Privacy Policy
Last updated: March 2026
1. Definitions
For the purposes of this Privacy Notice:
Application refers to the Racemob mobile application(s).
We/Company refers to Threefour Ltd (16893513), Bloxham Mill, Barford Road, Bloxham, Banbury, Oxfordshire, United Kingdom, OX15 4FF.
You/Your means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. Under both UK and EU GDPR (General Data Protection Regulation), You can be referred to as the Data Subject or as the User as You are the individual using the Service.
Data Controller, for the purposes of both UK and EU GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data. For the purpose of both UK and EU GDPR, the Company is the Data Controller.
Data Processor, for the purposes of both UK and EU GDPR, refers to the Company's Service Providers.
Data Protection Legislation means the General Data Protection Regulation (Regulation (EU) 2016/679) ('EU GDPR'), the United Kingdom General Data Protection Regulation ('UK GDPR'), the Data Protection Act 2018 ('DPA 2018'), the Privacy and Electronic Communications (EC Directive) Regulations 2003 ('PECR') and any legislation implemented in connection with the aforementioned legislation. This includes any replacement legislation coming into effect from time to time.
Device means any device that can access the Service such as a computer, a mobile phone or a digital tablet.
Personal Data is any information that relates to an identified or identifiable individual. For the purposes of both UK and EU GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
Service refers to the Application, unless otherwise stated.
Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analysing how the Service is used. For the purpose of both UK and EU GDPR, Service Providers are considered Data Processors.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, pages viewed or time spent on the Application).
Website refers to the Racemob website, accessible from https://racemob.app.
2. Introduction
Racemob is a mobile application that allows users to follow their favourite motorsports and sync schedules to their personal calendar. It is a product of Threefour Ltd, a company in England and Wales (16893513) registered at Bloxham Mill, Barford Road, Bloxham, Banbury, Oxfordshire, United Kingdom, OX15 4FF.
This Privacy Notice applies to:
- Service users of this Website
- Service users of the Application(s)
- Racemob account holders
- Employees, contractors or other associated parties contracted by Racemob's Service Providers
- Any other individuals with whom Racemob may conduct commercial operations
This Privacy Notice does not apply to any services offered, or businesses operated by, other companies, legal entities or individuals. Similarly, this Privacy Notice does not apply to any social media services which may be referenced by our products and services.
This Privacy Notice may change from time to time. We will post any changes to this Privacy Notice on the 'Privacy' section of our website.
At Racemob, We want to be exceptionally clear and transparent about the Personal Data We collect, how We use that information, where We store it and how it is protected. If You have any questions about privacy or data protection, please contact our Data Protection Officer using the contact details below.
3. Your Personal Data
We only collect Personal Data that We know We will genuinely use in accordance with the Data Protection Legislation. The type of Personal Data that We will collect on You will depend on whether You are an existing Racemob customer, which Racemob services You use, and whether You are contacting us for a specific purpose:
When You sign up for our Service
- Name
- Email address
- Password
- Profile image
- Profile and behavioural data
- Marketing consent and communication preferences
When You use our website
- Profile and behavioural data
- Website cookies and tracking technologies
- Interaction and user behaviour analytics data
- Technical data
- Device details including, but not limited to, model number, operating system, unique identifiers, network information and storage information
- IP addresses
When You use our Application
- Interaction and user behaviour analytics
- Notification preferences
- Device details including, but not limited to, model number, operating system, unique identifiers, network information and storage information
- IP addresses
- Device tokens for push notifications
When You contact us for technical support or customer services
- Email address
- Email contents
- Email attachments
- Telephone conversation notes
- Telephone conversation recordings
4. Our lawful bases
Your privacy is protected by law. We are only allowed to use personal information about You if We have a legal basis to do so, and We are required to tell You what that legal basis is.
In some circumstances We can use your personal information if it is in our legitimate interest to do so, provided that We have told You what that legitimate interest is. A legitimate interest is when We have a business or commercial reason to use your information which, when balanced against your rights, is justifiable.
We will only process your Personal Data when the law allows us to do so. We will provide You with our lawful basis for processing your Personal Data at the point the information is collected from You, either through this Privacy Notice or via other means. We will not store, process, or transfer your data unless We have an appropriate lawful reason to do so.
Under Data Protection Legislation, the lawful bases We rely on for processing your information are:
- GDPR Article 6(1)(a): We have your consent
- GDPR Article 6(1)(b): We have a contractual obligation
- GDPR Article 6(1)(c): We have a legal obligation
- GDPR Article 6(1)(d): We have to protect the vital interests of You or a third party
- GDPR Article 6(1)(e): We have a public interest
- GDPR Article 6(1)(f): We have a legitimate interest
We may use your information for the following purposes:
When You sign up for our Service
Personal Data processed: identity data, contact data, profile and behavioural data, marketing and communications data
Lawful basis: Our Legitimate Interest in providing You with the Racemob Services
When You use our Application
Personal Data processed: identity data, contact data, profile and behavioural data, technical data, usage data, transaction data
Lawful basis: Our Legitimate Interest in providing You with the Racemob Services
To manage payments or collect and recover money owed to us
Personal Data processed: contact data, transaction data
Lawful basis: Our Legitimate Interest in providing You with the Racemob Services
To manage our relationship with You, including notifying You about changes to our terms or policies
Personal Data processed: identity data, contact data, profile and behavioural data, marketing and communications data
Lawful basis: Our contractual obligation with You
When You contact us for technical support or customer services
Personal Data processed: identity data, contact data, profile and behavioural data, technical data, usage data, transaction data, support data, marketing and communications data (if applicable)
Lawful basis: Our contractual obligation with You
To notify You of new products and services that may be of interest to You
Personal Data processed: identity data, contact data, profile and behavioural data, marketing and communications data
Lawful basis: Your Consent to receive direct marketing communications from Racemob
To use data analytics to improve our Services
Personal Data processed: Technical data, profile and behavioural data, usage data
Lawful basis: Our Legitimate Interest in providing You with the Racemob Services
5. Our Data Processors
We use Service Providers ("Data Processors") who are third parties who provide elements of services for us. Examples of these Data Processors include, but are not limited to:
- Railway - API platform
- Google Cloud Platform - cloud data infrastructure
- MongoDB - cloud data infrastructure
- GitHub - private code repositories
- PostHog - product analytics
- Expo - software development
- Clerk - user management
- n8n - automated workflow management
- Twilio - telephony services
- ElevenLabs - telephony services
- Slack - internal communications
We have Data Processor Agreements in place with our data processors. This means that they cannot do anything with your Personal Data unless We have instructed them to do it. They will not share your Personal Data with any organisation apart from us or further sub-processors who must comply with our instructions. They will hold your Personal Data securely and retain it for the period We instruct.
6. Sharing Your Personal Data
In addition to the third-party Service Providers listed in section 5 above, We may share Personal Data with external Data Controllers in the following circumstances:
- You have explicitly consented to the data sharing
- If the law or a public authority obliges us to share the Personal Data
- In order to protect your vital interests, or in the vital interests of a third party
- If We need to share Personal Data in order to establish, exercise or defend our legal rights
7. International transfers
Your Personal Data is processed at Racemob's offices in the UK and in any other places where the parties involved in the processing are located. This means that this information may be transferred to Devices located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction. In particular, when Racemob shares your Personal Data with our trusted Data Processors, your Personal Data could be stored and processed within third countries. Where this occurs, Racemob will ensure that:
- The security and confidentiality of your Personal Data is secure at all times
- Any Data Controller receiving your Personal Data has entered into an agreement with Racemob which contains standard data protection clauses as required by UK and EU GDPR or there is an alternative appropriate safeguard in place governing the transfer
- Any Data Processor receiving your Personal Data has entered into an agreement with Racemob which contains the required Data Processor clauses as well as standard data protection clauses as required by UK and EU GDPR or there is an alternative appropriate safeguard in place governing the transfer
Where You are based in the UK or EU and We were required to transfer your Personal Data out of the UK or EU to countries not deemed by the ICO or European Commission (as relevant) to provide an adequate level of Personal Data protection, the transfer will be based on safeguards that allow us to conduct the transfer in accordance with the Data Protection Legislation, such as the specific contracts containing standard data protection clauses approved by the ICO or European Commission (as relevant) providing adequate protection of Personal Data.
8. Marketing
We may use your Personal Data to tell You about products, services and offers that We think may be of interest to You. We can only use your Personal Data to send You marketing messages if We have either your consent or a legitimate interest to do so. You can ask us to stop sending You marketing messages at any time by contacting us or by using the opt-out links on any marketing message sent to You. We will get your express opt-in consent before We share your Personal Data with any company outside our group of companies for marketing purposes.
9. Data security
We work hard to protect our systems and any information that We hold from unauthorised access or unauthorised alteration, disclosure or destruction. In particular, We:
- Limit access to our buildings and resources to only those that We have determined are entitled to be there (by use of passes, key card access and other related technologies)
- Manage data security breach reporting and notification systems which allows us to monitor and communicate information on data breaches with You or with the applicable regulator when required to do so by law
- Implement access controls to our information technology
- Deploy appropriate technical and organisational and security measures (including encryption, anonymisation and archiving techniques) to safeguard your information across all our computer systems, networks, websites, mobile apps and offices
- Regularly review our information collection, storage and processing practices, including physical security measures, to guard against unauthorised access to systems
- Restrict access to Personal Data to Racemob employees, contractors, Service Providers and agents who need to know that information in order to process it for us and who are subject to strict contractual confidentiality obligations
- Close your account on request
10. Business continuity
We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any Personal Data that You have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Notice, be permitted to use that data only for the purposes for which it was originally collected by us.
11. Retention
We retain a record of your Personal Data in order to provide You with high quality Services. We will always retain your Personal Data in accordance with the Data Protection Legislation and never retain your information for longer than is necessary. Racemob considers the retention period to begin from the point at which Racemob last contacted You or otherwise reviewed your record to determine whether it was still active, unless otherwise required by law. As such, unless otherwise required by law, your data will be retained for the following periods and then securely deleted:
- Processing Personal Data in relation to our current customers: for the duration of Racemob providing Services to You, plus an additional three years
- Processing Personal Data in relation to financial transactions: for the duration of the transaction, plus an additional seven years
- Processing Personal Data in relation to customer service enquiries: for the duration of the enquiry, plus an additional three years
- Processing Personal Data in relation to technical support enquiries: for the duration of the enquiry, plus an additional three years
- Processing Personal Data in relation to ensuring security of our Services: for the duration of the user interaction, plus an additional three years
- Processing Personal Data in relation to marketing campaigns: for the duration of the marketing campaign, plus an additional three years
- Processing Personal Data in relation to website visitors (for non-Racemob customers): for the duration of the website visit, plus an additional three years
12. Your Rights
If You are a Data Subject in the UK, the European Union (EU), or the European Economic Area (EEA) and/or your Personal Data is processed in the context of our UK office, You have certain rights in respect of your Personal Data. These rights include:
The Right to be Informed
You have the right to be informed about the collection and use of your Personal Data. We ensure We do this with our internal and external Privacy Notices (including this document). These are regularly reviewed and updated to ensure these are accurate and reflect our data processing activities.
The Right to Access Your Personal Data
You have the right to access the Personal Data that We hold about You in many circumstances, by making a request. This is sometimes called a 'Data Subject Access Request'. If We agree that We are obliged to provide Personal Data to You (or someone else on your behalf), We will provide it to You or them free of charge and aim to do so within one month from when your identity has been confirmed.
The Right to Rectify Your Personal Data
If any of the Personal Data We hold about You is inaccurate, incomplete, or out of date, You may ask us to correct it.
The Right to Erasure
You have the right to have Personal Data erased. This is also known as the 'right to be forgotten'. The right is not absolute and only applies in certain circumstances. For instance, the right to erasure does not apply where We have a legal obligation to retain your Personal Data. If You are a Racemob user, You can select 'Delete my account' from your Account Settings to make a Right to Erasure Request.
The Right to Restrict Processing
You have the right to ask us to restrict the processing of your Personal Data. For example, this may be because You have issues with the accuracy of the data We hold or the way We have processed your data. The right is not absolute and only applies in certain circumstances.
The Right to Portability
Where We are processing your Personal Data on the lawful bases of consent or contractual obligation, the right to portability gives You the right to receive Personal Data You have provided to a controller in a structured, commonly used, and machine-readable format. It also gives You the right to request that a controller transmits this data directly to another controller.
The Right to Object
You have the right to object to our processing of some or all of the Personal Data that We hold about You. This is an absolute right when We use your data for direct marketing but may not apply in other circumstances where We have a compelling reason to do so, e.g., a legal obligation.
The Right to Withdraw Consent
Where the lawful basis for processing your Personal Data is your consent, You can withdraw your consent at any time, and We will no longer process your Personal Data for that purpose going forward.
The Right to Object to Direct Marketing
Where We are processing your Personal Data for the purposes of direct marketing, You can object to this purpose, and We will no longer process your Personal Data for this purpose going forward.
The Right to Complain to the Supervisory Authority
You can make a complaint to the Information Commissioner's Office (ICO), or any other supervisory authority, at any time about the way We use your information. You can contact the ICO through their website located at https://ico.org.uk/for-the-public. We will always do our very best to solve any problems You may have before such a complaint is necessary.
Children's Rights
We do not seek or knowingly collect any personal information about children under 13 years of age. If We become aware that We have unknowingly collected personal information from a child under the age of 13, We will make commercially reasonable efforts to delete such information from our database. If You are the parent or guardian of a minor child who has provided us with personal information, You may contact us to request it be deleted.
13. Contact us
If You have any questions about this Privacy Notice, or should You need to raise a complaint concerning your Personal Data, please contact us at privacy@racemob.app.