YOUR INFORMATION

Privacy Policy

Last updated: 12 November 2026

Your personal information

This policy explains what personal information is collected when you use the Pegasus Race Ratings website, why it is needed, how it is handled and the choices and rights available to you.

Pegasus Race Ratings is responsible for handling the personal information collected through this website. For privacy questions, access requests, corrections or account closure, email dave@pegasusraceratings.com. For newsletter enquiries, email admin@pegasusraceratings.com.

Information collected and its purpose

• Membership information: the name, email address, username and other account details you provide, password authentication records, membership status and relevant account activity. These details are used to provide your account, manage access, respond to requests and protect the service.
• Newsletter information: your email address, signup and confirmation information, consent record and subscription preferences when you choose to subscribe. The monthly newsletter is separate from membership; creating an account does not automatically subscribe you.
• Enquiries and correspondence: your contact details and the content of enquiries, support requests and complaints, to allow a response and an appropriate record of the correspondence.
• Technical and security information: information such as IP addresses, browser/device details and access or security events processed by the website’s hosting and security services to operate the website and detect misuse.

Please do not send passwords, payment-card details or unnecessary sensitive personal information in an email or support request.

Reasons for using information

Where UK GDPR or EU GDPR applies, Pegasus Race Ratings relies on the following lawful bases, depending on the activity:

• Providing the service you request: processing necessary to set up and administer your membership and fulfil the membership agreement with you.
• Legitimate interests: proportionate processing to keep the website secure, prevent abuse, maintain service records and respond to enquiries or complaints, taking account of your rights and reasonable expectations.
• Consent: sending the optional monthly newsletter and the report email alerts you select. You can withdraw this at any time without losing your membership.
• Legal obligations: keeping or disclosing information where applicable law requires it.

Newsletter choices and service emails

The newsletter signup uses a separate consent checkbox and an email-confirmation step. You can unsubscribe using the link in a newsletter or email the newsletter address above. Unsubscribing from marketing does not prevent essential account messages, such as password resets or important changes to your membership. Subscriber and member contact details are not sold or added to third-party marketing lists.

Optional report email alerts

Report alerts are separate from membership and the monthly newsletter. Saving ticked report choices in your account gives consent to email updates for those categories. Your choices, opt-in times and a protected reference to your account email are stored on the website. The delivery queue contains member identifiers and report references, not report contents. Active account status and current preferences are checked before sending.

Untick your choices or use the unsubscribe link in an alert to stop report emails without closing your account. Completed or cancelled delivery records are removed after 30 days; unsuccessful or uncertain deliveries are retained for investigation. Hourly sending-count records contain no addresses and are removed after two days. Alert preferences and queued records are removed when the membership record is deleted. Changing your account email requires you to save your choices again. Hosting backups follow the retention arrangements described below.

Service providers

The website uses Spaceship for website hosting, Spacemail for mailbox services and Cloudflare Turnstile for abuse protection. WordPress and its membership and Newsletter plugins process account and subscription information within the website installation. Hosting, email, security and backup providers may process information needed to provide their services. Authorised people administering the site may access information where necessary for their work.

Information may be disclosed where required by law, to respond to a valid legal request, or where necessary to establish or defend legal rights. Other members do not receive access to your private account or subscription information.

Providers may process information in countries outside your own. Where data-protection law restricts an international transfer, the relevant transfer must be covered by an applicable adequacy decision or appropriate safeguards, such as approved contractual protections. Email the privacy contact above for details of the arrangements relevant to your information; this notice does not promise that all processing takes place in the UK.

How long information is kept

Account information is kept while needed to provide your membership. After an account closes, the policy is to review it and delete or anonymise information no longer needed. Closure does not necessarily erase every related record immediately.

Retention depends on the purpose: enquiries may need to be retained until resolved and for a reasonable period to address follow-up questions; limited security, complaint or legal records may be needed for investigation, dispute handling or legal obligations. These needs are reviewed rather than retaining information indefinitely without a reason.

After unsubscribing, a limited suppression or consent record may be retained to honour your choice and show how a subscription was obtained. Backup copies may remain until the relevant backup cycle expires; they are not intended for ordinary use. When handling a deletion request, the response will explain any information that must remain, why it remains and the relevant timetable, including backups. This is not a promise of instantaneous or fully automated deletion.

Your rights and contact details

Depending on the applicable law and circumstances, you can ask to access your personal information, correct inaccuracies, erase information, restrict its use, receive a portable copy, or object to processing based on legitimate interests. You can object to direct marketing and withdraw newsletter consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Email dave@pegasusraceratings.com to make a request. Proportionate information may be requested to verify your identity and protect your account. Under UK GDPR, requests are normally answered within one month; where a lawful extension applies, the reason will be explained within the required period. Rights are subject to applicable exceptions, which will be explained if relevant.

Account closure and deletion are related but separate: please specify if you want both. The review will cover relevant membership, website, correspondence, subscription and backup records, rather than treating a disabled login as complete deletion.

You can complain to the Information Commissioner’s Office where UK data-protection law applies, or your relevant local supervisory authority. You do not have to complain to Pegasus Race Ratings first.

Cookies, security and children

The website uses cookies or similar storage where needed for features such as login, account sessions and security. Security services may process technical information to distinguish genuine visitors from automated abuse. Your browser allows you to manage cookies; blocking essential storage may prevent some features from working.

Optional analytics, advertising or similar tracking must be explained and, where required, offered only with the appropriate consent. The information provided will be updated if such uses are introduced. Your racing interests are not used to make automated decisions with legal or similarly significant effects.

Access controls and security measures help protect information, but no internet service can promise absolute security. This site is intended for adults aged 18 or over. Please email the privacy contact above if you believe a child has supplied personal information, so the matter can be investigated and appropriate action taken.

Changes to this policy

The date above will be updated when this notice changes, and material changes will be communicated clearly. A new use requiring consent will not be treated as authorised merely because this policy has been updated.