1. Who this policy covers
Team Goatcher Racing is responsible for the team website and the inquiries and team content described here. This policy applies to visitors, prospective partners, riders and other people whose information is handled through this website, including residents of all 50 U.S. states and Washington, D.C.
Privacy laws differ by state and often apply only to organizations meeting revenue, data-volume or other thresholds. The state-rights descriptions below apply when the relevant law covers both you and our processing; they do not mean that every state has the same rights or that every law applies to this team. This policy does not cover independent sponsor, social-media or event websites.
2. Information we collect & its sources
- Contact inquiries: your name, email address and message, supplied directly by you.
- Sponsorship inquiries: company name, contact name, email, optional phone and website, sponsorship interests and any message you submit.
- Rider and racing content: names, race numbers, biographies, photographs, videos where supplied, social links, quotes, achievements, equipment information and race results provided by riders, families, team representatives, media materials or public race-result sources. Published material may identify junior riders.
- Authorized administrator information: login email, authentication credentials handled by our authentication provider, account identifiers and session information used to manage the site.
- Technical information: hosting, authentication, content-delivery and font providers may process IP addresses, browser/device details, request times, requested pages and diagnostic or security information when delivering and protecting their services.
We do not request payment-card information, government identification numbers, precise GPS location, medical records or biometric identifiers through the public forms. Avoid including passwords, financial details, health information or other sensitive information in messages.
3. How we use information
- Respond to contact, media, racing, community and sponsorship inquiries.
- Discuss potential partnerships and manage related communications.
- Publish and maintain rider profiles, team news, race results and partner information.
- Authenticate authorized administrators and operate, troubleshoot and secure the website.
- Address privacy requests, prevent misuse and meet applicable legal obligations.
A form submission is not a subscription to a marketing newsletter or consent to sell your information. The current website has no public shopping checkout, payment collection or newsletter subscription feature. We do not use the website to make automated decisions that produce legal or similarly significant effects about visitors.
5. Cookies, browser storage & opt-out signals
Authorized administrator login uses browser storage to maintain and refresh a session. Hosting and security services may use essential technologies to deliver the site and protect it. The current public-site code does not include advertising pixels or a nonessential analytics-cookie system. Provider-level logging is separate from browser cookies.
The cookie banner lets you select “Accept cookies” or “Essential only.” Both choices currently leave only essential storage in use; acceptance does not authorize new tracking or future processing. Your selection is saved in local storage on this browser until you change it or clear browser storage. Open “Cookie settings” in the footer to change your choice at any time. Optional technologies, if introduced, require updated disclosures and any legally required consent before activation.
You can delete or block cookies and local storage through your browser settings. Doing so may interrupt administrator sign-in or other essential functionality. You can also avoid submitting optional form fields or following external links.
Global Privacy Control (GPC) and other legally recognized universal opt-out mechanisms express choices about sale, targeted advertising or qualifying sharing. Those activities are not configured on the current site, so there is no such activity to opt you out of here. Where applicable law requires honoring a signal, any future covered processing must respect it. Traditional “Do Not Track” browser signals do not change the site's current processing; they are not the same as GPC.
6. Retention, security & processing locations
Retention depends on the type of information and why it is needed, rather than a single fixed period. Inquiry information is needed for responding and maintaining relevant communications; partner records may be needed during an ongoing relationship. Published rider and race information may be maintained as team history. Administrator records support authorized access, while technical logs and backups follow the relevant providers' retention arrangements.
When reviewing a deletion request, we consider ongoing communications, legal requirements, dispute resolution, security, public-interest records where legally permitted and backup limitations. Applicable law may require deletion sooner. This website does not currently use an automatic inquiry-deletion schedule.
Access controls and authentication help protect stored inquiries and site management. No internet transmission or storage system can be guaranteed completely secure. Service providers may process or store information in the United States or other countries where they operate; privacy protections may differ from those in your location.
7. Privacy rights across U.S. states
As of this policy's date, broad state consumer-privacy frameworks include California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia; Florida has a more narrowly scoped Digital Bill of Rights. Their thresholds, exemptions and rights differ. Nevada separately regulates certain online-operator sales of personal information. This policy also covers visitors in every other state and Washington, D.C., without suggesting that identical statutory rights exist everywhere.
Depending on your state, the applicable law and its coverage, you may have rights to:
- Confirm whether your personal information is processed and access it, including applicable categories, purposes, sources and recipients.
- Correct inaccurate personal information and request deletion, subject to lawful exceptions.
- Receive a portable copy of information where required and technically feasible.
- Opt out of sale, targeted advertising, qualifying sharing and certain profiling or automated decisions.
- Limit certain uses or disclosures of sensitive information, or require consent before specified sensitive-data processing.
- Obtain additional third-party disclosure information where state law provides it.
- Use an authorized agent, where permitted, and appeal a denied request where provided by law.
- Exercise covered rights without unlawful discrimination or retaliation.
Residents of states without an applicable comprehensive privacy law may still contact us with access, correction, removal or other privacy concerns. Other state laws may protect specific types of information or activities independently of a comprehensive privacy law. We do not interpret the absence of a broad state law as permission to disregard those protections.
8. Additional California disclosures
For California visitors, the collection categories described above include identifiers and contact details; commercial or partnership-related information you submit; internet/network activity processed by providers; professional information in team or partner materials; and photographic or other audiovisual content supplied for publication. Race history and biographical information may also be included in public profiles. A photograph is not used here to create a biometric identification template.
Sources, purposes, recipient categories and retention criteria are described in Sections 2–6. These categories describe the current website; they are not a verified retrospective inventory of every disclosure during the preceding 12 months. If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies, a covered request can seek the legally required 12-month information and a longer period where the law requires it.
Where CCPA/CPRA applies, California residents may request access to categories and specific pieces of personal information, correction, deletion and portability; opt out of sale or sharing; limit qualifying sensitive-information uses; and exercise rights without unlawful discrimination. The current site is not configured for sale or cross-context behavioral-advertising sharing and does not offer financial incentives in exchange for personal information.
California's “Shine the Light” law may provide disclosure rights concerning sharing with third parties for their own direct marketing. The current inquiry forms are not configured for that use. Submit any such request through the contact method below. California minors with legally qualifying registered-user content may also have statutory removal rights; the current site does not offer public account registration or visitor posting.
9. Children, junior riders & sensitive information
This is a general-audience racing website, not a service directed to children under 13. Public contact and sponsorship inquiries should be submitted by adults; a parent or guardian should contact us on behalf of a child. We do not seek to collect personal information directly from children under 13 through these forms.
Featuring junior riders is different from inviting children to submit information. Parents, guardians and riders can contact us about published names, images or biographies, corrections or removal. If you believe information was collected from a child under 13 without legally required parental consent, notify us so it can be investigated and handled, including deletion where required. Any activity covered by the Children's Online Privacy Protection Act (COPPA) requires the separate protections that law mandates; this notice is not a substitute for parental consent.
State laws may impose additional protections for teenagers, sensitive information and consumer health data. We do not request consumer health data or use health-related geofencing. Washington's My Health My Data Act and Nevada's consumer-health-data law can impose separate obligations if covered health-data processing occurs, including a distinct notice and consent where required. Do not send that information through these general-purpose forms.
10. Submit a privacy request or appeal
Use our Contact the Team page and begin your message with “Privacy request.” Specify what you want to access, correct, delete or opt out of, and your state of residence so the applicable rules can be considered. Use “Privacy appeal” if you are appealing a denial and refer to the original request. Parents or guardians should identify the rider or content involved without including unnecessary sensitive details.
We may need proportionate information to confirm your identity or authority before disclosing or changing private records. An authorized agent may need evidence of permission and, where legally allowed, verification from the individual. Do not submit a government ID or password through the form. Verification requirements must not be used to obstruct rights, and opt-out requests will not be subjected to identity verification where the applicable law prohibits it.
Response and appeal deadlines, permissible extensions, request-frequency limits and any lawful fees depend on the applicable law. These are legal deadlines where the relevant law applies, not a claim that all requests follow one timetable:
- California requests to know, delete or correct: acknowledgment within 10 business days and generally a response within 45 calendar days; a justified additional 45 days may be allowed with timely notice. Covered sale/sharing opt-outs and sensitive-use limits generally require action within 15 business days, not the ordinary access-request timetable.
- Many comprehensive state laws: generally 45 days to respond, with a justified additional 45 days where permitted and timely notice of the extension.
- Iowa: generally 90 days to respond, with a permitted additional 45 days and required notice.
- Nevada's separate online-operator law: covered verified sale opt-out requests generally have a 60-day response period, with an additional 30 days where permitted and notified.
- Appeals follow the applicable state's deadline, not an automatic extension of the original request. Connecticut and Iowa, for example, generally provide 60 days for an appeal decision. A denial must explain applicable further complaint options.
A shorter applicable deadline controls. Requests generally do not require a fee; only charges or refusals expressly permitted by applicable law may be imposed, with an explanation. A denial should explain its basis and any applicable appeal process. If a law requires additional request channels beyond this form, those requirements still apply.
You may complain to your state attorney general or the relevant privacy regulator, including the California Privacy Protection Agency for California matters. An appeal to the team does not remove your right to contact a regulator. Legal exceptions may limit deletion or disclosure—for example, protecting another person's information or retaining records required by law.
11. Changes & contact
Updates will be published on this page with a revised date. Material changes require additional notice or consent where applicable law requires it. Visiting this website or continuing to use it is not, by itself, consent to new processing that requires an affirmative choice.
For privacy questions, requests, appeals or concerns about published content, contact Team Goatcher Racing.
Official privacy resources: California privacy rights, Oregon privacy rights and FTC children's privacy guidance.