Privacy policy

Who is responsible

Stichting Senna Moorlag Racing ([Street, postcode, city, Netherlands]) is the controller for personal data processed through Racecraft Academy. Questions or requests: team@racecraft.academy.

What we collect and why

• Account: name, email address, password (stored encrypted by our authentication provider). To give you access. Basis: contract.
• Driver profile: optional iRacing ID, discipline and rig details. To personalise training. Basis: contract.
• Training data: completed lessons, course enrolments, assignment results and notes, coach feedback. To track your progress and coach you. Basis: contract.
• Payments: handled by Stripe. We store your Stripe customer and subscription IDs, plan, status and invoice amounts, never card details. Basis: contract and legal obligation (tax records, kept 7 years).
• Contact form and newsletter: name, email and your message; your email for the newsletter until you unsubscribe. Basis: legitimate interest and consent.

Cookies

We only use cookies that are strictly necessary to keep you signed in and secure. We don't use advertising or tracking cookies. Stripe sets its own cookies on its payment pages to prevent fraud.

Who processes data for us

• Supabase: database, authentication and video storage (servers in the EU).
• Stripe: payments and invoicing.
• Vercel: website hosting.
• Our email provider: account and service emails.
• YouTube or Vimeo: when a lesson embeds a video from them (privacy-enhanced mode where available).

Where a processor is outside the EU, data is transferred under the EU Standard Contractual Clauses or an adequacy decision.

How long we keep data

Account and training data: as long as your account exists, and up to 30 days after you delete it. Invoices and payment records: 7 years (Dutch tax law). Contact messages: up to 2 years.

Your rights

You can ask to access, correct, export or delete your data, or object to processing. Email us and we'll respond within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).