Battle for Hastings

Privacy Policy

Effective from 1 April 2026

This policy explains how Stash Racing Inc. ("we", "us") collects, uses, and looks after the personal data you provide when applying for and participating in Battle for Hastings. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR).

1. What data we collect

When you submit an application for Battle for Hastings, we collect the following information:

Whether your team is complete or still forming, and team category (mixed or all-women's)
Team name (or provisional details) and optional notes while you are still forming a team
Team captain's full name, email address, and phone number
Names and email addresses of team members you list (up to four when your team is complete)
Typical running habits, your reason for applying, and how you heard about the event

If your application is accepted, we may also collect payment information (processed securely via a third-party payment provider — we do not store card details ourselves).

2. How we use your data

We use the information you provide to:

Assess and respond to your application
Administer your entry if accepted, including sending event information and logistics
Process entry fee payments
Contact you about changes to the event or emergency communications on race day
Compile participant lists and results

We will not use your data for unrelated marketing without your explicit consent.

3. Legal basis for processing

We process your data on the following bases under UK GDPR:

Contractual necessity — to fulfil our obligations to you as a participant
Legitimate interests — to administer and improve the event safely
Legal obligation — where required by law (e.g. safety records)

4. Who we share your data with

We do not sell your personal data. We may share it with:

Google — application responses are stored in Google Sheets, subject to Google's privacy policy
Payment processors — for secure handling of entry fees
Event safety personnel — where necessary for participant welfare on race day

All third parties are required to handle your data securely and in accordance with applicable law.

5. How long we keep your data

We retain participant data for up to two years after the event date. Data relating to unsuccessful applications is deleted within six months of the application window closing. You can request earlier deletion at any time (see section 7).

6. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to certain uses of your data
Request restriction of processing in certain circumstances
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

7. Contact us

To exercise any of your rights, or if you have any questions about how we handle your data, contact us at hello@stashrunning.com. We aim to respond within 30 days.

8. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date. For significant changes, we will notify accepted participants directly by email.

Also see our Terms & Conditions.