Privacy policy

1. Who we are

This website and Ultra5K Munroe Edition are run by GOAT Adventure Private Limited ("GOAT", "we", "us"), Bengaluru, Karnataka, India. We decide why and how your personal data is used, which makes us the data fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

For anything about your data, write to hello@goatadvindia.com. This is also the contact for privacy complaints.

2. What we collect

• Registration details: your name, date of birth, gender, email address, mobile number, city, nationality, T-shirt size and chosen category.
• Emergency contact: the name and phone number of the person you nominate.
• Eligibility proof: the finish certificate or result link you upload.
• Health declaration: any medical conditions, allergies or medication you choose to tell us about, so the medical team can look after you.
• Payment details: payments are handled by our ticketing and payment partners. We receive confirmation of payment and the amount, but we do not see or store your card or bank details.
• Race data: your bib number, lap times, results and whether you finished.
• Photos and video taken on race day.
• Website data: if analytics is switched on, basic usage data such as pages visited, device type and approximate location, collected through cookies.
• Messages you send us by email or WhatsApp.

3. Why we use it

• To register you, check your eligibility and run the event.
• To keep you safe: medical support, emergency contact and incident response.
• To time the race and publish results.
• To send you race information, updates and changes.
• To issue invoices and meet our tax and legal obligations.
• To use race-day photos and video in our race coverage and promotion, as set out in the participant waiver.
• To improve future editions, using anonymised or aggregated data where we can.

We process your data on the basis of the consent you give when you register, and for legitimate uses allowed by the DPDP Act, such as responding to a medical emergency or meeting a legal requirement. We do not sell your personal data.

4. What becomes public

Results are published on this website and on our timing partner's website. They show your name, bib number, gender, category, lap times and finishing position. Race photos may be shared publicly. If you do not want your name shown in the results, write to us before race day and we will show your bib number instead.

5. Who we share it with

We share only what each party needs to do its job:

• our ticketing and payment partners;
• the timing partner;
• the race medical team and hospitals, in an emergency;
• event photographers and our media partners;
• the host panchayats, police and other authorities, when the law or a permit requires it;
• insurers, if the event is insured;
• our IT, email and messaging providers.

Each of these partners must protect your data and use it only for the event. Some providers may store data outside India, and we use them only where the law allows.

6. How long we keep it

• Health declarations are deleted within 90 days after the event, unless they relate to an incident we must keep records of.
• Registration and contact details are kept for up to 3 years, so we can show your history across editions and contact you about future races. You can ask us to delete them sooner.
• Unfinished registrations (details entered but never paid for) and certificates uploaded with them are deleted automatically about a week later.
• Results are kept as a permanent record of the event.
• Invoices and payment records are kept for as long as Indian tax law requires.

7. Your rights

Under the DPDP Act you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, where we no longer need it or the law does not require us to keep it;
• withdraw your consent at any time. This does not affect what we did before, and we may not be able to keep your race entry if we can no longer use the data the event needs;
• nominate someone to act for you if you die or become unable to act;
• raise a complaint with us.

Write to hello@goatadvindia.com to use any of these rights. We will confirm we have your request and reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

8. Cookies and analytics

The website itself does not need cookies to work. If we switch on Google Analytics, it sets cookies to count visits and understand how the site is used. You can block or delete cookies in your browser settings.

9. Security

We use reasonable technical and organisational safeguards to protect your data, and we limit access to the people who need it. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.

10. Age

The race is open only to adults aged 18 and over. We do not knowingly collect data from children.

11. Changes

We may update this policy. The date at the top shows the latest version. If a change is significant, we will tell registered runners by email.