Privacy Notice – PACKRUN
1.Introduction
This privacy notice describes how Pack Run Ltd collect, use, and protect your personal data in connection with your use of:
- the PACKRUN (App).
- any of our services that are accessible through the App (Services) such as race bookings.
This App is not intended for children or those under 18 and we do not knowingly collect data relating to children.
2.Important information and who we are
Pack Run Ltd (“we”, “us”, “our”) is the controller and responsible for your personal data.
Please note that when you book a race via the App, we share your data directly with the race organisers. In those circumstances, they are separate and independent controllers for their use of your personal data and you should refer to their privacy notices to understand how your data is handled by them.
3.What data do we collect about you?
We collect, use, store and transfer different categories of your personal data, as follows:
- Registration: name, email, password, date of birth, country and region.
- Profile: profile photo, gender, emergency contact, race history, personal bests, and kit preferences.
- Financial: subscription tier, billing address, transaction data.
- Health: such as medical conditions, medications and allergies where voluntarily provided by you for races requiring this data.
- Technical: IP address, device identifiers, app version, crash diagnostics.
- Content: information that you store or generate in the App, being profile photos, profile fields, race reviews and ratings, comments on race pages, and photos.
- Usage: logs and details of your use of our Apps and Services, being the dates and times on which you download, access and update the App and our Services, and any errors or debugging information.
- Cookies: the information collected through the cookies and similar technologies listed in our Cookie Notice available here.
- Location: your current location when you search for races near you in the App (no background tracking and you can disable location tracking at any time via your device settings).
- Feedback: your feedback and survey responses.
- Direct Marketing: your direct marketing preferences, consents for receiving direct marketing from us and the history of the direct marketing communications we have sent to you.
We do not generally collect special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, genetic and biometric data).
However, we may collect health data where you voluntarily provide it in connection with your participation in certain events (for example, details of medical conditions or allergies relevant to races requiring such data). Where we collect such data, we will process it on the basis of your explicit consent.
4.How is your personal data collected?
We collect your personal data in the following ways:
- Data provided by you when you register your account in the App.
- Data provided by you when you communicate with us via email or our contact form.
- Data generated by you or provided to us through your use of our App and Services.
- Data collected from your devices via automated tracking technologies.
5.Tracking technologies
We use cookies (small files placed on your device) and other tracking technologies on the App and in our direct marketing emails to improve your experience and our development of the App and our Services. For more information about the cookies we use and how to change your cookie preferences, please see here.
6.Lawful basis for processing your data
We are required by law to have a lawful basis for collecting and using your personal data. We rely on one or more of the following lawful bases:
- Performance of a contract with you: Where we need to use your personal data to enter and perform a contract with you, for example if you are a paid subscriber of the App, or book a race via the App.
- Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, where those legitimate interests are not outweighed by any negative impact on your rights or interests. For example, we rely on our legitimate interests to use your data to give you the best and most secure App experience.
- Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this lawful basis.
- Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you provide us with your health data in order to book a race which requires this.
7.How we use your data
We have set out below a summary of how and why we use the various categories of your personal data, and which of the lawful bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
| Purpose | Type of personal data | Lawful basis for processing |
|---|---|---|
| To provide our App and Services to you. This includes: creating, authenticating and securing your account; personalising race recommendations based on location, history and preferences; processing race entries; sharing necessary booking data with race organisers (see section 8 below); and sending booking confirmations, race-day communications, and customer support. | Registration, Profile, Usage, Technical, Financial, Location, Content | Performance of a contract (our terms of service) |
| To provide you with marketing communications via email | Registration, Direct Marketing | Consent |
| Fraud prevention, security monitoring, legal and regulatory compliance. | Technical, Usage, Registration | Legitimate interests (to prevent fraud and other illegal activities) Legal obligation (retaining tax and accounting records) |
| Service analytics and product improvement | Technical, Usage | Legitimate interests (keeping our App and Services secure and providing you with a better user experience) |
| To collect feedback from you about our App and Services | Feedback, Registration | Legitimate interests (providing you with a better user experience) |
| Other communications with you not described above such as: informing you of updates to this Privacy Notice or our Terms of Use; responding to your rights requests or other queries. | Registration | Legitimate interests (keeping you informed of changes to our App and Services) Legal obligation (responding to your rights requests) |
8.Disclosures of your personal data
We may share your personal data where necessary with the parties set out below for the purposes described in the table at section 7 above:
- Entities that are part of our group of companies.
- Your app store provider and mobile network operator to allow you to install the App.
- Race organisers when you book a race via the App. After payment, we retain your entrant details, terms acceptance and consent to sharing of health data and remain the controller for this personal data. Separately, race organisers are able to access your race entry data through our organiser portal and will be independent controllers for this personal data.
- Service providers which provide IT, hosting, customer support, payment processing, email delivery and administration, and data analysis services.
- Our professional advisors including lawyers, auditors, insurers, and consultants who provide legal, accounting, insurance and other services.
- Third-parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.
- Regulators and law enforcement bodies, where we are required by law or it is in our legitimate interests to do so.
9.Do we transfer personal data abroad?
We work with trusted business partners and third-party service providers around the world. Some of these third-parties process personal data outside of the UK. This means we may share your personal data internationally, including outside of the United Kingdom and European Union. We will always ensure we can rely on an approved UK Government Adequacy Decision or have appropriate legal safeguards in place such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses (SCCs) to protect the transfer of data.
10.How long do we keep your data?
We will only retain your personal data for as long as needed to fulfil the purposes we collected it for as set out in the table at section 7 above, and as long as needed to meet any legal, regulatory, tax, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
In some circumstances you can ask us to delete your data: see section 12 below for further information.
11.Third-party links
The App may include links to the websites of trusted partners such as providers of travel, accommodation, transport, food, and wellness and recovery services. Clicking on those links may allow third-parties to collect or share data about you. We do not control these third-party websites and recommend that you refer to their privacy notices to understand how your data is handled by them.
12.Your legal rights
You have a number of rights under data protection laws in relation to the personal data we hold about you.
You have the right to:
- Request a copy of your personal data.
- Request correction of any mistakes in your personal data.
- Request erasure of your personal data.
- Object to the processing of your personal data (in particular for direct marketing purposes).
- Request the transfer of your personal data to you or to a third-party in a structured, commonly used, and machine-readable format.
- Request restriction of processing of your personal data.
- Withdraw consent at any time where we are relying on consent to process your personal data.
- Make a complaint to us in the first instance and the ICO regarding any data protection concerns you may have.
These rights are not absolute and there may be circumstances where we are entitled to refuse your request.
If you wish to exercise any of the rights set out above, please contact us at our contact details set out in section 13 below.
13.Contact us
Our contact details are:
- Full name of legal entity: Pack Run Ltd
- Email address: privacy@packrun.run
- Postal address: 50 Swordale, Isle of Lewis, HS2 0BP, Scotland
If you have a complaint about our handling of your personal data, you should firstly raise it with us using the contact details above. You also have the right to make a complaint to the UK Information Commissioner (at https://ico.org.uk/).
14.Changes to this Privacy Notice and your data
We keep our Privacy Notice under regular review. It may change and, if it does, those changes will be posted on this page and any material changes will be notified to you by push notification or by email.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes by updating your details in your account.
This version was last updated in July 2026.