PRIVACY POLICY

Last updated: August 18, 2026

INTRODUCTION

INEO Racing Technologies is a registered business name operated by a sole trader established in Ireland ("INEO", "we", "us", or "our"). We operate the website www.ineo.events (the "Site") and provide motorsport event and championship management services (collectively, the "Services"). We are committed to protecting personal data and handling it in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR") and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our Services, including the circumstances in which INEO acts as a Data Controller and when we process personal data on behalf of clubs, event organisers, championship organisers, and other organisations acting as Data Controllers.

You can contact us regarding privacy or data protection matters at:

• Email: hello@ineo.events
• Data Protection Contact: hello@ineo.events

OUR ROLE AS DATA CONTROLLER AND DATA PROCESSOR

INEO's role under data protection law depends on the circumstances in which personal data is processed.

Where a club, championship organiser, event organiser, or other organisation uses the Services to collect and manage personal data in connection with its events, championships, memberships, or other activities, that organisation will generally act as the Data Controller. In these circumstances, INEO acts as a Data Processor, processing personal data on behalf of and in accordance with the instructions of the Data Controller.

INEO separately acts as a Data Controller where we determine the purposes and means of processing personal data ourselves. This may include processing necessary for the administration of INEO user accounts, operation and security of the Services, customer support, prevention of fraud and misuse, compliance with legal and regulatory obligations, and our own business administration.

If you have questions about how personal data relating to a particular event, championship, club, or membership is used, you may need to contact the relevant organising organisation as the Data Controller. We will assist Data Controllers in fulfilling their data protection obligations where required by applicable law.

TABLE OF CONTENTS

1. Information We Collect
2. How We Use Your Information
3. Legal Basis for Processing
4. Data Sharing and Disclosure
5. Third-Party Services
6. Cookies and Tracking Technologies (including Cookie Declaration)
7. Data Security
8. Data Retention
9. Your Rights Under GDPR
10. Children's Privacy
11. International Data Transfers
12. Changes to This Privacy Policy
13. Contact Us

1. INFORMATION WE COLLECT

We collect information that you provide directly to us and information that is automatically collected when you use our Services.

1.1 Information You Provide to Us

Account Information:

• Email address
• First name and last name
• Password (stored using cryptographic hashing)
• Profile picture (optional)
• Full address (optional)

Driver Information:

• Full name
• Date of birth
• Nationality
• Race number
• Transponder number
• Car make and model (for rally events)
• Car engine capacity (for rally events)
• Co-driver information (if applicable, including name, date of birth, nationality, and email)
• Parent/Guardian or Next of Kin information (name, phone number, email address, address)
• Phone number (optional)
• Novice status
• Gender (optional)
• Licence details (issuing ASN, licence number, expiry date)
• Custom field data as required by specific events
• Digital Signature including embedded IP address and timestamp at time of signing

Event and Championship Registration Information:

• Event entries and registrations
• Class selections
• Subclass selections
• Payment information (processed securely through Stripe - we do not store full payment card details)
• Entry confirmations and receipts

Communications:

• Messages sent through our platform
• Support requests
• Email communications

1.2 Information Automatically Collected

• Usage Data: Information about how you access and use our Services, including your IP address, browser type, device information, pages visited, and time spent on pages
• Log Data: Server logs including IP addresses, access times, and pages viewed
• Session Information: Session cookies and tokens used to maintain your login state
• Location Data: General location information derived from your IP address

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• To Provide and Maintain Our Services: Create and manage your account, process event registrations, facilitate payments, and provide customer support
• To Communicate with You: Send you service-related notifications, event confirmations, payment receipts, and respond to your inquiries
• To Manage Events: Process event entries, manage driver registrations, coordinate with event organizers, and maintain event records
• To Display Public Information: As stated in our Terms and Conditions, competitor names (including minors) registered for events may be publicly visible on our website, event materials, or associated platforms
• To Improve Our Services: Analyze usage patterns, troubleshoot issues, and enhance user experience
• To Ensure Security: Detect and prevent fraud, unauthorized access, and other security threats
• To Comply with Legal Obligations: Meet legal requirements, respond to legal processes, and protect our rights
• For Marketing: With your consent, send you newsletters and promotional communications about our Services

3. LEGAL BASIS FOR PROCESSING

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: To perform our contract with you (e.g., processing event registrations, managing your account)
• Legitimate Interests: To operate and improve our Services, ensure security, and prevent fraud
• Consent: Where you have provided explicit consent (e.g., marketing communications, optional profile features)
• Legal Obligation: To comply with applicable laws and regulations
• Vital Interests: To protect the safety and security of event participants

4. DATA SHARING AND DISCLOSURE

We may share your information in the following circumstances:

4.1 Event Organisers and Clubs

When you register for an event, championship, membership, or other activity through the Services, your personal data may be processed on behalf of the relevant club, event organiser, championship organiser, or other organisation responsible for that activity. In these circumstances, the relevant organisation generally acts as the Data Controller and INEO acts as a Data Processor.

The Data Controller determines what personal data is required for the relevant activity and how that information is used. INEO processes and makes this information available to the Data Controller as necessary to provide the Services and administer the relevant event, championship, membership, or activity.

4.2 Public Visibility

Certain participant information, such as competitor names, race numbers, classes, entry details, and event results, may be made publicly available on the Site, in event materials, or through other platforms associated with an event or championship where this is necessary for the administration, operation, reporting, or publication of motorsport activities.

Where INEO publishes or otherwise processes this information on behalf of a club, championship organiser, event organiser, or other organisation, that organisation acts as the Data Controller and is responsible for determining the appropriate lawful basis for the publication of the information.

Where the participant is a minor, the relevant organiser is responsible for ensuring that any publication of personal data relating to the minor is lawful, appropriate, and limited to what is necessary for the relevant event or championship.

4.3 Service Providers

We share information with trusted third-party service providers who assist us in operating our Services, including:

• Payment processors (Stripe)
• Email service providers (MailerSend)
• Hosting and cloud storage providers
• Analytics and monitoring services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users or others.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. THIRD-PARTY SERVICES

Our Services integrate with the following third-party services that may collect and process your information:

5.1 Payment Processing - Stripe

We use Stripe to process payments. When you make a payment, Stripe collects and processes your payment information. We do not store your full payment card details. Stripe's privacy policy applies to their processing of your payment data: https://stripe.com/privacy

5.2 Email Services - MailerSend

We use MailerSend to send transactional and marketing emails. MailerSend processes your email address and name for email delivery. Their privacy policy: https://www.mailersend.com/legal/privacy-policy

5.3 Analytics - Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as page views, time on site, and device information. Google Analytics cookies are only placed if you consent to the Statistics category in our cookie banner. Google's privacy policy: https://policies.google.com/privacy

5.4 Live Chat - Tawk.to

We use Tawk.to to provide live chat support. When you use the chat feature, Tawk.to may collect your name, email address, and chat messages. The Tawk.to chat widget is only loaded if you consent to the Preferences category in our cookie banner. Tawk.to's privacy policy: https://www.tawk.to/privacy-policy/

5.8 Cookie Consent Management - Cookiebot

We use Cookiebot by Usercentrics to manage cookie consent on this website. Cookiebot stores your consent preferences in a cookie named CookieConsent for up to 12 months. This cookie is strictly necessary for the operation of the consent management function. Cookiebot's privacy policy: https://www.cookiebot.com/en/privacy-policy/

5.5 Error Monitoring - Bugsnag

We use Bugsnag to monitor and track errors in our Services. Bugsnag may collect technical information about errors and your device. Bugsnag's privacy policy: https://www.bugsnag.com/legal/privacy-policy

5.6 WhatsApp Business API

We use WhatsApp Business API to send WhatsApp messages to our users with important and timely event information. WhatsApp Business API collects your phone number and name for WhatsApp message delivery. WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy/.

5.7 Motorsport Ireland API

We use Motorsport Ireland API to verify driver licence details. The Motorsport Ireland API collects your Date of Birth and licence number for verification. Motorsport Ireland's privacy policy: https://www.motorsportireland.ie/privacy-policy/.

6. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to track activity on our Services and store certain information. Non-essential cookies are only placed after you have given your consent via our cookie consent banner.

6.1 Types of Cookies We Use

• Necessary Cookies: Required for the Services to function, including session cookies for authentication and security. These are always active.
• Statistics Cookies: Used to understand how visitors interact with our website (Google Analytics). Only placed with your consent.
• Preferences Cookies: Enable enhanced functionality and personalisation (e.g., the live chat widget). Only placed with your consent.

6.2 Cookie Management

When you first visit our website, a cookie consent banner will appear. You can choose to accept all cookies, accept only necessary cookies, or customise your preferences by category. You can change or withdraw your consent at any time by clicking the cookie icon that appears at the bottom of the page, or by contacting us at hello@ineo.events.

You can also control cookies through your browser settings. For more information about managing cookies, visit www.allaboutcookies.org.

6.3 Cookie Declaration

A full list of the cookies used on this website, including their purpose and duration, is maintained below and updated automatically when our cookie scanner runs.

7. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure storage of passwords using industry-standard cryptographic hashing algorithms
• Secure HTTPS connections for all data transmission
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure session management

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

8. DATA RETENTION

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Information: Retained while your account is active and for a reasonable period after account closure to comply with legal obligations
• Event Records: Retained for the duration necessary to manage events and comply with legal and regulatory requirements
• Payment Records: Retained as required by financial and tax regulations
• Marketing Data: Retained until you withdraw consent or unsubscribe

When we no longer need your personal data, we will securely delete or anonymize it in accordance with our data retention policies.

9. YOUR RIGHTS UNDER GDPR

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the Data Protection Commission (Ireland) or your local supervisory authority

To exercise any of these rights, please contact us at hello@ineo.events. We will respond to your request within one month, though this may be extended in complex cases.

Note: Some rights may be limited in certain circumstances, such as when we have a legal obligation to retain data or when deletion would affect the rights of others.

10. CHILDREN'S PRIVACY

Our Services are intended for users who are at least 18 years old. However, parents or guardians may use the Services to register minors (under 18) for events, championships, memberships, or other motorsport activities on their behalf.

When a minor is registered:

• Personal data relating to the minor, such as their name, date of birth, nationality, licence details, and other information required for participation, may be collected and processed
• Parent or guardian contact information may be required in connection with the minor's participation
• Where INEO processes this information on behalf of a club, event organiser, championship organiser, or other organisation, that organisation acts as the Data Controller and is responsible for determining the appropriate lawful basis for processing the minor's personal data
• Certain limited information relating to a minor, such as their name, race number, class, entry information, or results, may be publicly visible where appropriate for participation in the relevant motorsport activity, as described in Section 4.2

We recognise that personal data relating to children requires particular protection. Where INEO acts as a Data Processor, we process such information on behalf of and in accordance with the instructions of the relevant Data Controller.

If you are a parent or guardian and have questions or concerns about the processing of a minor's personal data, you may contact the relevant event or championship organiser as Data Controller, or contact us at hello@ineo.events.

11. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where some of our third-party service providers are located.

When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date at the top of this Privacy Policy
• Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect personal data.

13. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

INEO Racing Technologies
Email: hello@ineo.events
Data Protection Contact: hello@ineo.events

For complaints about our data handling practices, you may also contact the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland
Website: www.dataprotection.ie