Data handling
Privacy, with
visible controls.
What MRI collects, where it comes from, why it is used, who receives it and how to exercise your rights.
Effective 16 August 2026 · Version 2026-08-16
Motor Racing Industry (MRI) operates motorracingindustry.com. Email directory@motorracingindustry.com for privacy questions, access, correction, objection, restriction, portability or deletion requests.
Who this notice covers
This notice covers visitors, account holders, business representatives, candidates, employers, freelancers, sellers, buyers, reviewers and people whose professional or business information appears in the directory. It applies alongside the Terms of Use and the Cookie Policy.
Information you provide
We collect information entered into sign-in, profile, claim, correction, review, messaging, job, freelance, talent, seller, product, billing, support and contact workflows. This can include name, verified email, company, role, profile content, messages, evidence, preferences, public contact details and transaction references. Do not submit sensitive personal information unless a specific workflow genuinely requires it.
Account and sign-in data
Google, email-link, ChatGPT or Motorsport Staff sign-in may provide a stable account identifier, verified email and profile name. MRI never receives your Google, email or social-network password. A secure session cookie keeps you signed in. We store the policy versions you accepted, the date, acceptance method and your optional privacy choices so acceptance and preferences are auditable.
Public and imported directory data
Business, team, circuit, job and product records may be supplied by an authorised representative or collected from official company websites, public registries, official careers pages, seller catalogues and other identified public sources. We record source and review information where available. Imported data is used to build and maintain a relevant professional index, subject to accuracy checks, correction, objection and removal controls.
Purposes and lawful grounds
| Purpose | Typical information | Ground |
|---|---|---|
| Provide accounts and requested tools | Identity, session, settings, records and messages | Contract or steps you request |
| Maintain the professional directory | Public business and professional information, sources and corrections | Legitimate interests, public information and consent where required |
| Claims, moderation, safety and fraud prevention | Identity, evidence, activity and audit records | Legitimate interests and legal obligations |
| Featured billing | Contact, subscription and Stripe references | Contract and legal obligations |
| Optional Google Analytics | Anonymous usage events and device information | Consent |
| Identified beta journey analytics | Member, page route, title, active time and broad filter categories | Your separate opt-in choice |
| Product news and marketing email | Email and message preferences | Your separate opt-in or permitted business-to-business rules |
Signed-in beta journey analytics
If you opt in, MRI records the page route, page title, entry and exit sequence, active time, broad country, device and screen class, operating system, browser family, referring website and broad non-free-form filter categories for signed-in sessions. Administrators can review the route sequence and timing to diagnose faults and improve workflows. MRI does not capture precise location, screen pixels, keystrokes, clicks within a page, form values, passwords, messages, free-text searches or private page contents. Records are kept for up to 90 days. You can change this choice at any time through Privacy choices.
Optional Google Analytics
Google Analytics 4 loads only after you accept optional analytics. Advertising signals and personalisation are disabled, and MRI does not intentionally send names, emails, messages, search terms or private account content. Reject or withdraw through Cookie settings.
Talent and recruitment data
MRI publishes only current registered-candidate profiles that the candidate has chosen to share through Motorsport Staff. Legacy profiles are hidden. Direct contact and generated résumé PDFs are available only to an eligible Featured business when the candidate has enabled the relevant access. MRI logs the business account, candidate identifier, access type and time for security and accountability. Original uploaded files, home addresses, phone numbers and unrelated private account fields are not exposed through MRI.
Marketplace and payment data
External physical-product purchases take place with the seller and are governed by the seller's privacy and transaction terms. For MRI Featured billing and enabled Drawings & Scans checkout, Stripe processes card and connected-seller verification details; MRI receives customer, connected-account, session, payment, refund, dispute, payout and status references but not full card numbers. Source files are stored privately, scanned or quarantined before moderation and released only to the authenticated buyer after verified payment. Public checkout stays locked unless the separate legal, payment and operational release controls are enabled.
Social accounts and publishing
When you connect a supported social account, the provider supplies an authorisation token and selected account or Page details. MRI stores tokens securely and publishes only when instructed. Disconnect through the connected-accounts page or use the deletion instructions. Content already posted to an external network remains subject to that network's controls.
Who receives information
Information is shared only as needed with infrastructure, hosting, database, authentication, email, analytics, mapping and payment providers; with a seller or employer when you deliberately interact with them; with professional advisers and authorities where legally required; or during a properly managed business transfer. Service providers are restricted to processing for the contracted service.
International processing
MRI serves a global industry and uses providers that may process information outside your country. Where required, we rely on adequacy decisions, contractual safeguards or another lawful transfer mechanism. You may ask for more information about safeguards relevant to your data.
Retention
| Record | Typical period |
|---|---|
| Identified beta journeys | Up to 90 days |
| Account and current preferences | While the account is active, then normally up to 90 days unless a request or obligation requires otherwise |
| Policy acceptance and security audit records | Up to 7 years after the relevant relationship or dispute |
| Candidate contact and résumé access logs | Up to 24 months |
| Claims, moderation and correction evidence | While the record is active and normally up to 3 years after closure |
| Billing and tax records | As required by applicable accounting and tax law, commonly up to 7 years |
| Enquiries and support | Normally up to 24 months after resolution |
We may keep a limited record longer where reasonably necessary for legal claims, fraud prevention, safety, payment disputes or a statutory obligation.
Your rights and choices
Depending on where you live, you may have rights to know, access, correct, delete, restrict or object to processing, receive portable data and withdraw consent. Withdrawal does not invalidate earlier lawful processing. You may also complain to the Office of the Australian Information Commissioner or the relevant data-protection authority where you live. We will verify identity before disclosing or deleting protected information.
Young people
Some motorsport participants are under 18. A parent, guardian, team or authorised representative must provide any consent required by applicable law before submitting a young person's personal information. MRI may restrict a feature, request evidence of authority or remove information where appropriate safeguards are not in place.
Security and incidents
We use access controls, secure cookies, encryption in transit, provider-hosted payment collection, audit logs and least-privilege administrative access. No service is risk-free. We investigate suspected incidents and notify affected people or regulators when legally required.
Automated decisions and changes
Search, recommendation and moderation tools may prioritise or flag records, but MRI does not make solely automated decisions that produce legal or similarly significant effects. Material notice changes receive a new version date and may require fresh acknowledgement.