How we handle personal information

We collect what we need to run your account and your ownership, and little else.

• Your account: your name, email address and password. The password is kept only as a one-way hash, so no one here can read it. You also confirm that you are 18 or over.
• If you sign in with Google, Google confirms your email address to us. If you use a passkey, only its public key is kept here.
• Identity verification: the documents you upload, such as a passport or national ID, proof of address and a declaration form.
• Payouts: the bank account details you give us for prize money, which we show back to you masked.
• Your ownership: what you buy and pay, credit you earn or spend, your shareholdings and payouts, and the documents we issue to you, such as share certificates and agreements.
• What you send us: messages through the contact form, support tickets and your replies.
• Security records: the IP address, browser and country of each device you sign in on, so you can see where you are signed in and we can tell you about a sign-in from a new country; the IP address of a sign-up made through a referral link, to stop referral abuse; the IP address a contact form message is sent from, which goes to our team with the message to help tell people from automated abuse; and server logs. We work out the country ourselves, from the DB-IP country database kept on our own servers, so your address is not sent to anyone to do it.
• Visits, if you allow analytics: the page you looked at and the site that sent you, with a code made from your address and browser that is scrambled afresh each day, so it cannot be tied to you or followed from one day to the next. We count these ourselves.
• Your choices: your notification and marketing email preferences, and your cookie choice.

Only for running the platform and your ownership in it.

• To run your account, sign you in securely and protect it from misuse.
• To sell you shares and memberships, take payment, record what you own and pay you your share of prize money.
• To verify your identity before larger payouts, and to meet anti-money-laundering obligations, which includes reviewing unusually large or frequent payments.
• To send the email your account needs: confirmations, receipts, security notices, and renewal windows for horses you hold.
• To send news and offers by email, only while you have not unsubscribed. Every one carries an unsubscribe link.
• To answer your messages and support requests.

Identity documents are kept in private storage. They are never published or served through the network that delivers our images, and they open only through a link that lasts two minutes, for you or for our team.

KYC verification is conducted in accordance with the requirements of the relevant racing authorities. Submitted documents are forwarded to those authorities for record keeping, for the issuance of official owner badges, and to register your membership of the syndicate.

We do not sell personal data. We share it only with the services that run the platform for us, with the racing authorities as described above, and where the law requires it.

• Amazon Web Services: hosting and storage, in Frankfurt, Germany.
• Stripe: card payments and refunds. Your card details go to Stripe directly, and we never see or keep them.
• Resend sends the platform’s email. Microsoft hosts our team’s mailbox, which receives what you write to us.
• Cloudflare Turnstile: the check that tells people from automated sign-ups on sign-in, registration and similar forms.
• Google: sign-in, if you choose to sign in with Google, and the map on our contact page, only if you choose to load it.
• Meta: the photographs on our Social page load from Instagram, so Meta sees your address when you open that page.
• Courts, regulators and law enforcement, where the law requires us to disclose information.

Some of these services are based outside the United Arab Emirates, so your data may be processed abroad.

For as long as it is needed, and no longer.

• Your account and ownership records, for as long as you have an account.
• If you ask us to close your account and you have never bought or been paid anything, it is deleted. If you have, your name and contact details are erased and the financial records stay without them, because the syndicate’s accounts must still add up.
• Documents you upload, and earlier versions of them, are kept for up to five years after they are replaced or deleted, in line with anti-money-laundering record keeping.
• Messages through the contact form, for two years, or 90 days for one filed as spam, after which they delete themselves. The copy emailed to our team stays in its mailbox.
• The notices Stripe sends us about a payment, which carry your name and email address, for 90 days, after which they delete themselves. What the payment bought stays in your ownership records.
• Server logs, for 90 days.
• Visit counts, for 400 days, after which they delete themselves.

Write to us at marketing@myracingsyndicate.com to use any of these. We confirm who you are before acting on a request, so that no one else can make it for you.

• Have a copy of the personal data we hold about you: download it yourself from Settings at any time, or ask us.
• Correct anything that is wrong. Much of it you can change yourself in your account settings.
• Ask us to close your account, as described above.
• Unsubscribe from marketing email at any time, from the link in any email or in your notification settings.
• Change your cookie choice at any time from Cookie Settings at the foot of every page.

The platform is for adults. You must confirm that you are 18 or over to register, and we do not knowingly hold data about anyone younger.

When this policy changes we publish the new version here with a new date. If a change affects how we use data you have already given us, we tell members by email before it takes effect.