card or bank information for transfers and direct debits)
  • Health information (including dietary requirements, allergies and health conditions)
  • Health and safety information
  • Account information
  • Website user information (including user journeys and cookie tracking)
  • Identification documents
  • Information relating to feedback or complaints
  • Racial and ethnic origin
  • Religious or philosophical beliefs
  • Health information
  • Competition and ranking information

We process the following information to provide service updates and marketing:

  • Name and contact details
  • Address
  • Marketing preferences
  • Recorded images, such as photos or videos
  • Purchase or viewing history
  • IP addresses
  • Website and app user journey information
  • Information relating to sponsorship
  • Records of consent, where appropriate

We process the following information to comply with legal requirements:

  • Name
  • Contact information
  • Identification documents
  • Financial transaction information
  • Health and safety information
  • Racial or ethnic origin
  • Religious or philosophical beliefs
  • Health information

We process the following information for dealing with queries, complaints, or claims:

  • Name and contact details
  • Address
  • Payment details
  • Account information
  • Purchase or service history
  • Customer or client accounts and records
  • Financial transaction information
  • Information relating to health and safety
  • Correspondence

Our Legal Bases

We process your personal information under the following legal bases:

  • Consent
  • Legal Obligation
  • As part of a contract

Information on children

Children participate in our events, and as such we need to collect equivalent information to that listed above, about them. Where that is the case, we shall ensure we have the consent of a parent or guardian and that this consent is gained in accordance with applicable guidance from the GDPR and PDPL.

How long we keep information

AP Race will store and use your personal data for the purpose of administering AP Race activities. The data will be collected and stored in line with GDPR guidance for sports organisations, outlined by the Sport and Recreation Alliance. I understand by submitting my booking and registering for AP Race, I am consenting to my data being used this way.

International Transfers

When we conduct an international transfer, we ensure that there are appropriate legal mechanisms in place to enable us to do so and to ensure that your personal data is treated securely and lawfully.

Who we share your data with

We share your personal details with the organisations listed below. They either act as a Processor on our behalf, as Joint Controllers with us, or as Controllers in their own right.

Security

We have implemented appropriate organisational and technical controls to protect your personal information. The protections are risk-based, and we regularly check to ensure that they are fit for purpose and achieving what we expect them to do.

What are your rights?

You have a number of rights under data protection legislation. If you are in the UK, these are, depending on our legal bases for processing:

  • Your right to be informed: we support your right to be informed about our processing activities. We’ve drafted this privacy notice, and our cookie notice to provide you with this information.
  • Your right of access: you can request copies of your personal information. You are also entitled to ask for other information such as where we got the information from, who we share it with, and why we process your information. There are some exemptions which means you may not receive everything you expected.
  • Your right to rectification: if the information we hold about you is incorrect or incomplete, you can contact us to update this information. We may need you to provide us with some additional information in order to do this and we will provide details on a case-by-case basis.
  • Your right to erasure: you have the right to ask us to delete your personal information.
  • Your right to restriction of processing: you can ask us to limit how we process your personal information.
  • Your right to object to processing: you can object to our processing of your personal information.
  • Your right to data portability: you can ask us to transfer your personal information to another organisation, or to yourself.
  • Your right to withdraw consent: where we have asked for your consent for processing, you have the right to withdraw that consent at any time.
If you wish to enact any of your rights, please contact us to make a request. We will respond to your request without undue delay and within one month. You can get more information about your rights from the UK’s data protection supervisory authority (the Information Commissioner’s Office (ICO)) here: ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/.

If you are in the Kingdom of Saudi Arabia, you have the following rights under the Personal Data Protection Law (PDPL):

  • The right to be informed: you have the right to be informed about how we collect, use, store and otherwise process your personal information. This privacy notice goes some way towards satisfying this right.
  • The right to access personal data: you have the right to access the personal data we hold about you. When you request copies of your personal information, we will provide it in a readable and clear format.
  • The right to request correction of personal data: you have the right to request that we correct personal data that relates to you. When you believe data is incorrect, we shall restrict processing your personal data, where applicable, until it has been corrected. We may need to request additional information to verify the accuracy of the information.
  • The right to request destruction of personal data: you have the right to request the destruction of your personal data. This also applies when we rely on your consent to process your personal data, and you withdraw this consent. Additionally, we shall delete your personal data when we no longer need it for the purpose it was collected for, or if we become aware that the data has been processed illegally.
  • The right to withdraw consent to the processing of personal data: where we are relying on your consent to process your personal data. You have the right to withdraw that consent at any time, and we will cease processing your personal data without undue delay.

If you wish to enact any of your rights, please contact us to make a request. We will respond to your request without undue delay and within one month. You can find more information from the Saudi Arabian Supervisory Authority (SDAIA) here: sdaia.gov.sa/en/SDAIA/about/Pages/RegulationsAndPolicies.aspx

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice. If you remain unhappy with how we have used your data after making a complaint with us, you can also complain to the ICO, or if you are in Saudi Arabia, the SDAIA.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: +44 (0)303 123 1113
Website: www.ico.org.uk/make-a-complaint
Saudi Arabian Supervisory Authority
Website: sdaia.gov.sa/en/Contact/Pages/ContactUs.aspx