Privacy Policy
Last updated: 21 March 2025
1. Introduction
This privacy policy ("Policy") explains how Kartingstats UK ("we", "us", "our") collects, uses, and protects the data you provide when you visit and use https://kartingstats.uk ("Website", "Service").
We reserve the right to update this Policy at any time. Any changes will be reflected on this page, and we encourage you to review it regularly to stay informed.
2. What User Data We Collect
When you use our Website, we may collect the following data:
- Your IP address.
- Your contact information, including your email address if you choose to provide it.
- Emails that you upload, including .eml files, raw email sources, or forwarded emails.
- Content you upload, such as karting track reviews, images, and other media.
- Information about your interests and preferences based on your interactions with our Website.
- Data about your browsing behavior on our Website.
3. Why We Collect Your Data
We collect your data for the following purposes:
- To improve our Website, services, and user experience.
- To analyze trends and understand how users interact with our content.
- To contact you for feedback, surveys, or customer support if necessary.
- To enable features such as user-generated content, including reviews, image uploads, and embedded media.
- To process and analyze uploaded emails in accordance with the purpose for which they were submitted.
- To comply with legal obligations and protect the security of our Website.
4. Email Privacy & Handling of Uploaded Emails
Kartingstats UK understands the sensitivity of personal emails and is committed to protecting your privacy.
Email Uploads: Our Website allows users to upload emails, including .eml files, raw email sources, or forwarded messages. These emails are handled securely and used solely for the purpose intended by the user at the time of submission.
Email Account Linking & Automated Data Collection: Users may choose to securely link their email accounts (such as Gmail or Outlook) via the respective provider's API. When linked, we only access and process emails from specific senders as explicitly authorized by the user.
- Explicit User Consent: We only collect data from linked email accounts with the user’s clear, informed consent.
- Limited Scope: We do not access or store entire email inboxes—only relevant emails from predefined senders are processed for extracting necessary data.
- Secure Handling: Retrieved emails and extracted data are processed securely and stored only for the intended purpose. When successfully processed, the bodies and headers of emails are deleted, leaving only the google_id, subject and date_received stored. Like all data, access to users emails is subject to strict access controls and when stored, they're encrypted.
- Processing: Our service automatically processes relavent emails to extract the following race data: Session Name, Session Start Time, Session Location, Session Participants, Session Lap Times.
No Sharing or Selling: We never sell, rent, share, or distribute uploaded emails, linked account data, or extracted information to any third parties.
Limited Access: Only authorized personnel with a legitimate need for processing or analysis have access to uploaded or retrieved emails.
Retention & Deletion:
- We retain uploaded emails and linked account data only as long as necessary for the intended purpose and securely delete them afterward.
- Users may request immediate deletion of their uploaded or retrieved email data at any time by contacting us or managing their account settings.
- If a user unlinks their email account, we will stop retrieving new emails and will delete any previously collected data upon request.
By linking an email account, users acknowledge and agree to this handling of their email data in accordance with our privacy policy.
5. Third-Party Services and Data Sharing
While we do not sell or distribute your personal information, certain third-party services may require limited data sharing:
- YouTube Embeds: If you link a YouTube video to your content, YouTube may collect certain data as per their privacy policy. We minimize the data shared and do not control YouTube’s data collection practices.
- Analytics & Performance Tracking: We may use tools such as Google Analytics to track Website performance and user behavior. This data is anonymized and used solely for improving our services.
- Cookies & Tracking Technologies: See the "Cookie Policy" section below for more details.
We only share the necessary data required to enable these functionalities, and we take precautions to limit exposure.
6. Links to External Websites
Our Website may contain links to external sites (e.g., YouTube, karting track websites). Please note:
- We are not responsible for the privacy practices of third-party websites.
- Once you leave our Website, your data is subject to the policies of the external site.
- We encourage you to read their privacy policies before sharing any information.
7. Restricting the Collection of Your Personal Data
You have control over the data you provide:
- You can choose not to provide personal details when submitting content.
- You can contact us to request the removal or modification of your data.
Kartingstats UK will never lease, sell, or distribute your personal information unless required by law.
8. GDPR Data Removal Rights
Your Rights Under the General Data Protection Regulation (GDPR):
If you are a resident of the European Economic Area (EEA), you have specific rights regarding your personal data under GDPR. These include:
- Right to Access: You can request copies of your personal data we hold.
- Right to Rectification: You can request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data under certain conditions.
- Right to Object: You can object to the processing of your personal data in certain situations.
- Right to Data Portability: You can request that we transfer your data to another organization or directly to you.
Data Removal Requests: If you wish to exercise any of these rights, particularly to request the removal of your personal data, please contact us at: [email protected]. We will respond to your request within 30 days.
For security purposes, we may ask you to verify your identity before acting on your request.