Privacy
Working draft for review by a data protection adviser before public launch. Last updated 28 October 2026.
Who we are
Kinmora is the data controller for the personal data on this platform. Contact: hello@kinmora.com. Before we open in France and Italy we will appoint an EU representative and name them here.
What we keep, why, and for how long
| Data | Why | Lawful basis | Kept |
|---|---|---|---|
| Email, handle, name, city, language | To run your account and sign you in | Contract | Until you delete your account, or 3 years without signing in |
| Year of birth | To apply age limits and keep under-18s private | Legal obligation and legitimate interests (safeguarding) | As above |
| Registrations, tickets, check-ins | Your record of where you showed up; organisers run their door | Contract | As above; anonymised after deletion |
| Scores, results, rankings | Your competition record and fair leaderboards | Contract; leaderboards on legitimate interests (you can opt out) | As above; anonymised after deletion |
| Integrity checks on unusual results | Keeping competition fair | Legitimate interests | With the result; reviewed by a person |
| Child profiles (first name, initial, year of birth) | So a parent or guardian can register, check in and follow their child | Contract with the parent and legitimate interests, with the parent’s confirmation | Until the parent removes them |
| Registration answers, emergency contact and signed waivers | The host’s records and any later claim | Legitimate interests (the host’s and ours) and legal claims | 4 years after the event; for children, until they turn 22 |
| Host confirmations and insurer | Showing what each host confirmed before going live | Legitimate interests and legal claims | As long as the event records |
| Marketing emails | News about sessions and benefits near you | Consent | Until you untick it |
| Sign-in codes | One-time sign-in | Contract | 24 hours |
| Security log of key actions | Investigating misuse and fixing errors | Legitimate interests | 2 years |
We use only the cookies needed to run the site (staying signed in, protecting forms, remembering your city and language). No advertising or analytics cookies, and no third-party trackers. Fonts are served from our own server.
Who can see what
You choose who sees your record: anyone, people signed in, or only you. Under-16s are always private and nobody under 18 can be public. Leaderboards show your name only to people allowed to see your record; otherwise you appear as a private rider. You can leave every leaderboard from your profile.
Children registered by a parent never sign in, are never shown to anyone but their parent or guardian and the host of a session they're registered for, never appear on leaderboards, and never receive marketing. Their results show as "Young rider" to everyone else.
Organisers see the names of people registered for their sessions, and the answers, emergency contacts and signed waivers for their own events. Judges see the competitors they score. Partners who offer benefits see totals only, never who you are. We never sell personal data.
Decisions about you
Rankings are calculated automatically from confirmed results. Unusual results are flagged automatically but always decided by a person, and anyone who competed can challenge provisional results for 48 hours.
Where your data is
Our servers are in the UK. Our hosting provider and email provider process data for us under contract. If you live in the EU, your data is transferred to the UK under the European Commission's adequacy decision for the UK.
Your rights
You can download everything we hold about you, correct it, or delete your account from your profile at any time. When you delete your account we remove your name, email and year of birth; your past results stay as an anonymous entry so other people's rankings remain accurate. You can also ask us to restrict or stop using your data, or object to how we use it, by emailing hello@kinmora.com. We reply within one month.
You can complain to the UK Information Commissioner's Office (ico.org.uk), France's CNIL (cnil.fr) or Italy's Garante (garanteprivacy.it).