YOUR INFORMATION

Privacy Policy

Last updated: 10 November 2026

Who is responsible for your information?

Pegasus Race Ratings operates this website and is responsible for deciding how personal information collected through it is used. For privacy questions, access requests, corrections or account closure, email dave@pegasusraceratings.com. For newsletter enquiries, email admin@pegasusraceratings.com.

What we collect and why

• Membership information: the name, email address, username and other account details you provide, password authentication records, membership status and relevant account activity. We use these to provide your account, manage access, respond to requests and protect the service.
• Newsletter information: your email address, signup and confirmation information, consent record and subscription preferences when you choose to subscribe. The monthly newsletter is separate from membership; creating an account does not automatically subscribe you.
• Messages you send us: your contact details and the content of enquiries, support requests and complaints, so we can respond and keep an appropriate record.
• Technical and security information: information such as IP addresses, browser/device details and access or security events processed by our hosting and security services to operate the website and detect misuse.

Please do not send passwords, payment-card details or unnecessary sensitive personal information in an email or support request.

Our reasons for using information

Where UK GDPR or EU GDPR applies, we rely on the following lawful bases, depending on the activity:

• Providing the service you request: processing necessary to set up and administer your membership and fulfil our agreement with you.
• Legitimate interests: proportionate processing to keep the website secure, prevent abuse, maintain service records and respond to enquiries or complaints, taking account of your rights and reasonable expectations.
• Consent: sending the optional monthly newsletter. You can withdraw this at any time without losing your membership.
• Legal obligations: keeping or disclosing information where applicable law requires it.

Newsletter choices and service emails

The newsletter signup uses a separate consent checkbox and an email-confirmation step. You can unsubscribe using the link in a newsletter or contact us at the newsletter address above. Unsubscribing from marketing does not prevent essential account messages, such as password resets or important changes to your membership. We do not sell subscriber or member contact details or add them to third-party marketing lists.

Who helps us operate the service?

We use Spaceship for website hosting, Spacemail for mailbox services and Cloudflare Turnstile for abuse protection. WordPress and its membership and Newsletter plugins process account and subscription information within the website installation. Hosting, email, security and backup providers may process information needed to provide their services. Authorised people administering the site may access information where necessary for their work.

We may disclose information where required by law, to respond to a valid legal request, or where necessary to establish or defend legal rights. We do not give other members access to your private account or subscription information.

Providers may process information in countries outside your own. Where data-protection law restricts an international transfer, the relevant transfer must be covered by an applicable adequacy decision or appropriate safeguards, such as approved contractual protections. Contact us for details of the arrangements relevant to your information; this notice does not promise that all processing takes place in the UK.

How long we keep information

Account information is kept while needed to provide your membership. After an account closes, our policy is to review it and delete or anonymise information no longer needed. Closure does not necessarily erase every related record immediately.

Retention depends on the purpose: enquiries may need to be retained until resolved and for a reasonable period to address follow-up questions; limited security, complaint or legal records may be needed for investigation, dispute handling or legal obligations. We review these needs rather than retaining information indefinitely without a reason.

After unsubscribing, a limited suppression or consent record may be retained to honour your choice and show how a subscription was obtained. Backup copies may remain until the relevant backup cycle expires; they are not intended for ordinary use. When handling a deletion request, we will explain any information that must remain, why it remains and the relevant timetable, including backups. This is not a promise of instantaneous or fully automated deletion.

Your rights and how to contact us

Depending on the applicable law and circumstances, you can ask to access your personal information, correct inaccuracies, erase information, restrict its use, receive a portable copy, or object to processing based on legitimate interests. You can object to direct marketing and withdraw newsletter consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Email dave@pegasusraceratings.com to make a request. We may ask for proportionate information to verify your identity and protect your account. Under UK GDPR, requests are normally answered within one month; where a lawful extension applies, we will explain it within the required period. Rights are subject to applicable exceptions, which we will explain if relevant.

Account closure and deletion are related but separate: tell us if you want both. We will consider relevant membership, website, correspondence, subscription and backup records, rather than treating a disabled login as complete deletion.

You can complain to the Information Commissioner’s Office where UK data-protection law applies, or your relevant local supervisory authority. You do not have to complain to us first.

Cookies, security and children

The website uses cookies or similar storage where needed for features such as login, account sessions and security. Security services may process technical information to distinguish genuine visitors from automated abuse. Your browser allows you to manage cookies; blocking essential storage may prevent some features from working.

Optional analytics, advertising or similar tracking must be explained and, where required, offered only with the appropriate consent. We will update the information provided if we introduce such uses. We do not use your racing interests to make automated decisions with legal or similarly significant effects.

We use access controls and security measures to protect information, but no internet service can promise absolute security. This site is intended for adults aged 18 or over. Contact us if you believe a child has supplied personal information so we can investigate and take appropriate action.

Changes to this policy

We will update the date above when this notice changes and communicate material changes clearly. A new use requiring consent will not be treated as authorised merely because this policy has been updated.