Privacy Policy.

Introduction

SummitGPX ("we", "our" or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and safeguard your personal information when you use our website, platform and related services.

SummitGPX is a product of Bimotech Solutions Ltd, a company registered in England and Wales. Bimotech Solutions Ltd is the data controller for personal information collected directly from SummitGPX customers and website users.

Information We Collect

We may collect the following information:

• Name and email address.
• Organisation or company details.
• Account login and profile information.
• Billing, subscription and transaction information.
• GPX files, route data, images, logos and other content uploaded to the platform.
• Participant names, email addresses and related event information uploaded by event organisers.
• Usage data, analytics, browser and device information.
• Support enquiries and other communications.
• Technical records, including login activity, security logs and error information.

How We Use Your Information

We use personal information to:

• Provide, operate and maintain the SummitGPX platform.
• Create and manage user accounts and subscriptions.
• Process payments, transactions and invoices.
• Deliver important event and route notifications to participants on behalf of event organisers.
• Respond to support requests and other enquiries.
• Improve the platform, features and user experience.
• Communicate important service, account and security updates.
• Monitor and protect the security and integrity of the platform.
• Comply with legal, accounting and regulatory obligations.

Legal Basis for Processing

We process personal information where:

• It is necessary to provide the SummitGPX service and fulfil our contract with you.
• It is necessary to comply with a legal or regulatory obligation.
• It supports our legitimate interests in operating, securing and improving SummitGPX.
• You have given us consent, where consent is required.

Where we rely on legitimate interests, we consider whether those interests are balanced against your privacy rights and reasonable expectations.

Event and Participant Data

Event organisers may upload participant names, email addresses and related event information so they can communicate route updates and other important event information.

In these circumstances, the event organiser is generally the data controller and is responsible for ensuring that they have an appropriate lawful basis for collecting, uploading and using participant information.

SummitGPX processes this information on behalf of the event organiser only as necessary to provide the service and deliver authorised communications.

Payments

Payments are processed securely by trusted third party payment providers such as Stripe. SummitGPX does not store full payment card details on its own servers. Payment providers may process personal information in accordance with their own privacy policies.

Cookies

We use essential cookies and similar technologies to operate SummitGPX, maintain secure login sessions, remember account preferences and protect the platform from misuse.

We may also use analytics technologies to understand how the platform is used and improve our services. Where required by law, non essential cookies will only be used with your consent.

Data Storage and International Transfers

Personal information may be stored using secure servers, cloud services and hosting infrastructure operated by trusted third party providers.

Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we take appropriate steps to ensure that suitable legal safeguards are in place.

Sharing Information

We do not sell or rent your personal information.

We may share information with carefully selected service providers where necessary to operate SummitGPX, including providers of:

• Website hosting and cloud infrastructure.
• Payment processing.
• Email delivery and service communications.
• Analytics and performance monitoring.
• Customer support and technical services.
• Security, fraud prevention and data backup services.

We may also disclose information where required by law, regulation, court order or a lawful request from a public authority.

Data Retention

We retain personal information only for as long as reasonably necessary to provide our services, maintain business and financial records, comply with legal obligations, resolve disputes and enforce agreements.

If an account is closed, personal information may be deleted or anonymised, unless we are required to retain it for legal, accounting, security or fraud prevention purposes.

Your Rights

Depending on your location and the circumstances, you may have the right to:

• Request access to your personal information.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your personal information where applicable.
• Ask us to restrict how your information is processed.
• Object to certain uses of your personal information.
• Request a portable copy of information you have provided to us.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Commissioner's Office.

Some rights may be subject to legal limitations or exemptions. We may need to verify your identity before responding to a request.

Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse. However, no internet based service or method of electronic storage can guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to SummitGPX, our service providers or our legal obligations. Where changes are significant, we will take reasonable steps to notify users. The latest version will always be available on this page.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights or have concerns about how your personal information is handled, please contact us using the details on our Contact page.