Privacy Policy
This privacy policy describes how FLATOUT collects, uses, and protects information you provide when using our website and registering for our events.
We collect personal data such as your name, email address, and payment details solely to manage your event entry, communicate with you about FLATOUT events, and improve our services.
We do not sell your personal information to third parties. We may share necessary information with timing partners, venues, and payment processors strictly to deliver the event.
FLATOUT is operated by [COMPANY LEGAL NAME & REGISTERED ADDRESS — to be completed before launch], the data controller for the personal data described in this policy.
Where your data lives. Our booking database is hosted with Supabase on AWS in London (eu-west-2), so booking data stays in the UK. Card payments are processed by Stripe — your card details go directly to Stripe and never touch our servers. Transactional email (order confirmations, tickets, account emails) is delivered through Resend. If you opt in to event communications, your contact details may also be processed by our CRM platform.
Race-day details. Date of birth, emergency contact and any medical notes you choose to give us are used only to run the event safely. They are visible to event staff and to anyone who holds your private ticket link — treat that link like the ticket itself.
You may request access, correction, or deletion of your personal data at any time by contacting info@weareflatout.co.uk. You also have the right to object to processing, to data portability, and to complain to the UK Information Commissioner's Office.
Cookie Policy
FLATOUT uses a small number of cookies and similar browser storage. Nothing other than strictly necessary storage is set before you choose - analytics and marketing stay off until you opt in on the banner.
| Name | Category | Purpose | Retention |
|---|---|---|---|
| flatout-cookie-consent | Strictly necessary | Stores your cookie choice per category. | Until cleared |
| sb-*-auth-token | Strictly necessary | Keeps you signed in to your account and admin area. | Session / until sign-out |
| flatout-cart | Strictly necessary | Remembers the tickets in your basket during checkout. | Until checkout completes or cleared |
| flatout_vid | Analytics | Anonymous first-party visitor identifier for site statistics. | Deleted after 60 days |
| flatout_sid | Analytics | Anonymous first-party session identifier for the checkout funnel. | 30 minutes of inactivity |
| _fbp / Meta Pixel | Marketing | Set by Meta to measure and target FLATOUT advertising. | Up to 90 days (set by Meta) |
Strictly necessary storage cannot be turned off - the site cannot sign you in or take a booking without it. Analytics is first-party only, is never sold or shared, and raw event data is deleted after 60 days. Marketing covers the Meta Pixel and only loads once you enable that category.
You can change or withdraw your consent at any time using the Cookie settings link in the footer. Withdrawing consent stops further collection immediately.
For questions about cookies or this policy, email info@weareflatout.co.uk.