Home » Privacy Policy

Privacy Policy

This privacy policy explains how the Windsor Race Results website collects, processes, stores and protects personal data when you visit or interact with our pages. We are committed to handling your information responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

The data controller for this website is the operator of Windsor Race Results, an independent editorial publication covering horse racing at Royal Windsor Racecourse. Where this policy refers to “we”, “us” or “our”, it means the operator of this website.

What Data We Collect

We collect limited data to operate this website effectively. The categories of data we may process include the following.

Automatically collected technical data. When you visit our pages, our web servers and third-party analytics services may record your IP address, browser type and version, operating system, referring URL, pages visited, time and date of access, and approximate geographic location derived from your IP address. This data is collected through server logs and cookies.

Cookie data. We use cookies and similar technologies as described in our Cookie Policy. These may include strictly necessary cookies for site functionality, analytics cookies that help us understand how visitors use the site, and, where applicable, advertising or preference cookies. You can manage your cookie preferences at any time through your browser settings.

Voluntarily provided data. If you contact us through any communication channel provided on this website, we may collect the information you choose to share, such as your name and email address, solely for the purpose of responding to your enquiry.

How We Use Your Data

We process personal data for the following purposes and on the following legal bases under UK GDPR.

Legitimate interests (Article 6(1)(f)). We use technical and analytics data to maintain the security and performance of the website, to understand how visitors interact with our content, to identify and fix technical issues, and to improve the quality and relevance of our editorial material. We have assessed that these interests do not override your fundamental rights and freedoms.

Consent (Article 6(1)(a)). Where we use non-essential cookies, such as analytics or advertising cookies, we rely on your consent, which you may give or withdraw through the cookie consent mechanism on our site or through your browser settings.

Contractual necessity or legitimate interests for correspondence. If you contact us, we process the data you provide in order to respond to and manage your enquiry.

Third-Party Services

We may use third-party services that process data on our behalf. These may include web hosting providers, content delivery networks, analytics platforms such as Google Analytics, and font delivery services such as Google Fonts. Each of these services operates under its own privacy policy and data processing terms. Where data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognised by the UK government.

We do not sell, rent or trade your personal data to any third party for their own marketing purposes.

Data Retention

Server log data is retained for a maximum of 26 months and is then automatically deleted. Analytics data is retained in accordance with the retention settings of the analytics platform we use, which does not exceed 26 months for individual-level data. Any personal data provided through direct correspondence is retained only for as long as necessary to resolve the enquiry and for a reasonable period thereafter, unless a longer retention period is required by law.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data.

Right of access. You may request a copy of the personal data we hold about you.

Right to rectification. You may ask us to correct inaccurate or incomplete data.

Right to erasure. You may request that we delete your personal data, subject to any legal obligations that require us to retain it.

Right to restrict processing. You may ask us to limit how we use your data in certain circumstances.

Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.

Right to object. You may object to processing based on legitimate interests, and we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details provided on this website. We will respond to valid requests within one calendar month, as required by UK GDPR.

International Transfers

Some of the third-party services we use may process data in countries outside the United Kingdom. In all such cases, we ensure that transfers are protected by appropriate safeguards, including standard contractual clauses approved by the UK Information Commissioner’s Office or reliance on adequacy regulations.

Children’s Privacy

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include encryption of data in transit via HTTPS, access controls on server infrastructure, and regular review of our data handling practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, in technology, or in applicable law. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection. You can contact the ICO through their website at ico.org.uk.