RaceSolution

Privacy Policy

Last updated: 27 May 2025

1. Who we are

RaceSolution is a race management and timing platform operated by Bainbridge Services ("we", "us", "our"). This policy explains what personal data we collect, how we use it, and your rights in relation to it.

If you have any questions, contact us at: [email protected]

2. Data we collect

Account holders (race organisers, timers, admins)

  • Name and email address
  • Display name
  • Account role (e.g. administrator, timer)
  • Organisation association
  • Hashed password (never stored in plain text)
  • Firebase authentication identifier

Racer data (entered by race organisers)

Race organisers import and manage racer information for their events. This typically includes:

  • First name and last name
  • Bib number
  • Category and team
  • Race status (DNS, DNF, finished, etc.)

Racer data is entered by the organising body, not collected directly from participants by RaceSolution.

Event and timing data

  • Event name, description, date and status
  • Checkpoint names, GPS coordinates and elevation
  • Timing records (bib number, checkpoint, recorded timestamp, recorded by)

Billing data

  • Stripe customer and subscription identifiers
  • PayPal transaction identifiers
  • Subscription plan, status and billing dates

We do not store full card numbers or payment credentials. Payment processing is handled entirely by Stripe and PayPal.

Technical data

  • Server-side warning and error logs (no personal data included at standard log level)
  • Local app preferences stored on your device (e.g. UI settings) via the mobile app

3. How we use your data

  • Providing the service - authenticating your account, running events, recording timings, and displaying live results.
  • Billing and subscription management - processing payments, managing subscriptions, and sending billing-related notifications.
  • Transactional emails - account verification, password reset, invitations, and system notifications sent to administrators.
  • Security - CAPTCHA verification on account creation to prevent automated abuse (via Cloudflare Turnstile).
  • Service operation - error logging for diagnosing technical issues.

We do not use your data for advertising, and we do not sell or share it with third parties for marketing purposes.

4. Third-party services

The following third-party services process data as part of delivering RaceSolution:

Google Firebase (Firestore & Authentication)

Account and application data is stored in Google Cloud Firestore and authentication is managed via Firebase Authentication. Data is held in Google's infrastructure. See Firebase Privacy Policy.

Stripe

Payment processing for subscriptions. Stripe stores and processes card data in accordance with PCI DSS. See Stripe Privacy Policy.

PayPal

Alternative payment processing for subscriptions. See PayPal Privacy Policy.

SendGrid (Twilio)

Transactional email delivery (verification, invitations, notifications). See Twilio Privacy Policy.

Cloudflare Turnstile

CAPTCHA challenge on the sign-up form to prevent automated account creation. See Cloudflare Privacy Policy.

Amazon Web Services (S3) - optional

Media file storage when enabled by an organisation. See AWS Privacy Policy.

5. Mobile app (RaceSolution Timing)

The RaceSolution Timing app is available for Android and iOS. It:

  • Authenticates using Firebase Authentication (email and password)
  • Reads and writes race and timing data to Google Cloud Firestore
  • Stores local preferences on your device using standard OS-provided storage
  • Does not request location, camera, microphone, or contact permissions
  • Does not include any analytics or crash-reporting SDK
  • Checks network connectivity to manage offline data synchronisation

6. Data retention

We retain your account data for as long as your account is active. If you delete your account or organisation, associated data is removed from our systems. Billing records may be retained for the period required by applicable tax and accounting regulations.

Racer data entered by an organiser is retained until the organiser deletes the event or their organisation.

7. Your rights

If you are in the UK or European Economic Area you have rights under UK GDPR / GDPR including:

  • Access - request a copy of the data we hold about you
  • Rectification - ask us to correct inaccurate data
  • Erasure - ask us to delete your data ("right to be forgotten")
  • Portability - receive your data in a structured, machine-readable format
  • Objection - object to processing where we rely on legitimate interests

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are based in the UK.

8. Cookies

The RaceSolution web application uses session cookies solely to keep you signed in. We do not use tracking, advertising, or third-party analytics cookies.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of RaceSolution after a change constitutes acceptance of the revised policy.

10. Contact

Bainbridge Services
Email: [email protected]
Website: race-solution.com