PRIVACY POLICY

1. Data we collect

When you register for a chapter or create an account, we collect:

• Your name, phone number, email address, and date of birth.
• Emergency contact name and number, blood group, and T-shirt size — collected for your safety and race logistics.
• For a participant under 18, the name and contact details of their parent or guardian.
• Your consents (event waiver and risk acknowledgement), recorded with the time they were given.
• If you create an account: your login credentials and, optionally, a profile photo. Passwords are stored only as a salted cryptographic hash — never in readable form.

When you pay, the transaction is handled by Razorpay. We receive confirmation and a payment reference; we do not see or store your full card or bank details. We also collect basic analytics about site usage (via Google Analytics) to understand and improve the site.

If — and only if — you press “Use my location” and allow your browser’s location prompt, we receive your approximate coordinates. See “Cookies, analytics and location” below for exactly what happens to them. We never ask for your location automatically, and the site works the same if you say no.

2. How we use it

• To register you for chapters, run the events, and time your race.
• To reach you about your entry, and in an emergency during an event.
• To publish race results and records — see “What is public” below.
• To operate your account and, where you ask for one, generate your finisher certificate.
• To keep the site secure and to improve it.

3. Legal basis

We process your data on the basis of your consent and to perform the registration you enter into with us, in line with India’s Digital Personal Data Protection Act, 2023. You can withdraw consent at any time by contacting us, though some processing (such as keeping a record of a completed race) may continue where the law allows.

4. What is public, and what is not

A runner’s name, home city, and race results may appear on our public records, leaderboard, and archive pages. Sensitive details — date of birth, phone, email, emergency contact, blood group, and guardian information — are never shown publicly. Profiles of participants under 18, or of anyone whose adult age we cannot confirm, are not shown to logged-out visitors.

5. Who we share it with

We do not sell your data. We share it only with service providers who help us run the events and this site, and only as far as they need it:

• Razorpay, to process payments.
• Our third-party registration partner, for chapters booked through it.
• Our hosting provider, which stores the site and its data.
• Google Analytics, for usage measurement — only after you accept analytics cookies.
• BigDataCloud, only if you use the “Use my location” button: your coordinates are sent to it to be turned into an area name (PIN code, city, state).
• India Post (api.postalpincode.in) and Zippopotam.us, if a PIN or postal code is entered or filled in on the entry form: the code alone is sent to look up the matching city and state.

We may also disclose data where the law requires it.

6. How long we keep it

We keep registration and results data for as long as needed to run the series, maintain accurate historical records, and meet our legal obligations. You can ask us to delete personal data that we are not required to retain.

7. Security

Personal data is held in a database separate from our public website, access is restricted, and passwords are stored only as hashes. No system is perfectly secure, but we take reasonable technical and organisational steps to protect your information.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, you may:

• Ask what personal data we hold about you and get a copy of it.
• Ask us to correct or update inaccurate data.
• Ask us to erase data we are not required to keep.
• Withdraw a consent you previously gave.
• Raise a grievance about how we handle your data.

To exercise any of these, contact us using the details below.

9. Children

We collect a minor’s data only with verifiable parent or guardian consent, and we protect it as described in “What is public” above. If you believe we hold a child’s data without proper consent, contact us and we will address it.

10. Cookies, analytics and location

Nothing optional runs until you say yes. When you first visit, we ask, and until you answer, only the cookies the site cannot work without are set. Your answer is remembered in a cookie of ours (named “bfai_consent”) so we do not ask again on every page — remembering a refusal is not tracking. You can change your answer at any time using the “Cookie settings” link in the footer, and you can also control cookies through your browser settings.

There are three optional categories:

• Analytics — Google Analytics, to see which pages are used. Nothing from Google loads until you accept this.
• Location & preferences — lets us remember your area between visits, in a cookie of ours (named “bfai_loc”) that lasts up to 180 days.
• Marketing — reserved. We do not set any marketing cookie today; the category exists so that if we ever do, it is already behind your consent.

How location works. We never read your location on our own. It happens only when you press “Use my location” and then allow your browser’s own prompt — two separate yeses, and either one refused means nothing is read. Your coordinates are sent to BigDataCloud, a third-party service, to be turned into a PIN code, city and state. We do not keep your coordinates on our servers.

It is used for two things only. On the chapters pages it changes the order of the list so the closest chapter is first — nothing else changes, and prices, dates, availability and every word of the content are identical for every visitor wherever they are. On the entry form it pre-fills your city, state and PIN code, which you can edit or clear before you submit; those fields are saved only when you submit your entry, as part of it.

If you have not accepted “Location & preferences”, your location is used for that visit only and is never written to a cookie. If you accept it and later switch it back off, we delete the stored location straight away and stop using it — we do not wait for the cookie to expire. You can also press “Undo” next to the result at any time.

11. Changes to this policy

We may update this policy from time to time. The current version is the one published here, shown by the “last updated” date above.

12. Contact and grievances

For any privacy question or grievance, contact:

• Vikas Solanki, BigFoot Adventures India
• Email: hello@bigfootadventuresindia.com
• Phone: +91 90110 43248
• Address: Konark Campus, Viman Nagar, Pune, Maharashtra, India

See also our terms & conditions.