SHIFT Run Club

Privacy Policy

Last updated: 25/07/2026

SHIFT Run Club is built around community, and that includes treating your personal information with care.

This Privacy Policy explains what information we collect through the SHIFT website, member app and club activities, why we use it, who it may be shared with and the choices available to you.

1. Who is responsible for your information?

The organisation responsible for your personal information — the “data controller” — is: Taylor Seagrave trading as SHIFT Run Club. Email: shiftrunclub@hotmail.com

In this policy, we refer to the controller as “SHIFT”, “we”, “us” or “our”.

We operate in the United Kingdom and process personal information in accordance with applicable UK data-protection law, including the UK GDPR and Data Protection Act 2018.

2. Information we collect

Depending on how you use SHIFT, we may collect the following information.

Account and profile information

This may include your:

  • email address;
  • display name;
  • profile photograph;
  • biography;
  • approximate home area;
  • running experience;
  • usual pace range;
  • running goals;
  • account preferences; and
  • sign-in and account-security information.

Most profile information is optional, and you can choose how much you add.

Run and participation information

This may include:

  • RSVPs for official SHIFT runs and events;
  • member-organised runs you create, request or join;
  • attendance information;
  • waiting-list and cancellation information;
  • reactions, comments and other community interactions;
  • leaderboard or challenge participation;
  • reports, complaints and moderation information; and
  • information you provide when contacting us.

Strava information

When you choose to connect your Strava account, we may receive selected activity information such as:

  • activity name and type;
  • date;
  • distance;
  • moving or elapsed time; and
  • elevation.

We do not request your Strava password. Based on the current app design, we do not import GPS routes, heart-rate information or other detailed health metrics.

Connecting Strava is optional. You can disconnect it at any time through your settings.

Photographs and video

Photographs or videos may be captured at official SHIFT runs and events. These may include identifiable images of attendees.

Where practical, we will let runners know when organised photography is taking place and provide a way to tell us that they would prefer not to be photographed or featured prominently.

Technical and security information

We may collect limited technical information needed to operate and protect the service, including:

  • device and browser type;
  • approximate location derived from an IP address;
  • login and security records;
  • error reports;
  • app-performance information; and
  • privacy-friendly usage statistics.

We aim to use cookie-free or low-cookie analytics. Where a non-essential cookie or similar technology requires consent, we will ask before using it.

Information about other people

Please avoid sharing another person’s personal information unless you have their permission or there is a genuine safety reason to do so.

3. Where information comes from

Most information comes directly from you when you create an account, update your profile, RSVP, post content or contact us.

We may also receive information from:

  • Strava, where you choose to connect it;
  • another member who submits a report or safety concern;
  • run leaders and event volunteers;
  • ticketing or event partners; and
  • technical service providers that help us identify errors or security incidents.

4. Why we use your information

We use personal information for the following purposes.

Providing your account and club features

We use account, profile and participation information to:

  • create and manage your account;
  • display upcoming runs and events;
  • process RSVPs;
  • show attendance information according to your settings;
  • enable community and member-run features;
  • provide app notifications; and
  • respond to account requests.

Our usual lawful basis is that this processing is necessary to provide the service you have requested and fulfil our agreement with you.

Optional Strava features

Where you connect Strava, we use the information you choose to share to import activities, calculate personal or community statistics and provide optional feed or leaderboard features.

Our lawful basis is your consent. You may withdraw that consent at any time by disconnecting Strava or changing the relevant privacy settings.

Withdrawing consent does not make earlier processing unlawful.

Safety, moderation and service security

We use information to:

  • investigate reports and complaints;
  • enforce our terms and Community Guidelines;
  • prevent misuse and unauthorised access;
  • protect members, volunteers and the public;
  • diagnose technical problems; and
  • keep appropriate records of serious incidents.

Our lawful basis is our legitimate interest in operating a safe, secure and well-managed running community.

Where information is needed to deal with an immediate threat to someone’s health or safety, we may also use it to protect that person’s vital interests.

Communicating with you

We may send essential messages relating to your account, security, an RSVP or a material change to the service. These form part of providing the service.

We may also send optional news, event announcements or community updates where you have requested them or where the law otherwise permits. You can unsubscribe from optional messages at any time.

Photographs, video and promotion

We may use event photographs and video to document and promote SHIFT’s community activities.

Depending on the circumstances, we may rely on our legitimate interest in promoting the club or ask for your consent, particularly where an individual is the clear focus of promotional content.

You may contact us if you would prefer that a particular identifiable image is not used. We will consider each request fairly, although we may not always be able to remove material that has already been printed, shared by another person or published outside our control.

Legal and administrative purposes

We may process information where needed to:

  • comply with a legal obligation;
  • respond to lawful requests from courts, regulators or public authorities;
  • maintain insurance or incident records;
  • establish, exercise or defend legal claims; or
  • protect our legal rights.

5. Sensitive information

Some information about running, injuries, accessibility requirements or incidents could reveal information about your health.

Please only provide health information where it is genuinely needed. Where we intentionally collect or use information concerning health, we will identify an appropriate lawful basis and an additional condition under UK data-protection law.

We do not use health-related information for advertising or to make automated decisions about you.

6. Your privacy choices

Your imported activity information is private by default.

Depending on the available app features, you can choose whether to:

  • appear in community feeds or leaderboards;
  • display activity and profile statistics;
  • show your name on attendee lists;
  • receive optional notifications;
  • connect or disconnect Strava; and
  • keep or remove previously imported Strava activities.

You may be able to hide yourself from a public attendee list while still being included in the overall attendance total.

Please review your settings carefully before posting content or making information visible to other members.

7. Who we share information with

We do not sell your personal information and do not provide it to advertisers for behavioural advertising or profiling.

We may share limited information with trusted providers that help us operate the service, including:

  • Supabase, for database, authentication and backend services;
  • Vercel, for website and application hosting;
  • Strava, when you choose to connect or disconnect your account;
  • email, error-monitoring or analytics providers used by the service;
  • event-ticketing or payment providers where applicable; and
  • professional advisers, insurers, regulators or public authorities where reasonably necessary.

These providers may only use information in accordance with their responsibilities, our instructions and applicable data-protection law.

Certain information you choose to publish — such as a display name, profile photograph, comment, RSVP or leaderboard result — may be visible to other SHIFT members according to your privacy settings.

8. International data transfers

Some of our technology providers or their subcontractors may process information outside the United Kingdom.

Where this involves a restricted international transfer, we require an approved legal safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful transfer mechanism.

You can contact us for more information about the safeguards relevant to your information.

9. How long we keep information

We keep personal information only for as long as reasonably needed for the purposes explained in this policy.

Our current standard retention periods include:

  • Account information: while your account remains active, followed by deletion or anonymisation after account closure, subject to necessary legal or safety records.
  • Imported Strava activities: until you delete them, disconnect Strava and select deletion, or close your account.
  • Reports and moderation records: for as long as reasonably needed to protect members, manage repeat issues and resolve complaints.
  • Security and error logs: for a limited period appropriate to investigating technical or security issues.
  • Event photographs and promotional media: while they remain relevant to documenting or promoting SHIFT, subject to periodic review and reasonable removal requests.
  • Legal, safeguarding and insurance records: for any period required by law or reasonably needed to establish or defend legal claims.

When information is no longer required, we delete it securely or anonymise it so that it can no longer reasonably identify you.

10. Account deletion

You can request account deletion through Settings or by emailing us.

Deleting your account will remove or anonymise your personal profile and contributions, except where:

  • information must be retained for legal, insurance, safeguarding or security reasons;
  • retaining a moderation record is reasonably necessary to protect the community;
  • content forms part of a conversation involving other members; or
  • technical backup copies remain temporarily before being securely overwritten.

We will explain any significant exception that applies to your request.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • ask for a copy of your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your information;
  • ask us to restrict how information is used;
  • object to processing based on legitimate interests;
  • receive certain information in a portable format;
  • withdraw consent at any time; and
  • complain to the Information Commissioner’s Office.

These rights are not absolute and may not apply in every situation. We may need to confirm your identity before completing a request.

To exercise a right, email shiftrunclub@hotmail.com.

12. Automated decision-making

We do not currently use your information to make solely automated decisions that produce legal or similarly significant effects.

Leaderboards, rankings and community statistics may be calculated automatically, but they are recreational features and do not determine access to essential services.

13. Children’s information

SHIFT accounts are intended for people aged 18 or over.

We do not knowingly allow people under the age of 18 to create their own account. If we learn that an account has been created by someone under 18, we will close it and delete the associated information.

14. Keeping information secure

We use reasonable technical and organisational measures designed to protect personal information from loss, misuse, unauthorised access and disclosure.

No online service can guarantee absolute security. Please use a strong password, keep your account details private and contact us promptly if you believe your account has been compromised.

15. Third-party websites and services

The app may contain links to third-party websites or services. Their handling of personal information is governed by their own privacy policies rather than this one.

We encourage you to review those policies before providing personal information.

16. Changes to this policy

We may update this policy as the service, our providers or the law changes.

The latest version will be available through the website and app. Where a change materially affects how we use your information, we will provide reasonable notice through the app, by email or both.

17. Contact and complaints

Questions, requests or concerns can be sent to: Email: shiftrunclub@hotmail.com

We will try to resolve any concerns directly.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection. Information about making a complaint is available at ico.org.uk.

← Back to sign up