Privacy Policy

1. Introduction

Goodfinish Events ("Company," "we," "us," or "our") operates the goodfinish.com website and mobile application (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

We are committed to protecting your privacy and complying with applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR) and the Jamaica Data Protection Act, 2020.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly, including:

• Account Information: Name, email address, password, phone number
• Profile Information: Date of birth, gender, address, emergency contact details, shirt size
• Event Registration: Race preferences, waiver acceptance, custom question responses
• Payment Information: Processed securely through Stripe; we do not store full card details
• Performance Data: Race times, split times, finish positions, age group rankings
• Third-Party Integrations: If you connect Strava, we receive your Strava profile URL and activity data to enhance your experience

2.2 Automatically Collected Information

• Device information (type, operating system, unique identifiers)
• Log data (IP address, browser type, pages visited, time spent)
• Location data (with your consent, for event check-in features)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information to:

• Process event registrations and payments
• Provide race timing and results services
• Send event-related communications (confirmations, updates, results)
• Maintain your Runner Passport and race history
• Improve our Platform and develop new features
• Comply with legal obligations
• Prevent fraud and ensure platform security

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Contract Performance: To fulfill our services when you register for events
• Legitimate Interests: To improve our services and prevent fraud
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws

5. Information Sharing

We may share your information with:

• Event Organizers: Registration details necessary for event management
• Service Providers: Payment processors (Stripe), email services, hosting providers
• Public Results: Race results may be published publicly (name, time, age group)
• Legal Requirements: When required by law or to protect rights

We do not sell your personal information to third parties.

6. Your Rights

6.1 Under GDPR (EU Residents)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

6.2 Under Jamaica Data Protection Act

• Right to be informed about data collection
• Right to access your personal data
• Right to correction of inaccurate data
• Right to deletion in certain circumstances
• Right to object to direct marketing

To exercise any of these rights, please contact us at privacy@goodfinish.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls limiting data access to authorized personnel
• Secure payment processing through PCI-DSS compliant providers

8. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services to you
• Maintain your race history and Runner Passport
• Comply with legal obligations
• Resolve disputes and enforce agreements

You may request deletion of your account and associated data at any time, subject to legal retention requirements.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by relevant authorities
• Transfers to countries with adequate data protection laws
• Binding corporate rules where applicable

10. Cookies

We use cookies and similar technologies to enhance your experience. You can control cookies through your browser settings. Essential cookies required for Platform functionality cannot be disabled.

11. Children's Privacy

Our Platform is not intended for children under 13. For participants under 18, parental or guardian consent is required for registration. Parents/guardians may contact us to review, update, or delete their child's information.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or Platform notification. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries or to exercise your rights:

For EU residents, you also have the right to lodge a complaint with your local Data Protection Authority. For Jamaica residents, complaints may be directed to the Information Commissioner.