Privacy Notice
Last updated: March 2026
UKOPRA ("we", "us", "our") is committed to protecting and respecting your privacy. This notice explains what personal data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The full privacy notice is being finalised and will be published here shortly. The information below summarises our data processing practices.
1. Data Controller
The data controller is UKOPRA. For data protection enquiries, please contact us via our Contact page.
2. What We Collect
We collect the following categories of personal data:
- Identity data: full name, date of birth
- Contact data: email address, mobile phone number, postal address
- Emergency contact data: name, phone number, and relationship of your nominated emergency contact
- Health data: medical conditions relevant to racing safety (collected via your licence application)
- Safety data: EPIRB HEX codes, safety equipment details
- Financial data: payment information is processed by Stripe and is never stored on our servers
3. Why We Collect It
We process your data for the following purposes:
- To manage your racing licence and boat registrations (contractual necessity)
- To ensure safety at events and enable emergency response (vital interests / legitimate interest)
- To process payments for registrations and event entries
- To communicate with you about your applications and events (legitimate interest)
4. Who We Share It With
Your data may be shared with race officials, safety officers, and emergency services where necessary for safety purposes. We use Supabase for data storage and Stripe for payment processing, both of which act as data processors on our behalf.
5. How Long We Keep It
We retain your data for as long as you hold an active account. After account closure, data is retained for up to 6 years for legal and safety record-keeping purposes.
6. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Data portability
- Lodge a complaint with the ICO (ico.org.uk)
To exercise any of these rights, please contact us via the Contact page.
