Privacy policy

Who is responsible for your data

MarathonPassport is the controller of personal data processed through this site. For any privacy question or request, email hello@marathonpassport.com.

What MarathonPassport collects

Browsing the site does not ask you for any personal information. Two kinds of data are still handled.

Technical data. When your browser loads a page, the hosting provider receives your IP address, browser and device type, the page requested and the time. This is held in standard server logs and is used to deliver the site, keep it secure and diagnose faults. The legal basis is legitimate interests: a website cannot be delivered or protected without it.

Emails you send. If you write to hello@marathonpassport.com, MarathonPassport receives your email address and whatever you put in the message. It is used to reply and is kept only as long as needed to deal with your enquiry. The legal basis is legitimate interests, in answering the people who get in touch.

Cookies and similar technologies

The site does not use analytics or advertising trackers and does not set tracking cookies. Because nothing non-essential is used, there is no cookie banner. If that changes, this page will be updated first and consent will be requested where the law requires it.

Services that handle data on the site's behalf

Vercel hosts the site and therefore sees the technical data described above. Supabase holds the race and editorial database, in a data centre in Frankfurt. Cloudinary delivers the photographs, and OpenFreeMap supplies the map tiles, so your browser makes requests directly to both and they receive your IP address in the process. Fonts are served from the site itself.

Some of these providers are based in or process data in the United States. They typically rely on recognised safeguards for transfers out of the UK, such as the UK International Data Transfer Addendum or standard contractual clauses. Each provider publishes its own privacy terms.

Affiliate links

Some links to shops and booking services are affiliate links; see the affiliate disclosure in the terms. When you click one, you leave MarathonPassport and the other company may set its own cookies and collect its own data under its own privacy policy. MarathonPassport does not see or control that.

Who else sees your data

Personal data is not sold, rented or shared for advertising. It is disclosed only to the service providers above, to professional advisers where needed, and to authorities where the law requires it.

Your rights under UK GDPR

You can ask for a copy of the personal data held about you, ask for it to be corrected or deleted, ask for processing to be restricted, object to processing based on legitimate interests, and ask for data you provided to be returned in a portable format. Email hello@marathonpassport.com and expect a reply within one month. Since the site holds so little, the honest answer will often be that nothing is held beyond server logs.

If you are unhappy with the response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Residents of California and other US states

MarathonPassport does not sell personal information, does not share it for cross-context behavioural advertising and does not build profiles of visitors. You can still use the contact address above to ask what is held about you or to request deletion.

Children

The site is written for adult runners and is not aimed at children. It does not knowingly collect personal data from anyone under 13.

Changes to this policy

The date at the top shows when this page was last changed. Material changes will be reflected here before they take effect.