At a glance
What drivers should expect
COBRA uses personal information to administer bookings, take payments, run race meetings, publish results and maintain the RaceHub website. Public event and driver pages may show an adult driver’s name, class, chassis and an approved car avatar. On current booking and entry lists, Junior Racers are shown using their first name and surname initial.
Contact details, payment credentials and transponder numbers are not intended for public display. Official or historical timing results supplied by LiveRC may retain the name recorded by the timing system.
1. Who is responsible for the data?
Cardiff Off Road Buggy Racing Association (COBRA) is the data controller for information it collects for club racing, COBRA events, Grand Prix of Wales offers and RaceHub.
Privacy enquiries can be sent to info@cobracardiff.co.uk. Grand Prix of Wales enquiries can also be sent to GrandPrixofWales@gmail.com. You can also use the COBRA contact page.
2. Information we collect
- Booking and contact information, including the person making the booking and the driver entered.
- Race information such as driver name, class, chassis, transponder number, event attendance, lap times, results, rankings and championship points.
- Car photographs or approved car avatars that a driver, parent or guardian supplies.
- Order, payment status and transaction references. PayPal processes payment and card or bank details; COBRA does not receive full card credentials.
- Messages, offer responses, briefing acknowledgements and other event administration records.
- Limited technical information used to operate, secure and understand the website.
3. How and why we use information
We use information only where we have a lawful reason. Depending on the activity, this is normally:
- Contract: to accept and administer a booking, entry or paid offer.
- Legitimate interests: to organise meetings, identify racers, operate timing, publish sporting results and championship history, provide driver profiles and improve or secure the service. We balance these interests against drivers’ privacy.
- Legal obligation: where records must be retained for accounting, tax, safeguarding or another legal requirement.
- Consent: where consent is the appropriate basis, for example optional marketing or a voluntarily supplied image. Consent can be withdrawn for future use.
We do not sell personal information.
4. Public driver information
To make entries, race administration and results useful, RaceHub and linked event pages may publish:
- For adult drivers: name, race class, chassis and an approved car avatar, plus race results and statistics.
- For Junior Racers on current booking and entry lists: first name and surname initial, class, chassis and an approved car avatar.
- Race history derived from LiveRC, including laps, positions, results and championship records. Official or historical timing feeds may use the name held by the timing provider.
We do not intentionally publish email addresses, telephone numbers, postal addresses, payment credentials or transponder numbers. A driver, parent or guardian can ask us to correct information or review an avatar or public profile using the contacts above.
5. Children and Junior Racers
We apply extra care to children’s information. Current booking and entry lists abbreviate a Junior Racer’s surname to its initial. Junior contact and payment information is kept away from public pages, and a parent or guardian should make privacy requests on the junior’s behalf where appropriate. We keep public information limited to what is needed for the event and the sporting record.
6. Who we share information with
We use service providers only where needed to run the club and website:
- Wix hosts the main COBRA website, event booking forms and related administration.
- PayPal processes online payments. Its own privacy notice applies when you use PayPal.
- LiveRC provides race timing and official results data.
- GitHub Pages and Cloudflare deliver and protect RaceHub and provide privacy-focused website analytics.
- Google supplies the map shown on the location page. Facebook and YouTube receive information only when you follow their links or use their services.
These providers may process information under their own terms and may operate outside the UK using their own lawful transfer safeguards.
7. Cookies and browser storage
RaceHub
RaceHub does not set its own conventional advertising cookies. It uses:
- Cloudflare Web Analytics: cookie-free audience measurement used to understand site performance and usage.
- localStorage: if you choose “remember my driver”, your browser stores the selected driver on that device until you clear it or change the setting.
- sessionStorage: a short-lived setup-data cache helps pages load more quickly. It expires after about 15 minutes and is also cleared when the browser session ends.
Wix booking pages
The Wix-hosted COBRA website and booking pages use essential cookies needed for security, stability and core functions such as bookings and payments. Optional analytics, marketing or third-party features must not be activated before any consent required by law. Use the cookie controls shown on the Wix site, or your browser settings, to change optional choices.
External services
Embedded maps and sites reached through PayPal, Google, Facebook or YouTube may set their own cookies. Their privacy and cookie notices explain those technologies.
8. How long we keep information
We keep information only for as long as it is reasonably needed for the purpose collected:
- Booking, order and payment records are retained for event administration and any accounting or legal period that applies.
- Race results and championship records may be kept as a continuing sporting archive.
- Avatars are kept until replaced, removal is requested and appropriate, or they are no longer needed.
- Messages and offer records are kept until the enquiry or event is complete, then only as needed for administration, legal claims or opt-out records.
- Technical logs and backups follow the limited operational retention periods of the relevant provider.
When information is no longer needed, we delete or anonymise it where practicable.
9. Security and data accuracy
We limit administrative access, use reputable service providers and publish only the race information needed for the public service. Drivers should tell us if their information is inaccurate. No online service can be guaranteed completely secure, but we review the information we publish and the systems used to manage it.
10. Your data protection rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction or transfer of your personal information, or object to its use. You can withdraw consent where processing relies on consent. Some requests may be limited where information is needed for legal records or the integrity of published sporting results.
Contact us using the details in section 1. If you remain unhappy, you can complain to the Information Commissioner’s Office.
11. Changes to this policy
We may update this policy when the website, booking process, service providers or legal requirements change. The effective date above shows the current version.