ACE Races Privacy Policy

Last updated: 7 September 2026

This policy explains how ACE Races collects, uses, stores, and shares personal data when you use our website, Shopify store, mobile app, web app, virtual races, digital challenges, physical products, merchandise, emails, customer support, and related services.

1. Who we are

ACE Races is the controller of your personal data. Business name: ACE Races. Company number: 12672508. ICO registration number: ZB887961. Privacy contact: info@ace-races.co.uk.

2. Who this policy applies to

This policy applies to website and Shopify visitors, customers, app and web-app users, virtual race and digital challenge participants, people whose details are supplied by a buyer, people who connect optional activity services, people who contact us, and ACE Races admin users.

3. Personal data we collect

Depending on how you use ACE Races, we may process your name, email address, phone number, billing and delivery details, customer and participant details, account and one-time-passcode records, session and device data, orders and fulfilment data, challenge entries, manual activity, distance, progress, completions, badges, certificates, ACE Score and performance information, support messages, photos or files you submit, notification tokens, diagnostic and service-log data, cookies and analytics data, and information needed for security and administration. Full payment card details are processed by Shopify and payment providers rather than being needed by ACE Races.

Health platform data

If you choose to connect Apple Health/HealthKit or Android Health Connect, ACE Races may read workout sessions, walking/running/cycling/swimming distance, active energy/calories, total calories, steps, and, where used, exercise-route metadata. This access is optional. It is used to list eligible activity, let you select a workout, and apply the selected activity and distance to challenge progress. ACE Races does not write data back to Apple Health or Health Connect and does not upload or store full raw health-platform records. Imported activity and challenge results may be stored as described in this policy. We do not sell health-platform data or use it for advertising.

Strava data

If you choose to connect Strava, we may process connection and token records plus selected activity data such as dates, types, distance, and duration so activities can be imported into ACE Races.

ACE Move location

If you use ACE Move, the app may use precise device location while the activity is active, including optional background location where you enable it, to calculate and display distance and elapsed time. The active session keeps the latest GPS point locally. The exact GPS point is removed when the activity is finished or discarded, and ACE Races does not retain a route history. Location is not used for advertising.

4. How we use personal data

We use personal data to operate ACE Races, provide race and challenge access, recognise Shopify purchases, manage participants and fulfilment, authenticate accounts, record manual and imported activities, calculate progress and rewards, provide optional integrations, send service and support messages, improve and secure the service, detect misuse and faults, operate administration, and comply with legal and platform obligations.

5. Lawful bases

We rely on contract, legitimate interests, consent for optional features and communications, and legal obligation as applicable. Activity and health-related information may be treated as health or special-category data where required; we rely on explicit consent or another lawful condition where necessary.

6. Sharing personal data

We may share personal data with Shopify and payment providers, delivery and fulfilment providers, Strava when you connect it, email and notification providers, hosting, database, monitoring and security providers, analytics or marketing providers where used, App Store, Google Play and Expo/EAS for distribution and compliance, professional advisers, and authorities where legally required. Health-platform data is read from the relevant device service when you choose the integration; ACE Races does not sell it. Challenge progress and performance information is intended to remain private unless you choose to share content.

7. Retention and security

We keep personal data only as long as reasonably necessary for service delivery, support, security, legal, tax, accounting, fraud-prevention, fulfilment, audit, and dispute purposes. One-time passcodes are short-lived. Connection data may be removed or made inactive when you disconnect where technically possible. We use measures such as passwordless sign-in, time-limited codes, rate limiting, server-side checks, secure storage where supported, restricted admin access, access controls, logging, monitoring, and other safeguards appropriate to the service.

8. Account and data deletion requests

You can request deletion of your ACE Races account and associated personal data by emailing info@ace-races.co.uk with the subject Account deletion request and the email address used for the account. We may verify identity. We will delete data we are able to delete and explain any data retained for legal, accounting, fraud-prevention, security, dispute, fulfilment, or other lawful reasons. Some order and transaction records may be retained where required by law or necessary to establish, exercise, or defend legal claims.

9. Children and family entries

Adults may buy entries for children, family members, friends, groups, charities, or workplaces. Where a child takes part, a parent, guardian, or responsible adult should manage the account, purchase, participant details, and app use where required by law. Contact us if you believe a child has provided personal data inappropriately.

10. Your rights and contact

Depending on your circumstances and where you live, you may have rights to access, correct, delete, restrict, object to, or transfer personal data and to withdraw consent where applicable. To exercise rights or raise a privacy question, contact info@ace-races.co.uk. UK users may also complain to the Information Commissioner's Office.

Our website, store, app, emails, and services may link to third parties such as Shopify, payment providers, Strava, Apple Health, Google Play, App Store, analytics providers, and support tools. Those services have their own privacy notices and terms. We may update this policy when ACE Races, the app, technology, or legal requirements change.