Privacy Notice

Who is responsible

ShaZam Racing is the data controller for the PhotoFinishPRO platform. We process personal data on behalf of race organizers so they can deliver photos and results to athletes.

What we collect

• Timer and photographer accounts: name, email address, organization, and login credentials managed by our authentication provider.
• Race results and registration data: athlete name, bib number, age, gender, city, state, division, event, finish time, chip time, and placement — uploaded by race timers or pushed from their timing systems.
• Race photos: photographs uploaded by timers or photographers, which may show athletes' faces and bib numbers.
• Contact information for notifications: athlete email addresses provided by timers or timing systems for the sole purpose of sending photo-ready notifications.
• Usage and support data: browser type, IP address, request logs, and support messages used to operate and secure the service.

Why we process it

• To create and manage race galleries and timer accounts.
• To match photos to bib numbers and display results and galleries.
• To notify athletes when their photos are available.
• To process photo purchases and subscription payments.
• To maintain security, prevent fraud, and provide customer support.

Legal basis

We process account, race, and payment data under the contract we have with timers and race organizers. We process athlete results and photos on the basis of legitimate interests in operating a race photography service and on the instructions of the race organizer. Athletes and timers may withdraw consent for marketing emails at any time.

Who we share data with

• Hosting and database providers: to store and serve race data and photos.
• Email delivery services: to send photo-ready notifications and receipts.
• Paddle.com: our online reseller and Merchant of Record, which processes payments, subscriptions, billing, tax, and refunds.
• Professional advisers: accountants or legal advisers when required.
• Authorities: when we are required by law to disclose data.

We do not sell personal data or use it for advertising.

How long we keep it

Race data and photos are kept for as long as the race organizer keeps the race gallery active. When a race is deleted, or when an athlete requests removal and the race organizer confirms it, we delete or anonymize the data within 30 days. Payment records are kept for accounting and tax purposes for the period required by law.

Cookies and browser storage

We use no advertising or third-party tracking cookies. Signed-in administrators keep a session token in their browser; visitors who search for photos do not need an account. The payment provider may place cookies required to complete checkout and fraud checks.

Your rights

You may ask us to access, correct, delete, or restrict processing of your personal data. To request removal of your photos or results from a race gallery, contact the race organizer or email us at info@shazamracing.com. We will respond within 30 days.

Security

Photos are stored privately and served through short-lived signed URLs. Access to edit races, photos, and results is limited to authorized timers and administrators. We use encryption in transit and at rest, access controls, and regular security reviews.

International transfers

Data may be stored and processed in the United States and other countries where our providers operate. We rely on standard contractual clauses and adequacy decisions where required by law.

Contact us

For privacy questions or data requests, contact info@shazamracing.com.