Back to site

Privacy Notice

Last updated: 13 October 2026

1. Who is responsible for your data

"RaceStory" is responsible for the personal data described in this notice. We operate from Mexico City, Mexico, and this notice is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations.

For anything related to your personal data, contact us at info@myracestory.com. This is our designated privacy contact.

2. What data we collect

From athletes

  • Identity and contact: full name, phone or WhatsApp number, email address.
  • Race brief: event, race date, bib number, division and category, start time or wave, teammate name if racing doubles or relay, and a description of your race-day clothing.
  • Identifying photo: a photo of your face, which you send us so your Creator can recognise you at the venue.
  • Race content: the photographs and video we capture of you at the event.
  • Transaction data: package purchased, amount, currency, date and payment status.

We do not collect or store your full card number, CVV or bank credentials. Payment data is captured and processed directly by Stripe, Mercado Pago or PayPal under their own privacy policies. We only see confirmation that a payment succeeded and the last digits of the instrument used.

We do not request health data, and you should not send us any. If you tell us about an injury in the course of a cancellation, we use that only to process your request and do not retain it beyond that.

From Race Creators

  • Full name, phone or WhatsApp number, email address, city.
  • Portfolio, social profiles, equipment and relevant experience.
  • Availability by event.
  • Payment details needed to pay you, and any tax data required to issue or receive invoices.

Sensitive data

Your photograph and the race content we produce are images of an identifiable person, and we treat them with particular care. We do not use facial-recognition technology, we do not create biometric templates, and we do not use your images to train artificial-intelligence models, nor do we permit third parties to do so.

3. Why we use it (primary purposes)

These purposes are necessary to provide the service you booked:

  • Confirm, manage and deliver your booking.
  • Assign a Race Creator and share with them only what they need to find and cover you — your name, bib, division, start window, clothing description and identifying photo.
  • Process payment and, where applicable, refunds.
  • Edit, store and deliver your photos and video.
  • Communicate with you about your booking on WhatsApp or email.
  • Comply with tax, accounting and legal obligations.

4. Secondary purposes (you can refuse)

These are not necessary for the service, and you may refuse them without affecting your booking in any way:

  • Using your race photos and video — including your image and first name — to promote RaceStory on our website, Instagram, TikTok, Facebook, advertising and portfolio materials.
  • Sending you information about future events we will cover, offers or news.

To refuse either, email info@myracestory.com stating which use you object to. You can do this before or after your race, at any time. We will confirm and stop that use within five business days, and remove published material from the channels we control within a reasonable time. We cannot recover content already reshared by third parties or printed material already produced.

5. Who we share it with

We do not sell your personal data. We share it only as follows:

  • Your assigned Race Creator — the minimum needed to identify and cover you. Creators are contractually bound to confidentiality, may use the data only for that assignment, and must delete it on request.
  • Payment processors — Stripe, Mercado Pago or PayPal, to take payment and issue refunds.
  • Technology providers — Google (Google Drive and Workspace, for storing and delivering content), our website host, and the tools we use to schedule social content. These act as data processors on our instructions.
  • Authorities — where legally required.

Some of these providers store data outside Mexico, including in the United States. By using the service you consent to that international transfer, which is made to providers that offer appropriate safeguards. We do not make transfers that require your separate consent under Article 37 of the LFPDPPP without first asking you.

6. How long we keep it

  • Race content (photos and video): available to you for 12 months from delivery, after which we may delete it from active storage. We may retain a curated selection for marketing purposes indefinitely unless you object under section 4.
  • Your identifying photo: deleted within 30 days after your event. It exists only so your Creator can find you.
  • Booking and contact data: kept while you are an active customer and afterwards for as long as legally required.
  • Transaction records: retained for the period required by Mexican tax law, currently five years.
  • Creator records: kept for the duration of the working relationship and the period required for tax and legal purposes afterwards.

7. Your ARCO rights

Under Mexican law you have the right to Access your data, Rectify it when inaccurate, Cancel it when you believe it is not being handled properly, and Oppose its use for specific purposes. You may also revoke consent you previously gave, and limit its use or disclosure.

To exercise any of these, email info@myracestory.com with:

  • Your full name and a contact address for our reply.
  • A copy of an official ID, so we can confirm it is really you.
  • A clear description of the data concerned and what you are asking for.

We will respond within 20 business days and, if your request is well founded, act on it within the following 15 business days. There is no charge, beyond justified shipping or copying costs. If you are not satisfied, you may file a complaint with Mexico's data-protection authority.

Note that some requests cannot be fully honoured — for example, we must keep transaction records for the tax period required by law, even if you ask us to delete everything else.

8. Security

We apply reasonable administrative, technical and physical measures to protect your data, including access control, limiting Creator access to the minimum needed for each assignment, using reputable providers, and deleting identifying photos once they are no longer needed. No system is completely secure, and we cannot guarantee absolute security, but we will notify you of any breach that materially affects your rights.

9. Minors

Our service is for people aged 18 and over. We do not knowingly collect data from or about minors, and we do not cover athletes under 18. If you believe we hold data about a minor, contact us and we will delete it.

10. Website and cookies

Our website does not require you to create an account. We use Google Ads conversion tracking (a Google tag) to measure the effectiveness of our advertising. When you visit the site, Google may set cookies or similar identifiers on your device, and when you click a WhatsApp link we send Google an anonymous signal that a click occurred, along with the page and button it came from. We do not send your name, phone number, messages or payment details to Google through this tag. Google processes this data under its own Privacy Policy. You can block or delete cookies in your browser settings, opt out of personalized ads at adssettings.google.com, or contact us at info@myracestory.com. Links to third-party sites, including WhatsApp and our social channels, are governed by those platforms' own privacy policies.

11. Changes to this notice

We may update this notice to reflect changes in our service or the law. The current version is always published here with its date. Material changes will be communicated by email or WhatsApp where we have your contact details.

Note: RaceStory is not yet incorporated as a company. This notice is issued by the individuals operating RaceStory. Once the legal entity is constituted, it will be updated with the registered name, RFC and address of the data controller.

← Back to RaceStory