1. Introduction

Race In Form ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website raceinform.com and use our services.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

Account Information: Name, email address, password (encrypted)
Order Information: Billing address, shipping address, payment details (processed by Stripe)
Poster Customization: Race details, finish times, personal messages you include on posters
Communication: Messages you send us via contact forms or email

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

Device Information: Browser type, operating system, device type
Usage Data: Pages visited, time spent, click patterns
Location Data: Country and city (approximate, based on IP)
Cookies: See our Cookie Policy for details

3. How We Use Your Information

We use your information to:

Process and fulfill your orders
Create and deliver your customized posters
Send order confirmations and shipping updates
Respond to your inquiries and support requests
Improve our website and services
Send marketing communications (with your consent)
Prevent fraud and ensure security
Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

Contract: To fulfill orders and provide services you've requested
Legitimate Interest: To improve our services and prevent fraud
Consent: For marketing communications and non-essential cookies
Legal Obligation: To comply with tax and accounting requirements

5. Data Sharing

We share your information with:

Payment Processors: Stripe processes payments securely. We never store your full card details.
Shipping Partners: To deliver your orders
Print Partners: To produce your posters (only necessary production data)
Analytics Services: Google Analytics (anonymized data)
Legal Authorities: When required by law

We never sell your personal information to third parties.

6. Data Retention

We retain your data for:

Account Data: Until you delete your account
Order Data: 7 years (for tax/legal compliance)
Marketing Preferences: Until you unsubscribe
Analytics Data: 26 months

7. Your Rights

You have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a portable format
Object: Object to processing based on legitimate interest
Withdraw Consent: Withdraw consent for marketing at any time

To exercise these rights, contact us at [email protected].

8. Data Security

We implement security measures including:

SSL/TLS encryption for all data transmission
Encrypted password storage (bcrypt)
Regular security audits
Access controls and authentication
Secure cloud infrastructure

9. International Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for transfers outside the EEA.

10. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or website notice. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related inquiries:

Email: [email protected]
Address: Race In Form, Athens, Greece

For EU residents, you also have the right to lodge a complaint with your local Data Protection Authority.