Legal

PRIVACY POLICY

Last updated 2026.

1. What We Collect

When you register an account: full name, email address, and a password (stored as a one-way hash — we never see or store your actual password). Optionally: phone number, hometown, Instagram handle, a short bio, and a profile photo.

If you enter an event as a competitor: your date of birth, address, AASA competition licence number/expiry, and an emergency contact name and phone number — this is required for AASA event-entry paperwork and insurance, not just to have an account.

When you add a car: its nickname, make, model, year, class, engine, power, drivetrain, colour, number plate, induction type, fuel type, a description, and an optional photo.

When you buy a ticket or pay for membership: your name and email, and payment details — card numbers and the like are handled entirely by Stripe, our payment processor; we never see or store your card details ourselves. We keep a record of the payment amount, date, and Stripe's reference IDs for it.

When you use the contact form: your name, email, and message.

We also automatically log standard web server information (IP address, browser type, pages visited) for security and troubleshooting.

2. How We Use It

To run your member account, your garage, and your event entries.
To process membership and ticket payments (via Stripe).
To show your results and placements on public event pages (this is a core, visible part of how the site works — see "Public Information" below).
To contact you about your account, entries, tickets, or in response to a message you send us.
To check tickets at the gate via the QR code check-in system.

3. Public Information

Being a motorsport results/leaderboard site, some of what you submit is shown publicly by design: your name, hometown, Instagram handle, bio and avatar on your driver profile; your cars on the Member Rides gallery; and your event entries, placements and scores on event and results pages. Don't put anything in these fields you don't want visible to the public.

Your email, phone number, and password are never shown publicly.

4. Who We Share It With

Stripe (payment processing) — see Stripe's privacy policy. We don't sell or rent your information to anyone, and we don't share it with other third parties except where required by law.

5. How Long We Keep It

For as long as your account is active. If a competitor membership lapses and isn't renewed within 30 days, your personal details (name, email, phone, hometown, Instagram, bio, photo, date of birth, address, AASA licence details, and emergency contact) are permanently removed from the account — see our Terms for the full lapse timeline. We keep your past event entries and scores on record after that so competition results and leaderboards stay accurate, but they're no longer linked to your real identity.

6. Your Rights

You can view and update most of your information any time via your portal. You can ask us to delete your account and personal information early by emailing us — we'll action it in line with the retention note above (historical results are kept, anonymised).

7. Cookies & Storage

We use a single session cookie to keep you logged in, and a CSRF-protection cookie for security — no third-party advertising or tracking cookies.

8. Contact

Privacy questions or requests: contact@offthestreetaustralia.com. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC).