Privacy Policy

We collect only what we need to register you, take payment, order your gear, keep you safe on site and tell you what is happening at the Event.

Information you give us directly:

• Identity and contact details — first and last name, email address, telephone number, and for sponsors, company name and contact person.
• Registration details — team name, team role (captain, co-captain or member), payment preference, and team branding you choose to upload such as a team logo, tagline, website or social media links.
• Fulfilment details — t-shirt size, collected solely to order your event gear and locked after the gear-size freeze date.
• Waiver and safety records — your acknowledgement of the assumption-of-risk, release of liability, media release and arbitration agreement, together with the date and time you accepted it.
• Communications — the content of emails, form submissions and support messages you send us.

Information collected automatically: when you visit the Site, our hosting provider and content delivery network record standard server log data including IP address, browser type and version, device type, referring page, pages viewed and timestamps. We use strictly necessary cookies and similar local storage to keep you signed in and to carry your registration through the checkout flow.

Information from third parties: our payment processor confirms to us whether a payment succeeded, the amount, the last four digits and brand of the card, and the billing email. Our authentication provider supplies your email address and display name if you sign in with a third-party identity provider such as Google.

We never receive or store your full payment card number, CVC or bank credentials. Card data is submitted directly to Stripe, a PCI-DSS Level 1 certified processor, and never touches our servers.

• To create and administer your registration, team roster, sponsorship record and account.
• To process payments, issue receipts and prevent fraudulent or duplicate transactions.
• To send transactional messages — magic-link invitations, roster invitations, payment confirmations, waiver reminders and day-of-event logistics.
• To order and distribute t-shirts, rental gear and swag in the sizes you selected.
• To operate the Event safely, including check-in, safety orientation records and emergency response.
• To recognise sponsors, display team pages and produce event recap content.
• To measure participation and fundraising outcomes and report aggregate, non-identifying results to our nonprofit partner and sponsors.
• To comply with legal, tax, accounting, insurance and regulatory obligations, and to establish, exercise or defend legal claims.

We do not sell personal information, and we do not share personal information for cross-context behavioural advertising.

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract with you (registration, payment, gear fulfilment and Event delivery); our legitimate interests in operating, securing, promoting and improving the Event and the Site, provided those interests are not overridden by your rights; compliance with a legal obligation (tax, accounting, safety records); your consent, where we ask for it, which you may withdraw at any time without affecting processing already carried out; and protection of vital interests in a medical emergency at the Event.

We disclose personal information only in these circumstances:

• Service providers acting on our instructions — Stripe (payments), Base44 (application data, authentication and transactional email), GoHighLevel (contact and communications management), Railway and Cloudflare (hosting and content delivery). Each is bound by contract to process data only for the purposes we specify.
• The Venue — the name, team and waiver status of each participant, so the venue can admit you to the courts.
• Your team captain and co-captains — your name, email, fee-paid status, waiver status and gear sizes are visible on your team roster, because that is how a captain manages the team.
• Sponsors — aggregate and anonymised participation figures only. We do not give sponsors your contact details unless you separately and affirmatively opt in.
• Legal and safety disclosures — where required by law, subpoena or court order, or where we reasonably believe disclosure is necessary to protect the rights, property or safety of any person.
• Business transfers — in connection with a merger, acquisition, financing or sale of assets, subject to this Policy continuing to apply.

The Event is photographed and filmed. By registering for, entering or being present at the Event, you grant ConnectAble and the Venue an irrevocable, perpetual, worldwide, royalty-free, sublicensable and transferable right to capture, reproduce, edit, publish and otherwise use your likeness, voice and event footage in any medium now known or later developed, for promotional, editorial, fundraising and commercial purposes, without further notice, approval or compensation. This media release is also contained in the participant waiver and in our Terms and Conditions.

If you do not wish to appear in event media, notify staff at check-in and email info@connectable.work so we can make reasonable efforts to exclude you from published material. We cannot guarantee removal from crowd or wide-angle footage already captured.

The Site uses strictly necessary cookies and browser local storage for authentication sessions, security and checkout continuity. These cannot be switched off without breaking core functionality. We do not run third-party advertising cookies or cross-site tracking pixels on the Site. Any analytics we add in future will be documented here before it is deployed, and where consent is legally required we will ask for it first. You can block or delete cookies in your browser settings, but parts of the Site will stop working.

We keep registration, roster and sponsorship records for as long as needed to run the Event and then for a reasonable period afterwards for reporting, reconciliation and recognition purposes. Signed waivers, incident reports and payment records are retained for the longer of seven years or the applicable statute of limitations and records-retention period under Florida and federal law, because they are the evidence we would need to defend a claim. Marketing contacts are retained until you unsubscribe. When a retention period ends we delete the data or irreversibly anonymise it.

We use HTTPS/TLS in transit, encrypted storage at rest through our infrastructure providers, scoped credentials held in server-side environment variables, role-based access controls and single-use magic-link tokens for participant self-service. Magic-link URLs act as bearer credentials — treat yours like a password and do not forward it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information we will notify you and the relevant regulators where the law requires it.

If you are in the European Economic Area, the United Kingdom or Switzerland you have the right to request access to your personal information; to have inaccurate data corrected; to have data erased; to restrict or object to processing, including profiling; to receive your data in a portable, machine-readable format; to withdraw consent at any time; and to lodge a complaint with your national supervisory authority. We will respond to verified requests within one month, extendable by two further months for complex requests.

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the right to know what personal information we collect, use, disclose and retain; the right to delete personal information subject to statutory exceptions; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use of sensitive personal information; and the right not to be discriminated against for exercising any of these rights. We have not sold or shared personal information for cross-context behavioural advertising in the preceding twelve months, and we do not knowingly sell the personal information of anyone under sixteen. Residents of Colorado, Connecticut, Virginia, Utah, Texas and other states with comprehensive privacy statutes have substantially similar rights, and we honour them on the same basis.

To exercise any right, email info@connectable.work with the subject line "Privacy Request" and tell us which right you are exercising. We will verify your identity against the registration or sponsorship record you are asking about before we act. An authorised agent may submit a request on your behalf with written, signed permission that we can verify.

The Site is not directed to children under thirteen and we do not knowingly collect personal information from them. The minimum age to compete in the Event is fourteen. Registrations for participants under eighteen must be completed and the waiver accepted by a parent or natural guardian, who is responsible for the accuracy of the information submitted. If you believe a child under thirteen has given us personal information, contact us and we will delete it promptly.

We operate from the United States and our service providers store and process data in the United States. If you access the Site from outside the United States, you understand that your information will be transferred to, stored in and processed in the United States, whose data-protection laws may differ from those of your jurisdiction. Where transfers from the EEA or UK are involved, we rely on the European Commission's Standard Contractual Clauses and the UK Addendum, together with supplementary technical measures, as our transfer mechanism.

The Site links to sponsor and team websites and social media profiles that we do not control. Team captains choose their own team logo, tagline and call-to-action links. We are not responsible for the content, accuracy or privacy practices of any third-party destination, and this Policy does not apply to them. Review their policies before submitting information.

We may update this Policy to reflect changes in our practices or in the law. The effective date at the top of this page always shows the current version. Material changes will be highlighted on the Site, and where the law requires it we will seek your consent. Continued use of the Site after an update constitutes acceptance of the revised Policy.

Questions, requests or complaints about this Policy or our handling of personal information should be sent to ConnectAble LLC at info@connectable.work. Please include "Privacy" in the subject line so we can route it correctly.