Privacy Policy

GoRace ("GoRace", "we", "us", "our") operates gorace.co.za, a platform for discovering school and club cycling events, registering to compete, and following official results and series rankings. This policy explains what personal information we collect, why we collect it, who can see it, and the choices and rights you have — in line with South Africa's Protection of Personal Information Act (POPIA).

This policy applies to everyone who uses GoRace: riders, parents and guardians managing a child's profile, club managers, event organisers, and administrators.

1. Information we collect

1.1 Account information

When you register, we collect your name, email address, and phone number. If you sign up or log in with Google or Apple, we receive your name and email from that provider instead of a password. We also collect your South African ID number or passport number. This is validated (SA ID numbers are checked using the standard Luhn checksum) and used as your unique identity key on the platform — it lets us prevent duplicate accounts and correctly match your race results to you, even across multiple events and years.

1.2 Child profiles

Parents and guardians can create a profile for a child who rides. Children never create their own GoRace account or log in themselves — a child's profile (name, ID/passport number, school/club, license details, and results) is created and controlled entirely by the parent who added it. A parent can grant a second adult (for example a co-parent) read access and the ability to register the child for events; only the original parent can edit or delete the child's profile.

1.3 Race results and rider identity

We source official results from event timing partners and organisers, and match them to rider accounts using name matching or, for events where race numbers double as season licenses, number matching. Matched results carry your account link privately, but the results themselves — rider name, race number, category, club, finishing time and position — are public information, in keeping with how race results have traditionally been published. Season rankings and standings, computed from these results using the official points table for the relevant series, are also public.

1.4 Club and event information

If you manage a club, we hold your club's roster (approved members, pending requests) and any group emails you send to members. If you organise events, we hold the event details you submit for review, plus the contact details you provide for that event — only the contacts you explicitly mark as public are shown on the public event page; others (for example an internal entries or timing contact) are visible only to GoRace administrators reviewing the submission.

1.5 Registrations, waivers, and consent

When you or your child register for an event, we record the registration and any indemnity waiver or consent you sign as part of entering. These are retained as the organiser's legal record of who entered and agreed to the event's rules, even if you later delete your account.

1.6 Live timing data

At events with electronic timing, race-number reads from timing points are used to compute lap splits and power a live results feed during the race. This data is tied to a race number, not directly to your account.

1.7 Technical information

We use your device's local storage to keep you signed in between visits, and we record basic usage events (such as which login method you used) to help us understand how the platform is used and to diagnose problems.

2. How we use your information

• To create and secure your account, and prevent duplicate or fraudulent accounts.
• To let you discover events, register to compete, and manage your or your child's entries.
• To match official results to the correct rider and compute season rankings.
• To let club managers administer their roster and event organisers manage their own events and entries.
• To recover access to your account if you lose it, using our identity recovery process.
• To send you service communications: registration confirmations, verification codes, password resets, role-request decisions, and club communications from a manager of a club you belong to.
• To keep a legal and safety record of event entries and signed waivers.
• To maintain the security, integrity, and performance of the platform.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Who we share information with

Publicly, to anyone visiting the site: event listings, official results, and series rankings. Results are public sporting records by design — this is the core purpose of the platform.

Within the platform, on a need-to-know basis: a club manager sees their own club's roster; an event organiser sees registrations for their own events; GoRace administrators can access records as needed to operate and support the platform.

With service providers who process data on our behalf: our application hosting and database provider; email delivery for verification codes and notifications; Google and Apple, only if you choose to sign in with them. These providers are only permitted to use your information to provide their service to us.

We do not share your personal information with third parties for their own marketing purposes.

4. Children's privacy

GoRace does not knowingly collect personal information directly from children. Children's profiles are created and managed by a parent or guardian, who is responsible for the accuracy of the information provided and for supervising the child's participation in any event. If you believe a child has provided us with information directly, please contact us using the details below and we will address it.

5. Data retention

We keep your account information for as long as your account is active. If you delete your account, we remove or de-link personal identifiers from most records, but some information is retained as a historical or legal record even after deletion:

• Published race results remain public (they are the historical record of an event that took place), with the link to your account removed.
• Event registrations and signed waivers are retained as the organiser's record of who entered an event and agreed to its rules.

If you manage a club or organise events, deleting your account will require an administrator to reassign those responsibilities before your account can be fully removed.

6. Your rights under POPIA

As a data subject under South African law, you have the right to:

• Ask us what personal information we hold about you and how it's used.
• Ask us to correct inaccurate or incomplete information — most of this you can update directly in your profile settings.
• Ask us to delete your account and personal information, subject to the retention explained in section 5.
• Object to processing that is based on our legitimate interests.
• Lodge a complaint with South Africa's Information Regulator if you believe we have not handled your information properly.

You can exercise most of these rights directly from your Profile Settings, or by contacting us using the details below. The Information Regulator (South Africa) can be reached at inforegulator.org.za.

7. Security

We use industry-standard measures — including encrypted connections and access controls scoped to each user's role — to protect your information. No online platform can guarantee absolute security, but we take reasonable steps to protect your data and to detect and respond to any incident promptly.

8. Identity recovery

If you lose access to an old account, our identity recovery process lets you request a merge into a new one. To protect against fraudulent claims, we notify the old account's registered email and apply a hold period before completing the merge, and an administrator can review the request at any time.

9. Changes to this policy

We may update this policy from time to time, for example as the platform gains new features. We'll update the "Last updated" date above when we do. Continuing to use GoRace after a change means you accept the updated policy.

10. Contact us

For any question about this policy or your personal information, contact us at support@gorace.co.za.

[GoRace to complete: registered legal entity name, registration number, physical/postal address, and designated Information Officer contact details, as required under POPIA.]