Privacy Policy

The Northern Ireland Ultra Running Association ("NIURA", "we", "us") is a community organisation based in Northern Ireland. This policy explains how we handle personal data, including data collected through niultrarunning.com.

NIURA will keep any personal information you share with us safe and will only process it in accordance with this policy, and not for any purpose you might not reasonably expect. Personal information is information that can be used to identify you. It can include your name, date of birth, email address, postal address, telephone number and credit/debit card details. The personal information we hold allows us to provide services, goods and information, and to better understand and improve how we engage and communicate with members who are interested in our services. Our aim is not to ask for, or store, any data which we do not need.

This policy sits alongside our Data Protection Policy. For data protection questions, contact us via the contact page.

• Race submissions: race details plus organiser name, email, and (optionally) phone number.
• Contact form: your name, email, and message.
• Membership: name, email, billing/shipping address and phone number (collected during Stripe checkout so we can post your welcome pack and headwear). Stripe also processes payment card details, which we never store or see.
• Admin accounts: email address and authentication data for committee members managing the site.

We do not use analytics or advertising cookies. We do not collect data from people simply browsing the public pages.

We will mainly use your personal information to:

• administer your membership;
• provide you with updated information from NIURA when relevant;
• contact you about an event you have agreed to contribute to, or signed up to participate in;
• contact you from time to time with details of offers or promotions on behalf of third-party organisations that are specifically for NIURA members;
• keep a record of your relationship with us;
• ensure we know how you prefer to be contacted;
• retain your information if you send feedback about our services or make a complaint.

NIURA will not sell your information or pass it on to a third party for their own marketing. The lawful basis for each type of data is:

• Race submissions — legitimate interest in maintaining an accurate, up-to-date race calendar for the Northern Irish ultra running community. We use the contact details only to follow up about the race listing.
• Contact enquiries — to respond to you. We rely on your consent (you chose to message us).
• Membership — to provide your member benefits, process payment, post your welcome pack and headwear, and communicate with you about membership matters. We rely on the contract we enter into when you join, and on your explicit consent given at checkout.
• Admin accounts — to operate the site.

We do not sell your data. We use the following processors to run the site:

• Lovable / Supabase — website hosting and database (data stored in the EU).
• Stripe — payment processing for memberships. Stripe collects and stores payment card details and billing information under its own privacy policy. We only store the membership record, shipping address and contact details needed to fulfil your benefits.
• Resend — transactional email delivery (e.g. contact form notifications, admin invites, membership communications).

Race organiser contact details (email, phone) and member shipping addresses are never shown publicly. They are visible only to NIURA admins logged into the site.

• Race submissions: kept while the race is active in our database, plus a reasonable archive period for historical reference.
• Contact form messages: kept for up to 24 months, then deleted.
• Membership records: kept for the duration of your active membership plus up to 7 years after cancellation for accounting, tax and legal purposes, then deleted or anonymised.
• Admin accounts: kept while the person is on the committee, then removed.

Under UK GDPR you have the right to: access the personal data we hold about you, ask us to correct it, ask us to delete it, object to processing, and complain to the Information Commissioner's Office (ico.org.uk).

Membership: you can update your payment method, cancel your membership or download invoices at any time through the Manage Membership button when signed in. You can also ask us to delete your membership data by contacting us via the contact page. We will keep only the minimum accounting records required by law.

To exercise any of these rights, get in touch via the contact page.

Data is held in secure, access-controlled databases with Row Level Security, so each user can only access their own data unless they hold an authorised admin role. Passwords are never stored by us — authentication is handled by industry-standard identity services. Payment card details are handled entirely by Stripe; we never see or store them. Only NIURA admins can view organiser contact details, member shipping addresses and submissions. We take reasonable steps to keep data safe, but no online service can guarantee absolute security.

Our website contains links to other websites. This privacy policy only applies to this website, so when you follow a link to another website you should read their own privacy policy.

We keep our privacy policy under regular review and will place any updates on this page. The "last updated" date at the top reflects the most recent change.

If you want to request further information on our GDPR policy, ask for a copy of the information we hold about you, or have any questions about this policy, email niultrarunning@gmail.com. We want to make sure your personal information is accurate and up to date — you may ask us to correct or remove information you think is inaccurate.