What we dowith your data.

Who we are

KAVE is a trading name of Arya Cont, sole trader. Address for service: 50 Frenchay Road, Oxford OX2 6TF. We are the data controller for the information described here - reach us at admin@kavefitness.com, or by post at that address. We have not appointed a data protection officer; we're not required to.

What we collect

Almost everything we hold is business information. The personal data in it is:

• Venues: your name, email, phone number, and the business name, address and deal you give us at signup.
• Run clubs: the founder's name, email and phone, plus club details, run times and start locations.
• Payments: we do not see or store card numbers. Stripe takes the payment and tells us only whether it worked, the last four digits and the subscription status.
• Signatures: the full name you type to sign the terms, the version you signed and the time you signed it.
• Technical: standard server logs and an essential session cookie that keeps you signed in.

Why we use it, and our lawful basis

Each use has one basis under UK GDPR Article 6:

• Running your account, matching you and publishing match pages - performance of our contract with you.
• Taking membership payments and keeping accounting records - contract, and legal obligation for tax records.
• Keeping the service secure and preventing abuse - our legitimate interests in running a working service.
• Emailing you about matches and changes to the terms - contract. We only send marketing emails if you opt in, and every one has an unsubscribe link.

What's public

KAVE match pages are public and indexable by search engines. They show the club, the run time and start point, your business name, address and deal. They do not show runners' personal data, and they do not show your email or phone number.

Who we share it with

We do not sell your data. We share it with clubs or venues you are matched with, so the match can happen, and with the suppliers who run the service for us:

• Stripe - payments and subscriptions.
• MongoDB Atlas - the database.
• Our hosting provider - running the site.
• CARTO and OpenStreetMap - map tiles on match pages.

Where it goes

Some of those suppliers process data outside the UK. Where they do, the transfer relies on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

How long we keep it

Account and match data for as long as you are a member, then up to 6 years after your membership ends - that covers the limitation period for contract claims and HMRC's record-keeping requirement. Signed terms records are kept for the same 6 years. Server logs are kept for up to 12 months.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop a particular use, or ask for it in a portable format. Where we rely on legitimate interests you can object. Email admin@kavefitness.com and we'll respond within one month. If you're not happy with how we've handled it you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

We set one cookie, and it's the session cookie that keeps you signed in. It's strictly necessary for the site to work, so we don't ask for consent for it. We run no advertising or analytics cookies. If that ever changes we'll ask first.

Changes to this notice

If we change this notice we'll update the version and date at the top, and email members about anything significant.