Privacy Policy

Strategyfront Pty Ltd (ACN 696 752 351 / ABN 57 696 752 351), trading as Kart Mate Racing ('Kart Mate Racing', 'we', 'us', 'our') is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store and disclose your personal information when you use our website, make a booking, or visit our venue at Castle Towers, Castle Hill NSW.

We collect the following categories of personal information: - Personal identifiers: full name, email address, phone number; - Booking data: session type, date, time, number of rigs booked, total amount paid; - Optional: driver tag (display name used on the public leaderboard); - Payment metadata: card brand and last four digits (we never store full card numbers — see Section 6); - Technical data: IP address, browser type, device, and pages visited on our website (collected automatically via standard web logs); - Communications: any correspondence you send us via email or our contact forms.

We use your personal information to: - Process and confirm your session bookings; - Send you booking confirmations, receipts and operational updates; - Contact you regarding your reservation if anything changes; - Display your driver tag and lap times on the public leaderboard (only if you have registered a tag); - Improve our services, website and venue operations; - Comply with legal obligations under Australian law. We will not use your information for direct marketing purposes without your explicit consent.

If you register a driver tag at the time of booking, your tag and associated lap times will be displayed publicly on the Kart Mate Racing leaderboard at kartmateracing.au/leaderboard. Your full name, email address and phone number are never displayed publicly — only your chosen driver tag. You may request removal of your driver tag and lap time data at any time by contacting hello@kartmateracing.au.

Your personal information is stored on secure cloud infrastructure (Supabase, hosted in the EU/AU region) and is encrypted in transit (TLS) and at rest. We take reasonable technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. Access to personal information within Kart Mate Racing is limited to staff members who require it to perform their duties. We retain booking data for a period of 7 years after your session, in accordance with Australian taxation and consumer law record-keeping obligations. After that period, identifying data is securely deleted.

Payments are processed by Stripe Payments Australia Pty Ltd ('Stripe'), a PCI-DSS Level 1 compliant payment processor. We never see, store or transmit your full card number, CVC or expiry date. Stripe handles this data directly. We retain only: - A reference to the Stripe PaymentIntent ID for the transaction (used for refunds and reconciliation); - The card brand (e.g. Visa, Mastercard) and last four digits, for receipt purposes; - The amount paid and the booking it relates to. For Stripe's own privacy practices, see https://stripe.com/au/privacy.

We do not sell, rent or share your personal information with third parties for their own marketing purposes. We may disclose your information to: - Service providers who assist us in operating our business — including Stripe (payments), Resend (transactional email delivery), Supabase (database hosting), and Vercel (website hosting); - Law enforcement, courts or regulatory bodies where required by law or by a valid legal process; - A successor entity in the event of a sale, merger or acquisition of our business (subject to that entity continuing to comply with this Privacy Policy or providing equivalent protections). All third-party service providers are required, by contract or by their published policies, to handle your data in accordance with applicable privacy laws.

Our website uses essential cookies (for example, to remember your session during booking) and may use anonymous analytics cookies to understand which pages are most useful to visitors. We do not use advertising cookies, cross-site tracking pixels, or sell visitor data to advertising networks. You can disable cookies in your browser settings, though this may affect some site functionality (in particular, the booking flow).

Under the Australian Privacy Act, you have the right to: - Access the personal information we hold about you; - Request correction of inaccurate information; - Request deletion of your data (where we are not legally required to retain it); - Opt out of any marketing communications; - Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. To exercise these rights, contact us at hello@kartmateracing.au. We will acknowledge your request within 7 days and respond substantively within 30 days.

Our services are not directed at children under 14. Participants under 14 may only book through a parent or guardian who provides their own personal information for the booking. We do not knowingly collect personal information directly from children under 14.

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The updated version will be posted on this page with the revised effective date. Where the change is material, we will notify customers by email where possible.

For privacy-related enquiries or complaints, please contact: Strategyfront Pty Ltd (ACN 696 752 351 / ABN 57 696 752 351), trading as Kart Mate Racing Castle Towers, Level 2, Castle Hill NSW 2154 hello@kartmateracing.au If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.