Privacy Policy

Vinland Motorsport Inc. ("we", "us", "the club") respects your privacy. This policy explains what personal information this website collects, why, who sees it, how it is protected and how you can see, correct or delete it. It is written to follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and its fair information principles.

Who is responsible

Vinland Motorsport Inc. is accountable for personal information under its control. Our privacy contact is The Secretary, Vinland Motorsport Inc., reachable at secretary@vinland.ca.

What we collect

• Visitors: nothing needs to be provided to read this site. Like every web server, our host records technical information (IP address, browser, pages requested, time) in logs used to keep the site running and secure.
• Contact form: if you use it, the name, email address and message you type, used only to reply to you.
• Event participants: results are published on this site and come from event registration and the club's timing software: your name, car, class and times. If you would like a correction, or would like your name removed from published results, contact us (see "Your rights").
• Staff accounts (people who add results): your email address and a password (we never store the password itself, only a salted one-way hash), the role an administrator gives you, and a record of when you agreed to the Terms of Use and this policy, and which versions.

We do not collect your name, address, date of birth, payment details or any government identifier to create an account.

Why we collect it, and your consent

We collect account information only to: let you sign in, decide what you are allowed to do, post and manage results, keep the site secure, and show that you agreed to these documents. We ask for your express consent when you create an account, or the first time you sign in to an account an administrator created for you (an unticked box you must tick) and we do not use the information for anything else without asking you first. You can withdraw consent at any time by deleting your account (see "Your rights").

Who we share it with

We do not sell or rent personal information and we do not send marketing messages. Information is visible to club administrators who manage accounts. Our hosting provider stores the data on our behalf as a service provider and may only use it to run the service. We disclose information if required by law, such as a valid court order.

Where it is stored

The site is hosted in: Toronto, Canada (DigitalOcean TOR1 data centre). If data is ever stored or processed outside Canada, it may be accessible to courts and authorities in that country under its laws, and we will update this policy first.

How we protect it

• The database that holds accounts and results is encrypted (AES-256).
• Passwords are stored only as salted, slow one-way hashes; nobody, including administrators, can read them.
• The connection to this site is encrypted with HTTPS, and sign-in cookies are encrypted and flagged secure.
• Access is limited by role; repeated wrong passwords lock an account for a while.
• Accounts that are never approved are deleted automatically after 30 days.

If a breach of security safeguards creates a real risk of significant harm to you, we will tell you and the Office of the Privacy Commissioner of Canada as required by law, and we keep a record of every breach.

How long we keep it

Account information is kept while your account exists. When you delete your account, the account and its consent records are removed immediately; copies in encrypted backups are overwritten within the normal backup cycle. Server logs are kept only as long as needed for security and operations.

Your rights

You may, at any time: see the personal information we hold about you, correct it, withdraw your consent, and delete your account. If you have an account, you can do all of this yourself under My account, including downloading your data. Otherwise write to secretary@vinland.ca and we will respond within 30 days. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada.

Cookies

We use only essential cookies: one keeps you signed in (vinland.auth) and one protects forms from forgery (vinland.af). Both are encrypted. We use no advertising, tracking or analytics cookies, so there is no cookie banner to accept.

Children

Accounts are for adults (18 and over). We do not knowingly collect personal information from children.

Changes

When we change this policy in a way that matters, we update the version above, and staff are asked to agree to the new version before they continue.

Questions

Contact The Secretary, Vinland Motorsport Inc. at secretary@vinland.ca.