This Privacy Policy explains how Tom Ingram Motorsport Limited (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you use the CLUB80 membership platform at club-80.com.

We are the controller of your personal data and are committed to handling it in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where relevant, the Privacy and Electronic Communications Regulations (PECR).

1. WHO WE ARE

Tom Ingram Motorsport Limited
Company Number: 08156609
Registered Office: 4 Clews Road, Redditch, England, B98 7ST
Email: hello@club-80.com

2. WHAT PERSONAL DATA WE COLLECT

When you register for CLUB80, we may collect:

• your first name and last name
• your email address
• your password (stored securely using hashing, so we do not see it in plain text)
• confirmation that you are aged 18 or over
• your UK region
• your answers to registration questions about race-day habits, lifestyle activities and BTCC attendance plans

When you use CLUB80, we may also collect:

• your prediction submissions
• your quiz completions
• your points balance and leaderboard activity
• merch QR code scans
• your communication preferences
• email interaction data, such as whether you open or click CLUB80 emails, where this is available through our email service providers

We do not intentionally collect special category personal data through CLUB80.

3. HOW WE USE YOUR DATA

We use your personal data for the following purposes:

To provide your CLUB80 membership

This includes creating and managing your account, logging you in, assigning you to a crew, maintaining your profile, tracking points and showing leaderboard positions.

To send important service messages

This includes welcome emails, password reset emails, account notices and security-related communications.

To personalise your CLUB80 experience

This includes tailoring content, crew experiences, challenges, offers and communications based on your region, crew assignment, preferences and platform activity.

To send marketing emails

This includes prediction challenges, results, quizzes, merch offers, crew-specific content and general CLUB80 updates.

You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us at hello@club-80.com.

To improve and protect CLUB80

This includes reviewing how members use the platform, improving content and functionality, preventing misuse and maintaining platform security.

To comply with legal obligations

This includes keeping records where required by law and using or disclosing information where necessary to establish, exercise or defend legal claims.

4. WHO WE SHARE YOUR DATA WITH

We only share personal data where necessary to operate CLUB80. This may include the following service providers:

• Supabase — database and authentication services
• Klaviyo — email marketing and engagement tracking
• Cloudflare — website infrastructure, security and performance services
• Netlify — hosting for parts of the platform or dashboard
• Resend — transactional email delivery, such as password reset and authentication emails

These providers process personal data on our behalf under appropriate contractual arrangements.

We do not sell your personal data.

We do not share your personal data with third parties for their own marketing purposes unless you have clearly agreed to this.

We may also disclose personal data if required to do so by law or where necessary to protect our legal rights.

5. INTERNATIONAL TRANSFERS

Some of our service providers may process or access personal data outside the UK.

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place, such as an adequacy decision or approved contractual protections.

If you would like more information about international transfers, please contact us at hello@club-80.com.

6. HOW LONG WE KEEP YOUR DATA

We keep your personal data only for as long as necessary for the purposes set out in this Privacy Policy.

In general:

• we keep your account data for as long as your CLUB80 membership remains active
• if you ask us to delete your account, we will aim to delete or anonymise your personal data within a reasonable period, usually within 30 days, unless we need to retain some of it for legal, regulatory, fraud prevention or dispute-resolution purposes
• email marketing and engagement data may be retained in line with the practices of our service providers, unless you ask us to remove it where applicable

7. YOUR RIGHTS

Under UK data protection law, you may have the right to:

• request access to the personal data we hold about you
• request correction of inaccurate or incomplete personal data
• request deletion of your personal data
• request restriction of processing
• request transfer of certain personal data to you or another provider
• object to processing based on legitimate interests
• withdraw consent at any time where we rely on consent

To exercise any of your rights, please contact us at hello@club-80.com.

We will respond without undue delay and in any event within one month, although this period may be extended where the law allows.

8. EMAIL MARKETING

If you opt in, or where otherwise permitted by law, we may send you CLUB80 marketing emails, including predictions, quizzes, results, merch offers, crew-related content and general updates.

You can stop receiving marketing emails at any time by:

• clicking the Unsubscribe link in any email
• using any available Manage Preferences link
• contacting us at hello@club-80.com

Unsubscribing from marketing emails does not automatically delete your CLUB80 account.

9. COOKIES AND SIMILAR TECHNOLOGIES

CLUB80 uses essential technologies such as local storage and similar tools to keep you logged in and support core platform functionality.

We do not currently use third-party advertising cookies. If we introduce non-essential cookies or analytics tools in future, we will update this Privacy Policy and any cookie notice as required.

10. DATA SECURITY

We use appropriate technical and organisational measures to protect your personal data, including:

• secure password hashing
• HTTPS/TLS encryption in transit
• restricted access controls
• authenticated email-sending domains and related security controls
• platform and infrastructure safeguards designed to reduce unauthorised access

However, no online service can ever be guaranteed to be completely secure. If you believe your data may have been compromised, please contact us immediately at hello@club-80.com.

11. CHILDREN'S DATA

CLUB80 is intended only for individuals aged 18 or over. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from someone under 18, we will take steps to delete it.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the “Last updated” date will be revised. Where appropriate, we may also notify you by email or through the platform.

13. COMPLAINTS

If you have concerns about how we use your personal data, please contact us first at hello@club-80.com and we will do our best to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113