Privacy Policy

Last updated: 12 January 2026

1. Introduction

This Privacy Policy explains how Graft Digital Limited (trading as “Dirtlaps”) (“we”, “us”, “our”) collects, uses and protects your personal information when you use our website, mobile applications, and related services (together, the “Services”). Our Services provide an online platform for listing, promoting, managing and booking off-road motorcycling and motocross events (the “Platform”).

Our Services also include invite-only mobile applications used by authorised event organisers and staff to manage events and perform operational tasks on the day of an event (such as check-ins, scanning, and event administration).

Our Services may contain links to third-party websites, apps or services that are not owned or controlled by us. Those third parties have their own privacy policies, which we recommend you review. We are not responsible for their privacy practices.

We may update this Privacy Policy from time to time. The “Last updated” date above shows the most recent version. Your continued use of the Services after changes are posted will be treated as acceptance of those changes.

You have the right to make a complaint to your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) at www.ico.org.uk. We would appreciate the opportunity to deal with your concerns first, so please contact us using the details below.

Email: privacy@dirtlaps.com

2. Who We Are

For the purposes of UK data protection law, we act as a data controller when we decide how and why personal data is processed in connection with operating the Platform.

When you book an event, the Event Organiser will typically receive and use certain personal data to administer and run the event. In those circumstances, the Organiser acts as an independent data controller and is responsible for complying with applicable data protection laws for their own processing.

  • Website: www.dirtlaps.com
  • Company name: Graft Digital Limited (trading as Dirtlaps)
  • Contact email: privacy@dirtlaps.com

Registered company details for formal legal notice purposes are available on request.

3. The Data We Collect

3.1 What is personal data?

“Personal data” means any information that can identify you directly or indirectly.

3.2 Categories of personal data

  • Identity Data – name and username.
  • Contact Data – email address, phone number, and addresses where relevant.
  • Account & Profile Data – preferences, saved events, bookings, and feedback.
  • Booking & Event Data – event entries, ticket or QR identifiers, and rider details you provide.
  • Transaction & Payment Data – records of payments, refunds, disputes, and payment provider references. We do not store full card details.
  • Technical Data – IP address, device and platform information.
  • Usage Data – how you use the Platform.
  • Marketing & Communications Data – your preferences for receiving marketing.
  • User Content – content you upload or submit.
  • Cookies & Tracking Data – see our Cookie Policy for details.

3.3 Aggregated data

We may also use aggregated or anonymised data for analytics and improvements. This data does not identify you.

3.4 Tracking and advertising

We do not use your personal data for third-party advertising or cross-app tracking. Our mobile applications do not track users across other companies’ apps or websites for advertising or profiling purposes.

4. How We Collect Your Data

We collect data through direct interactions, automated technologies (such as cookies and logs), and from third parties including event organisers, payment providers, analytics and infrastructure services.

5. How We Use Your Personal Data

  • Provide and operate the Services
  • Communicate with you about bookings and updates
  • Improve, secure and monitor the Platform
  • Personalise your experience
  • Send marketing communications where permitted by law and/or where you opt in
  • Comply with legal and regulatory obligations

Where processing is based on consent, you may withdraw that consent at any time by contacting privacy@dirtlaps.com.

6. Cookies

We use cookies and similar technologies. See our Cookie Policy for details and controls.

7. International Transfers

Where personal data is transferred outside the UK/EEA, we use appropriate safeguards such as adequacy regulations or standard contractual clauses.

8. Data Security

We implement appropriate technical and organisational measures to protect your data. No system is completely secure.

9. Data Retention

We retain personal data only as long as necessary, generally up to seven (7) years for core account and transaction records, unless longer retention is required by law.

10. Sharing Your Information

We may share personal data with event organisers, service providers, payment providers, authorities where required by law, and in connection with business transfers. We do not sell your personal data.

11. Your Rights

Depending on your location, you may have rights of access, correction, deletion, restriction, portability, objection, and to withdraw consent. To exercise these rights, contact privacy@dirtlaps.com.

These rights apply equally to data processed through our website and our mobile applications, including staff and organiser apps.

12. Third-Party Links

Our Services may contain links to third-party sites we do not control. Please review their privacy policies.

App stores and device platforms

If you access our Services through a mobile application downloaded from the Apple App Store or another app marketplace, please note that the app store operator is not responsible for the processing of your personal data. Any data processing is governed solely by this Privacy Policy and our Services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page and, where appropriate, notified via email or in-app messages.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact: