Privacy policy

AllKart is a UK karting calendar and circuit directory, on the web and iOS. This policy explains what we collect and why, in plain English.

What we collect

Account data. If you create an account: your email address, an encrypted password, and an optional display name. Accounts are optional — browsing circuits and the calendar needs no account.

Your activity. Circuits and events you choose to follow, so we can show them in My Racing and (when you opt in) send race alerts.

The Paddock Brief. If you sign up for the weekly email: your email address, where on the site you signed up, and when you confirmed it. We only email you after you tap the confirmation link, and every issue has a one-click unsubscribe. We send it through Resend and never share the list.

Clicks to karting venues. When you follow a link from AllKart to a go-kart track, we count the click so we can tell the venue how many people we sent them. We store the venue, the page you came from and a short code made from your connection that changes every day. We never store your IP address, and the code can’t be traced back to you. The link tells the venue it came from AllKart (utm_source=allkart).

Site analytics. On the website we use PostHog (PostHog Inc., EU Cloud, hosted in Frankfurt) to count visits, pages viewed, and sign-ups, club claims and Pro subscriptions in aggregate. It runs cookieless: nothing is stored on your device to recognise you, IP addresses are anonymised, and no session recordings are made. Sign-up and subscription events carry your account’s internal id, never your email or name, and build no analytics profile. Club embeds on other websites and the iOS app don’t use it.

What we don’t collect. No advertising identifiers, no location tracking, no selling or sharing of personal data with advertisers, no analytics profiles tied to your identity.

Where it lives

Data is stored with Supabase in their London (UK/EU) region, protected by row-level security so your data is only readable by you. Race entries and timing never happen on AllKart — those always take place on the organiser’s own official systems, under their policies.

Payments. When you buy something from AllKart (Pro, a club or paddock package, a Sponsor Pack or a featured placement), the payment is handled by Stripe Payments Europe. Your card details go straight to Stripe and never touch AllKart. We keep your name, email, organisation, what you bought and whether it’s paid, so we can deliver it, send receipts and invoices, and keep the accounts HMRC requires (six years). AllKart is run by SVE Ventures Ltd, which is the data controller.

Deleting your data

Delete your account any time from My Racing → Delete account (app or web). This permanently removes your account, profile and follows. You can also email us and we’ll do it for you.

Your rights

Under UK GDPR you can request access, correction, deletion or export of your data. Contact us at hello@allkart.co.uk and we’ll respond within 30 days. If you’re unhappy with our handling of your data you can complain to the ICO (ico.org.uk).

Changes to this policy will be posted on this page with an updated date.