Privacy Notice

1. Who this notice applies to

This notice applies to people who visit Legacy Lap, explore sponsorship opportunities, make or attempt a sponsorship, request a correction, contact support, or appear in a submitted dedication or public Legacy Roll entry.

Mission Motorsport is the controller for the core Race of Remembrance 2026 sponsorship campaign. Mark/Legacy Lap processes personal information on Mission Motorsport's behalf as processor where this is needed to technically deliver the Legacy Lap platform and campaign services.

Mark/Legacy Lap acts as an independent controller only for limited purposes that it determines independently: platform and system security, fraud and abuse prevention, technical and security audit records, compliance with legal obligations that apply directly to Mark/Legacy Lap, and establishing, exercising or defending Legacy Lap's own legal rights. Questions about this notice can be sent to support@legacylap.co.uk.

2. Information that may be processed

• sponsorship and booking information, including the selected plot or feature, price, status, and relevant dates;
• supporter contact information, including name and email address;
• dedication, sponsor and message information, including information supplied about another person;
• Legacy Roll choices, public-display name and dedication, separate message-publication choice, consent wording/version and timestamps, moderation and publication information;
• Correct a Mistake requests, including requester contact information, request content and correction history;
• support and refund information, including reason, administrative context, reconciliation status and related technical-hold information;
• transaction references and payment-status identifiers, such as Stripe Checkout session, payment-intent, charge, refund and provider-event identifiers;
• technical, server, security, access-session and audit information needed to operate and protect the service.

Legacy Lap is not intended to store complete card-number, card-security-code or other complete payment-card details. Card payment processing is handled by Stripe.

3. Why information is used

Information may be used to provide the sponsorship journey; process and reconcile payments; confirm availability; generate and correct eCertificates; publish an opted-in Legacy Roll entry; respond to corrections, support and refund issues; prevent misuse; maintain security; comply with legal obligations; and administer or close the campaign.

Depending on the circumstances, the lawful basis may include performance of a contract or steps requested before entering one, legitimate interests in running a safe and respectful campaign, compliance with legal obligations, and consent for optional public recognition or any optional marketing activity. We do not use optional Legacy Roll consent as permission to use unrelated personal information.

4. Public information and moderation

Information collected for a private sponsorship or eCertificate does not automatically become public merely because Legacy Lap holds it. If you choose public Legacy Roll recognition, the public name, dedication, sponsorship section and date may be displayed. A personal message is not public unless you make the separate choice to publish it. Public entries may be moderated, hidden, withdrawn or corrected to protect privacy, comply with law or maintain campaign standards.

Please do not provide another person's information unless you have an appropriate reason and permission to do so. Contact us if a public dedication needs correcting or removing.

5. Service providers and sharing

Information may be processed by service providers that support the platform and campaign: Railway and PostgreSQL for application and database hosting; Stripe for payment processing; Resend for transactional email where configured; and Google Sheets for optional authorised paid-sponsorship reporting. IONOS provides email and domain services where supporter communications are sent, transmitted, forwarded or stored through Legacy Lap's IONOS-hosted email, including support@legacylap.co.uk. IONOS is not used to host the Legacy Lap application or database.

GitHub is used for source-code hosting only and is not intended to form part of the supporter personal-information processing chain. Mission Motorsport, as controller for the core campaign, may receive information needed for campaign administration and financial or refund support.

These providers may process information outside the UK. Where international transfers apply, appropriate safeguards should be used as required by applicable law. Stripe's own privacy information also applies to the information it processes for payment services.

6. Retention and security

Information is retained only for as long as reasonably needed for the relevant purpose. For the core campaign, this includes Race of Remembrance sponsorship administration, eCertificate delivery and correction, support, Mission Motorsport finance, refund and reconciliation work, accounting or other legal and regulatory obligations, and security, audit, fraud-prevention or dispute handling. Different categories of information may therefore have different retention periods. Information is deleted or anonymised once it is no longer reasonably needed, subject to operational and legal requirements.

Mission Motorsport ultimately approves retention for the core campaign, and Mark/Legacy Lap implements that retention as processor. Mark/Legacy Lap separately retains information only where necessary for its limited independent-controller purposes described above. No fixed period is stated here because retention depends on the information and purpose involved.

Security measures include access controls, authenticated administrative sessions, signed payment-webhook verification, restricted public access where enabled, and technical safeguards designed to limit unauthorised access. No internet service can guarantee absolute security.

7. Your rights and choices

Subject to applicable UK data-protection law, you may have rights to request access, correction, erasure, restriction, objection, portability and withdrawal of consent. To request a correction, removal of public dedication information, or support with a privacy request, contact support@legacylap.co.uk. We may need to verify a request and may need to retain limited information where law or legitimate administration requires it.

You may also complain to the Information Commissioner's Office (ICO). Information about making a complaint is available from the ICO.

8. Children, marketing and cookies

Legacy Lap is not designed to knowingly collect personal information from children without appropriate involvement from a parent, guardian or other person authorised to provide it. Do not submit a child's information without an appropriate lawful basis and permission.

Optional public recognition is separate from marketing. We do not make marketing consent a condition of sponsorship. Cookie and browser-storage information is explained in the Cookie Policy.

9. Campaign closure and notice changes

After campaign closure, information may continue to be retained where reasonably necessary for the purposes described above. We may update this notice if the campaign, platform, services or legal requirements change. Material changes will be published on this page.