Privacy Policy

Startlek ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.

This Policy applies to all users of the Startlek platform — including Participants, Organizers, and visitors — regardless of location. Users in the European Union and European Economic Area have additional rights under the General Data Protection Regulation (GDPR), described in Section 10.

Startlek acts as the data controller for personal data collected through the Platform.
Contact: [email protected]

3.1 Account InformationWhen you create an account, we collect:
Full name
Email address
Password (stored in hashed form — we never see your plaintext password)
Profile photo (optional)
Date of birth (to verify age eligibility)
Country of residence

3.2 Event Registration DataWhen you register for an event, we collect:
Emergency contact name and phone number
T-shirt size or other event-specific fields required by the Organizer
Medical conditions or dietary requirements (only if requested by the Organizer and submitted voluntarily)

3.3 Payment InformationWe collect information necessary to process payments:
Billing name and address
Payment method (card type, last 4 digits, expiry date)

Full payment card details are processed directly by our payment partners (Stripe, Fondy) and are never stored on our servers.

3.4 Activity and Usage DataWhen you use the Platform, we automatically collect:
IP address and approximate location (country/city)
Browser type and version
Device type and operating system
Pages visited, time spent, and interactions
Referring URL

3.5 CommunicationsIf you contact us, we collect the content of your messages, your email address, and any attachments you send.

3.6 Organizer DataIf you register as an Organizer, we additionally collect:
Organization name and legal entity type
Tax identification number (where required for payouts)
Bank account or payout information (processed by payment partners)
Event content you create (descriptions, photos, distances, pricing)

We use your personal data for the following purposes:

We do not sell your personal data. We may share your data with:

5.1 Event OrganizersWhen you register for an event, we share your registration details (name, email, and event-specific fields) with the Organizer of that event. Organizers are bound by their own privacy practices and by our Organizer Agreement.

5.2 Payment ProcessorsWe share payment data with Stripe (for international events) and Fondy (for Ukrainian events) solely for payment processing purposes.

5.3 Service ProvidersWe use trusted third-party service providers to help operate the Platform, including:
Cloud hosting and database services
Email delivery services
Analytics providers (with anonymized/aggregated data where possible)
Customer support tools

All service providers are contractually bound to protect your data and may only use it for the purposes we specify.

5.4 Legal RequirementsWe may disclose your data if required by law, court order, or government authority, or if necessary to protect the rights, safety, or property of Startlek or others.

5.5 Business TransfersIn the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before any such transfer takes effect.

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
Account data: Retained for the lifetime of your account plus 3 years after deletion.
Transaction records: Retained for 7 years (for tax and accounting purposes).
Support communications: Retained for 2 years.
Analytics data: Retained in anonymized form indefinitely.

When data is no longer needed, we delete or anonymize it securely.

We implement industry-standard security measures to protect your personal data, including:
Encryption of data in transit (TLS/HTTPS)
Encryption of sensitive data at rest
Access controls and role-based permissions
Regular security audits and vulnerability assessments

However, no method of transmission over the Internet is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

Startlek operates internationally. Your data may be transferred to and processed in countries outside your own, including countries that may not have the same level of data protection laws as your country.

When transferring data from the European Economic Area, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10.1 Rights for All UsersRegardless of your location, you have the right to:
Access your personal data by logging into your account.
Correct inaccurate or incomplete data.
Delete your account and associated data (subject to legal retention requirements).
Opt out of marketing communications at any time via the unsubscribe link in any email.

10.2 Additional Rights for EU/EEA Users (GDPR)If you are located in the EU or EEA, you additionally have the right to:
Data portability — receive your data in a structured, machine-readable format.
Restriction of processing — ask us to limit how we use your data.
Object to processing — object to processing based on legitimate interests.
Withdraw consent — at any time, where processing is based on consent.
Lodge a complaint with your national data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

The Platform is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us at [email protected] and we will take steps to delete such data.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Platform. The updated Policy will be effective from the date stated at the top of this document.

Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

For any questions, requests, or concerns about this Privacy Policy or your personal data:
Email: [email protected]
Support: [email protected]
Website: startlek.com