Privacy Policy

1. Who we are

Rehz Technologies Pvt. Ltd. is a private limited company incorporated in India, with its registered office in Bengaluru, Karnataka. For the purpose of the Indian Digital Personal Data Protection Act, 2023 ("DPDP Act"), Rehz acts as a Data Fiduciary in respect of the personal data collected through the Services, and as a Data Processor in respect of personal data processed on behalf of event organisers using RRS.

2. Scope

This Policy applies to: (a) the rehzracingsoftware.com website; (b) the RRS organiser platform and dashboards; (c) the Rehz Motorsports mobile applications on iOS and Android; and (d) any related services we provide.

3. Information we collect

• Account & profile information — name, email, phone, organisation, role.
• Event registration data — racer details, vehicle and class details, FMSCI licence details where applicable, indemnity acceptance.
• Payment information — processed via third-party payment gateways; we do not store full card numbers on our servers.
• Device & usage data — IP address, browser/device type, pages visited, timestamps.
• Cookies & analytics — see Section 6.
• Communications — messages and queries you send us via email, WhatsApp or contact forms.

4. How we use information

• To operate event registrations, scrutineering, paddock, parc fermé, ticketing, timing, championship points and on-ground POS.
• To process payments and issue invoices and receipts.
• To communicate event updates, race-day briefings and customer-support responses.
• To analyse and improve the Services.
• To comply with legal and regulatory obligations, including reporting to sanctioning bodies such as the FMSCI where applicable.

5. Sharing of information

We share personal data only as necessary, with:

• Event organisers — for events you have registered for or purchased tickets to.
• Payment gateways & processors — to facilitate payment, refunds and reconciliation.
• Sanctioning bodies (e.g. FMSCI) — where required for sanctioned championship reporting and licence validation.
• Hosting, infrastructure and analytics sub-processors — bound by confidentiality and data-protection terms.
• Law-enforcement and regulatory authorities — when required by law.

We do not sell personal data.

6. Cookies & tracking

We use first-party and third-party cookies and similar technologies to operate the website, remember preferences, measure usage and improve the Services. You can control cookies through your browser settings; disabling certain cookies may affect functionality.

7. Data retention

We retain personal data only for as long as necessary to provide the Services, comply with our legal, accounting and reporting obligations (including sanctioning-body record-keeping), and resolve disputes. Retention periods vary by data type and applicable law.

8. Your rights

In accordance with the Indian DPDP Act and other applicable laws, you have the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate or incomplete data.
• Request erasure of your personal data, subject to our legal retention obligations.
• Withdraw consent where processing is based on consent.
• Lodge a grievance with our Grievance Officer (see Section 14).

9. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including encryption in transit, access controls and audit logging. No system can be guaranteed 100% secure.

10. Children

The Services are not directed at children below the age of 18. Where event registrations involve minors (e.g. junior karting), the parent or legal guardian is responsible for providing consent and supplying the minor's information.

11. International transfers

We are based in India and primarily process data within India. Where data is transferred outside India (for example, to international hosting or analytics providers), we take reasonable steps to ensure appropriate safeguards are in place.

12. Updates to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Please review this Policy periodically.

13. Governing law & jurisdiction

This Privacy Policy is governed by the laws of India. All disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka, with the High Court of Karnataka at Bengaluru as the supervisory court.

14. Contact & Grievance Officer

For privacy-related queries, requests to exercise your rights, or to raise a grievance under the DPDP Act, please contact our Grievance Officer at techsupport@rehz.in. We will acknowledge and respond to your request within the timelines prescribed by applicable law.