Privacy Policy

Racexotics (“we”, “us”) is based in Washington State. This policy explains what we collect on racexotics.com, why, and the choices you have. It is written to be read, not skimmed past.

What we collect

• Rally registration: name, email, mobile phone, Instagram handle, vehicle year/make/model/color, passenger count, notes you add, and an emergency contact name and phone.
• Shop orders: name, email, phone (optional), shipping address, and what you ordered.
• Contact and newsletter forms: the details you type in.
• Technical: IP address, browser type, and a session cookie needed for the cart and forms to work. We do not run third-party advertising trackers.

Payments

Card payments are processed by Square on Square-hosted pages. We never see or store your full card number. We keep the Square order and payment identifiers, the amount, the card brand, and the last four digits so we can match payments to registrations and orders and handle refunds.

Verification services

To keep rally rosters real and reachable we verify email addresses with Kickbox and confirm phone numbers are mobile lines with Twilio Lookup. Only the address or number you entered is sent; results are kept for up to 24 hours so we don’t re-check on every keystroke.

How we use it

• Run rallies: confirmations, route updates, day-of logistics, and emergency contact use during an event.
• Fulfill merch orders and answer support questions.
• Publish the public rally roster — first name, Instagram handle, and car only. You can opt out of the roster at registration or by contacting us.
• Send occasional news if you opt in. Every email has an unsubscribe link.

We do not sell your personal information, and we do not share it with third parties except the service providers named here (Square, Kickbox, Twilio, our email provider, and our hosting provider) who process it on our behalf.

Embedded content

The site shows videos from our YouTube channel and posts from our Instagram account. Embedded YouTube players are loaded in privacy-enhanced mode; when you press play, Google’s privacy policy applies. Instagram images are served from our own cache and link to instagram.com.

Retention

Rally and order records are kept for as long as needed for tax, accounting, and event-safety purposes, then deleted or anonymized. Verification results are kept for 24 hours. Server logs roll over on a short schedule.

Your choices

You can ask us to show what we hold about you, correct it, or delete it (subject to records we must keep by law). Washington residents also have rights under the My Health My Data Act; we do not collect health data, and emergency-contact details are used only for event safety. To exercise any of these, contact us.

Children

The site and rallies are for adults. We do not knowingly collect information from anyone under 18.

Changes

If this policy changes in a way that matters, we’ll update the date above and note it on the site.