How RaceCompass handles personal information.
This notice explains the information RaceCompass uses, why it is used, the services involved and the choices available to users.
Last updated: 21 August 2026
Who controls your data
RaceCompass is operated by Diablo Aquila Ltd (company number 17010899), registered in England and Wales with its registered office at 12 Rosehip Lane, Tunbridge Wells, United Kingdom, TN2 3XU. Diablo Aquila Ltd is the controller of personal information processed through the RaceCompass website and app. Privacy enquiries can be sent to privacy@racecompass.org.
Information we may process
- Account information such as email address, authentication identifiers and profile details.
- Preferences supplied during onboarding, including interests, travel style, party details, manually selected home location and departure hubs.
- Race, trip and knowledge activity linked to your account.
- Notification preferences and service timestamps.
- Technical and security information needed to operate and protect the service.
RaceCompass does not currently rely on precise GPS location as a core account field; home-location information is selected manually by the user.
Why we use it and our lawful bases
We process information to provide authentication and requested RaceCompass features, personalise the product, save preferences and plans, operate optional notifications, support users, maintain security and improve the service. Depending on the purpose, we rely on performance of our service contract, legitimate interests in operating and protecting RaceCompass, legal obligations, or consent where consent is required. Where processing is based on consent, you can withdraw that consent at any time.
Service providers and recipients
Supabase provides core backend and authentication services for the RaceCompass app. Vercel provides hosting and delivery infrastructure for the public RaceCompass website. We may also use service providers required for email, security and product operation. Providers receive personal information only where needed to perform the relevant service and are subject to their own contractual and security obligations.
International transfers
Some service providers may process personal information outside the United Kingdom. Where UK data-protection law restricts an international transfer, we use an applicable lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, as appropriate to the provider and destination.
Third-party links and bookings
RaceCompass may link to travel, ticketing, activity and other external partners. If you continue to a partner and transact with them, that provider's own privacy terms apply to the information they collect.
Retention and deletion
Personal information is kept only for as long as needed for the relevant service, security, legal or operational purpose. Where a RaceCompass account is deleted, associated user-owned account data is removed through the account-deletion process, subject to information that must lawfully be retained. Independent accounts, bookings or purchases made directly with third-party providers are controlled by those providers.
Your rights
Depending on the processing and applicable law, you may have rights of access, rectification, erasure, restriction, portability and withdrawal of consent. You may also have a right to object to processing based on legitimate interests or to direct marketing. Contact privacy@racecompass.org to exercise a data right.
Complaints
If you are in the United Kingdom, you have the right to complain to the Information Commissioner's Office. You can find its complaint process at ico.org.uk. We would welcome the opportunity to address your concern first through privacy@racecompass.org.
Automated decision-making
RaceCompass does not currently use personal information to make solely automated decisions that produce legal effects or similarly significant effects on users.
Security
RaceCompass uses technical and organisational safeguards designed to protect account data, but no internet service can guarantee absolute security.
