Privacy Policy

Scope

This policy applies to champcar.org and related pages under our control (including event and membership portals), to chumpcar.com (historical archive), and to our official social media pages we operate. It does not cover third-party websites we link to or services we don’t control.

Controller: ChumpCar International, Inc., Piney River, VA 22964, USA.

Information we collect

• Account & membership data – name, email, phone, address, date of birth (where needed for eligibility), membership status, emergency contact.
• Event & competition data – team/vehicle details, transponder numbers, waivers, incident reports, results, volunteer shifts.
• Transactions – items purchased, membership and entry fees, billing contact. (Card data is processed by our payment providers; we do not store full card numbers.)
• Communications – emails, messages, surveys, support requests, social media interactions.
• Device/usage data – IP address, device/browser, pages visited, referring URLs, approximate location, and similar analytics.
• Media – photos, video, and audio from events and award ceremonies; livestream footage; interviews and quotes.

Where we get it

• Directly from you (forms, registrations, emails, support, surveys, waivers);
• Automatically from your device/browser via cookies and similar technologies;
• From service providers (payments, analytics, email, registration systems);
• From publicly available sources (e.g., social media you make public or tag us in).

How we use information

• Provide, operate, and improve our websites, memberships, and events;
• Create and manage accounts, authenticate users, and prevent fraud;
• Process payments and fulfill purchases and event entries;
• Communicate with you about memberships, events, rule updates, safety notices, and club news (opt-out available for marketing);
• Plan, staff, and run events (registration, timing/scoring, results, awards);
• Comply with legal obligations and enforce our terms and rules;
• Produce media and promotional materials related to ChampCar activities.

Legal bases for EEA/UK users: consent, contract performance, legitimate interests (e.g., running a safe, member-focused racing club), and legal obligations.

When we share information

• Service providers (data processors) such as payment processors, registration/timing platforms, analytics, email, and web hosting—only as needed to perform services for us;
• Event operations (e.g., track partners, safety officials) to run safe events and comply with facility requirements;
• Business transfers (e.g., merger, asset transfer) where permitted by law;
• Legal & safety – to comply with law, protect rights and safety, and prevent fraud or abuse;
• With your direction or consent.

We do not sell your personal information. We also do not “share” it for cross-context behavioral advertising as defined by the California Privacy Rights Act (CPRA).

Cookies, analytics & tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and measure site usage. We use Google Analytics to understand aggregate usage and improve our site.

• Essential – necessary for our sites to function (security, login, forms);
• Functional – remember preferences and improve experience;
• Analytics – measure traffic and usage (e.g., pages visited, device type).

You can control cookies via your browser settings. If you disable some cookies, parts of the site may not work as intended.

Do Not Track: we do not currently respond to DNT signals.

Payments

Payments are processed by third-party providers that adhere to PCI-DSS standards. We do not store full credit card numbers on our systems. Payment processors use your information according to their privacy policies.

Data retention

We keep personal information only as long as necessary for the purposes described in this policy, including running events, maintaining accurate membership and results records, complying with legal obligations, resolving disputes, and enforcing agreements. Retention periods vary by data type and our legal/operational needs.

Security

We use reasonable technical and organizational safeguards to protect personal information. No system is 100% secure, but we work to prevent unauthorized access, use, or disclosure.

Your privacy rights

Depending on your location, you may have rights over your information, including:

• Access, correct, or delete your information;
• Receive a copy (portability) in a commonly used format;
• Object to or restrict certain processing;
• Withdraw consent where we rely on consent (does not affect prior processing);
• For California residents: rights to know/access, correct, delete, and to opt out of “sales” or “sharing” (we do not sell or share as defined by CPRA). No discrimination for exercising your rights.

To exercise rights, contact us using the details below. We will verify your request as required by applicable law. Authorized agents may submit requests with proper authorization.

International transfers: If you are outside the United States, your information may be processed in the U.S. By using our services, you consent to the transfer where permitted by law. We use appropriate safeguards when required.

Children’s privacy

Our websites are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date above. Significant changes may also be communicated by email or site notice.