privacy policy.

1. Introduction

Blueprint Motorsport Ltd ("Blueprint Motorsport", "we", "us" or "our") is committed to protecting and respecting your privacy.

We recognise the importance of protecting personal data and are committed to processing personal data lawfully, fairly and transparently.

We are registered with the Information Commissioner's Office ("ICO") under registration number ZC112278.

This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal data when you:

• visit our website;

• contact us;

• make an enquiry;

• purchase or receive our services;

• participate in events, driving experiences or coaching sessions;

• attend our events;

• interact with us on social media;

• communicate with us in any other way.

We process personal data in accordance with:

• the UK General Data Protection Regulation ("UK GDPR");

• the Data Protection Act 2018; and

• other applicable privacy and data protection legislation.

2. Data Controller

Blueprint Motorsport Ltd

Company Number: 17104538

Registered Office:

167-169 Great Portland Street

London

England

W1W 5PF

Email:

james@blueprintmotorsport.co.uk

For the purposes of data protection legislation, Blueprint Motorsport Ltd is the data controller of your personal data.

3. The Personal Data We Collect

Depending upon the nature of your relationship with us, we may collect and process the following categories of personal data.

Identity Data

• name;

• title;

• date of birth;

• nationality;

• driving licence details;

• identification documentation where required.

Contact Data

• postal address;

• email address;

• telephone number;

• emergency contact information.

Booking and Participation Data

• booking information;

• event attendance records;

• participant details;

• service preferences;

• customer communications;

• event history.

Vehicle and Driving Data

Where relevant to the services provided:

• driving licence information;

• driving experience information;

• insurance information;

• vehicle ownership information;

• vehicle usage information.

Payment Data

• payment details;

• transaction records;

• invoice information;

• billing records.

We do not store complete payment card information.

Health and Safety Information

Where necessary for participation or safety purposes, we may collect information relating to:

• physical fitness;

• medical conditions disclosed by participants;

• injuries sustained during participation;

• safety declarations;

• emergency information.

We will only process such information where lawful and necessary.

Photography and Video Data

We may collect:

• photographs;

• video recordings;

• onboard footage;

• event media content;

• promotional imagery.

Technical Data

When you visit our website, we may collect:

• IP address;

• browser type;

• operating system;

• device information;

• website usage data;

• cookie information.

Marketing Data

• communication preferences;

• marketing preferences;

• event subscription preferences.

Incident and Claims Data

Where relevant, we may collect:

• accident reports;

• incident reports;

• witness statements;

• insurance information;

• complaint records;

• investigation materials.

4. How We Collect Personal Data

We may collect personal data:

• directly from you;

• through website enquiry forms;

• through booking forms;

• through waiver documentation;

• through event registration processes;

• through telephone conversations;

• through email correspondence;

• through social media communications;

• through photographs and recordings taken at events;

• through third parties acting on your behalf;

• through cookies and website analytics technologies.

5. How We Use Personal Data

We may use personal data for the following purposes.

Providing Services

• processing bookings;

• arranging events;

• administering customer accounts;

• communicating with participants;

• delivering coaching and motorsport services.

Safety and Risk Management

• assessing suitability for participation;

• complying with health and safety obligations;

• investigating incidents;

• maintaining event safety standards;

• managing insurance and risk matters.

Customer Service

• responding to enquiries;

• handling complaints;

• providing support;

• administering customer relationships.

Administration

• processing payments;

• maintaining records;

• administering contracts;

• enforcing contractual rights.

Marketing

Where permitted by law, we may send information regarding:

• services;

• promotions;

• future events;

• company news;

• special offers.

You may opt out at any time.

Legal and Regulatory Compliance

We may process personal data to:

• comply with legal obligations;

• comply with regulatory requirements;

• establish, exercise or defend legal claims;

• cooperate with law enforcement authorities.

Business Improvement

We may analyse personal data to:

• improve our services;

• improve customer experience;

• develop new products and services;

• monitor business performance.

6. Lawful Basis for Processing

We process personal data on one or more of the following lawful bases:

Contract

Processing is necessary for the performance of a contract with you or to take steps prior to entering into a contract.

Legitimate Interests

Processing is necessary for our legitimate interests including:

• operating our business;

• providing services;

• managing customer relationships;

• protecting our legal interests;

• maintaining safety standards.

Legal Obligation

Processing is necessary to comply with legal obligations.

Consent

Where required, we rely on your consent.

You may withdraw consent at any time.

7. Special Category Data

Certain information relating to health, fitness or medical conditions may constitute special category data.

We only process such information where:

• necessary for health and safety purposes;

• necessary to protect vital interests;

• explicit consent has been provided; or

• another lawful basis applies under data protection legislation.

8. Sharing Personal Data

We may share personal data with:

Event Partners

• race circuits;

• venues;

• event organisers;

• venue operators.

Service Providers

• IT providers;

• cloud storage providers;

• payment processors;

• software providers;

• website providers.

Professional Advisers

• solicitors;

• accountants;

• auditors;

• insurers;

• insurance brokers.

Contractors and Instructors

Where necessary for the provision of services.

Regulators and Authorities

Where required by law or reasonably necessary.

We do not sell personal data to third parties.

9. Photography, Video and Media

As part of our events and activities, photographs, video recordings and onboard footage may be taken.

Such material may be used for:

• event administration;

• incident investigation;

• safety monitoring;

• marketing;

• promotional activities;

• website content;

• social media content.

Where required by law, appropriate consent will be obtained.

10. International Transfers

We generally store personal data within the United Kingdom.

Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are implemented in accordance with applicable law.

11. Data Security

We maintain appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;

• loss;

• misuse;

• destruction;

• alteration;

• disclosure.

While we take reasonable precautions, no method of transmission or storage can be guaranteed to be completely secure.

12. Data Retention

We retain personal data only for as long as reasonably necessary to:

• provide services;

• comply with legal obligations;

• deal with complaints;

• manage insurance matters;

• resolve disputes;

• enforce contractual rights.

Retention periods may vary depending on the nature of the information.

13. Children's Data

Certain events may involve junior participants.

Where personal data relating to children is collected, we will do so in accordance with applicable legal requirements and obtain appropriate parental or guardian authorisation where required.

14. Your Rights

You may have the right to:

• access your personal data;

• rectify inaccurate data;

• erase personal data;

• restrict processing;

• object to processing;

• data portability;

• withdraw consent;

• lodge a complaint.

The availability of these rights will depend on the circumstances.

15. Exercising Your Rights

Requests concerning personal data should be sent to:

james@blueprintmotorsport.co.uk

We may request evidence of identity before responding.

We will respond in accordance with applicable legal requirements.

16. Cookies

Our website uses cookies and similar technologies.

Cookies help us:

• operate the website;

• improve functionality;

• analyse website usage;

• improve user experience.

Further information is available in our Cookie Policy.

17. Complaints

If you are dissatisfied with how we handle personal data, please contact us first so that we can attempt to resolve your concerns.

You also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Website: www.ico.org.uk

18. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time.

Updated versions will be published on our website and will take effect upon publication unless otherwise stated.

19. Contact Us

If you have any questions regarding this Privacy Policy or our use of personal data, please contact: