Privacy Policy

Apex & Chill Racing ([Registered address — to be supplied]) is the data controller for the personal data described here. If you have any question about this policy, or want to exercise one of the rights in clause 8, email apexandchillracing@outlook.com.

This policy covers apexandchillracing.co.uk. It does not cover Discord, YouTube, or our partners' sites — those have their own policies.

League entry (the “Join” form). When you apply for a seat we collect your driver name, chosen league, platform, PSN ID or Steam name, email address, Discord username, preferred car class, input method, experience level, anything you write in the message box, and your confirmation that you're 16 or over.

Merch orders. Checkout is hosted by Stripe. Stripe collects your name, email, delivery address and payment details; we receive the order contents, your email and your delivery address so the order can be printed and shipped. Card details never touch our servers.

Analytics. Only if you accept the cookie banner. Google Analytics 4 then records pages viewed, approximate location, device and browser, and how you arrived at the site. We enable IP anonymisation.

Emails to us. If you contact us directly, we keep the message and your address so we can reply.

Racing data. Results, lap times, penalties and standings from events you enter, published under your driver name.

• To run the league — reviewing entries, allocating grids, contacting you about races, publishing standings and stewarding outcomes. Basis: legitimate interests (operating a members' community you asked to join).
• To fulfil merch orders — taking payment, printing, shipping, handling returns. Basis: performance of a contract.
• To keep the site and community safe — preventing cheating, spam, abuse and fraud. Basis: legitimate interests.
• To understand how the site is used — analytics. Basis: your consent, which you can withdraw at any time.
• To meet legal obligations — keeping tax and transaction records for merch sales. Basis: legal obligation.

We do not sell your data, and we don't use it for automated decision-making or profiling.

The site sets no analytics or advertising cookies until you accept them. Until you choose, Google Analytics is not loaded at all.

• Strictly necessary — a small entry in your browser's local storage remembers your cookie choice, and another remembers your merch basket. No consent needed; the site can't work properly without them.
• Analytics (optional) — Google Analytics 4 cookies (`_ga`, `_ga_*`), set only after you click Accept, typically expiring after up to 2 years.
• Third-party embeds — pages with YouTube players (Live, Replays) may set cookies from Google when the player loads.

Changing your mind: clear this site's data in your browser settings (Privacy → Cookies and site data) and the banner will appear again on your next visit, so you can decline. You can also block cookies at browser level.

We use a small number of processors and partners, each for one specific job:

• Supabase — hosts the database that stores league entries.
• Stripe — takes payment for merch orders and holds the transaction record.
• Our print-on-demand partner — receives your name, delivery address and order contents so your item can be printed and posted.
• Google (Analytics, YouTube) — site analytics and video embeds.
• Our hosting provider — serves the site and keeps standard server logs.

We'll also disclose data where the law requires it, or to protect our rights, our members or the public.

Some of these providers are based outside the UK, mainly in the United States or the EU. Where data leaves the UK, it is protected by an adequacy decision or by Standard Contractual Clauses together with the UK International Data Transfer Addendum.

• League entries — for as long as you race with us, and up to 24 months after your last event, so we can handle returning drivers and appeals. Rejected applications are deleted within 12 months.
• Merch orders — transaction records kept for 6 years to meet UK tax rules.
• Analytics — up to 14 months in Google Analytics.
• Race results and standings — kept indefinitely as a historical record of the league, under your driver name.
• Emails — up to 24 months after the conversation ends.

Under UK GDPR you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that's wrong or out of date.
• Delete your data (we may need to keep order records for tax purposes).
• Restrict or object to how we use it — including objecting to our legitimate interests.
• Port your data to another service in a machine-readable format.
• Withdraw consent for analytics at any time, without affecting what came before.

Email apexandchillracing@outlook.com and we'll respond within one month. There's no charge for a reasonable request.

If you're not happy with how we've handled it, you can complain to the Information Commissioner's Office — though we'd appreciate the chance to put it right first.

Our leagues are for drivers aged 16 and over and we don't knowingly collect data from anyone younger. If you believe a child has given us their details, email apexandchillracing@outlook.com and we'll delete it.

The site is served over HTTPS, database access is restricted to league admins, and payment data is handled entirely by Stripe. No system is perfectly secure, but if a breach is likely to put your rights at risk we'll tell you and the ICO as the law requires.

We'll update this page when our data practices change, and the “last updated” date above will tell you when. Significant changes will be announced in Discord.