Legal
Privacy Policy
Last updated: 30 September 2026
This policy explains what personal data Racing Passport collects, why, and what your rights are. We've kept it as short and plain as we can.
1. Who we are
Racing Passport (myhorseracingpassport.com) is operated by Racing Passport, based in Ireland ("we", "us"). We are the data controller for the personal data described here.
Contact: info@myhorseracingpassport.com
2. What we collect
- Account details — your name, email address and password (the password is stored encrypted by our authentication provider; we never see it).
- Your card — the racecourses you mark as visited, the race types you tick and the big race days you record.
- Your consent choices — whether you agreed to our terms, whether you opted in to marketing from us, whether you opted in to sharing with partners, and when you made or changed each choice.
- Technical data — like any website, our hosting and service providers automatically receive your IP address and basic browser information when you load the site, to deliver it and keep it secure.
If you use the site without an account, your card is stored only in your own browser and is not sent to us.
We do not collect your location, and we don't use advertising or analytics trackers.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, saving your card and letting you sign in on any device | Performance of our agreement with you (Art. 6(1)(b)) |
| Service emails such as sign-up confirmation and password resets | Performance of our agreement with you (Art. 6(1)(b)) |
| Sending you Racing Passport news, features and offers, only if you opted in | Your consent (Art. 6(1)(a)) |
| Sharing your name and email with selected partners so they can send you their offers, only if you opted in | Your consent (Art. 6(1)(a)) |
| Keeping the site secure, preventing abuse and keeping records of consent | Our legitimate interests (Art. 6(1)(f)) and legal obligations (Art. 6(1)(c)) |
4. Marketing and partners
Both marketing options are separate, optional and unticked by default. Not opting in has no effect on your use of the site.
- From us: if you opt in, we may email you about Racing Passport — new features, racing-related news and offers.
- From partners: if you opt in, we may share your name and email address with selected partners in the horse racing, leisure, hospitality and travel sectors (for example racecourses, event organisers and racing-related brands) so that they can send you their own offers. Once shared, the partner is responsible for how it uses your data under its own privacy policy. We will only share with partners that agree to use your data lawfully, and we'll tell you who they are on request.
You can withdraw either consent at any time — untick it in your account panel on the site, use the unsubscribe link in any email, or email us. Withdrawing doesn't affect anything done before you withdrew. We will stop sharing your details with partners from that point, and will ask partners we have already shared them with to stop using them.
5. Who else processes your data
We use a small number of service providers ("processors") who handle data on our behalf under contract:
- Supabase — database and account sign-in (data stored in the EU, Ireland region).
- Resend — sending account and marketing emails (EU region).
- Netlify — website hosting.
- Cloudflare — domain and email forwarding.
The site also loads fonts from Google Fonts, map tiles from OpenStreetMap and code libraries from public content delivery networks; these receive your IP address when your browser requests them.
Some of these providers are based in, or may process data in, the United States or elsewhere outside the European Economic Area. Where that happens, transfers are protected by an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
We never sell your personal data. Apart from the providers above and partners you have opted in to, we only disclose data where the law requires it.
6. How long we keep it
- Your account and card: until you delete your account. We may delete accounts that have been inactive for 3 years, after emailing you first.
- Marketing preferences: until you withdraw consent, after which we keep a minimal record that you opted out so we don't contact you again.
- Consent records: for as long as needed to show we had your consent, and for up to 6 years after for legal claims.
7. Cookies and browser storage
We don't use advertising or analytics cookies. The site stores a small amount of data in your browser's local storage that is needed for it to work: your card (if you're not signed in), your sign-in session, and whether you've dismissed the "How it works" panel. Because this storage is strictly necessary for the service you asked for, it doesn't need a cookie banner. If we ever add analytics or advertising cookies, we'll ask first.
8. Your rights
You have the right to access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. Email info@myhorseracingpassport.com and we'll respond within one month. To delete your account, email us from the address you signed up with.
If you're unhappy with how we've handled your data, you can complain to the Data Protection Commission in Ireland (dataprotection.ie) or your local data protection authority. We'd appreciate the chance to put things right first.
9. Age
Accounts are for people aged 18 or over. We don't knowingly collect data from anyone under 18; if we learn we have, we'll delete it.
10. Security
We use reputable providers, encrypted connections (HTTPS) and access controls so that each user can only see their own card. No system is completely secure, so please use a strong password you don't use elsewhere.
11. Changes to this policy
We may update this policy. We'll change the date at the top and, for significant changes, tell registered users by email or on the site.