Privacy Policy

1. Definitions

• “Applicable Law” means the Information Technology Act, 2000 and rules made thereunder, the Digital Personal Data Protection Act, 2023 and rules made thereunder, and any other law, regulation, rule, notification or governmental order applicable to the collection, storage, use, processing, disclosure or transfer of information under this Policy, in each case as in force and to the extent applicable from time to time.
• “Data Principal” means the individual to whom the Personal Data relates, and includes “You” as used in this Policy.
• “Data Fiduciary” means EduEnroute Overseas Pvt Ltd, which determines the purpose and means of processing of Personal Data under this Policy.
• “Personal Data” means any data about an individual who is identifiable by or in relation to such data, including the categories described in Section 2.
• “Services” means the organisation of sports events, obstacle races, sports entertainment and allied activities offered by EduEnroute Overseas Pvt Ltd, and any ancillary products, merchandise, or content offered in connection therewith.
• “Event Media” means photographs, video, audio and other recordings of participants, spectators and attendees captured by or on behalf of EduEnroute Overseas Pvt Ltd at or in connection with an event.
• “Post” means any feedback, review, comment, photograph or other content that a User voluntarily uploads to a publicly viewable area of the Platform.

2. Information We Collect

We collect the following categories of information about You, directly from You, automatically through Your use of the Platform, and, in limited circumstances, from third parties as described in this Section:

(a) Personal Data provided by You

This includes Your complete name, mobile number, email address, date of birth, gender, age, residential or billing address; government-issued identification details such as PAN, passport, driving licence, voter identification, or a masked or last-four-digits Aadhaar reference (the Company does not collect or store full Aadhaar numbers except where expressly permitted by law); income, business or professional details where relevant to an event category; team name, emergency contact details, category of participation and prior race history; health, medical and lifestyle information voluntarily disclosed by You; and any other information You voluntarily provide through the Platform, a Waiver Form, customer support, surveys, contests or Our social media channels.

Provision of this information is voluntary; however, certain information is mandatory for specific Services (such as event registration, or the processing of a payment or insurance claim), and Your inability or unwillingness to provide such mandatory information may mean We cannot provide the corresponding Service to You. Wherever feasible, We will indicate which fields are mandatory and which are optional.

(b) Transactional information

Where You avail Services through the Platform, We collect and store information about Your transactions, including transaction status, order and registration history, and Your interactions and preferences on the Platform. Where You complete a transaction with Us offline, including a corporate or bulk booking or an on-ground purchase, We collect and store the corresponding transactional information directly, and such information is subject to the same protections described in this Policy. This information is stored on servers, log files and storage systems owned by Us.

(c) Information from third parties

We may receive information about You from event co-organisers, sponsors, payment gateways, ticketing partners, analytics providers, and background-verification providers, where such third parties are lawfully entitled to share the information with Us and represent to Us that they have obtained all consents necessary to do so.

(d) Non-Personal Information and cookies

We, and our authorised third-party partners, collect non-identifying and automated information — including but not limited to browser type, internet service provider, aggregate usage data, IP addresses, operating systems, session identification numbers, and cookie data — through cookies, web beacons, clear GIFs, pixel tags, and similar tracking technologies placed on the Platform. These technologies are deployed to ensure our Platform functions securely, to optimise performance, remember your preferences, analyse traffic trends, measure promotional efficacy, and maintain architectural security.

We categorise these tracking technologies as follows:

• Strictly Necessary Cookies: Mandatory for core operations, security protocols, system administration, and account authentication. These cannot be deactivated, and any attempt to block them may severely degrade or completely disrupt Platform functionality.
• Analytical/Performance Cookies: Allow us to recognise, track, and count visitors, analyse navigation patterns, and evaluate how users interact with the Platform. This includes our utilisation of Google Analytics (a service provided by Google Inc.) which tracks anonymous traffic data. You acknowledge that data generated by these cookies (including IP addresses) may be transmitted to and stored by Google on servers outside of India, and is processed subject to Google's independent privacy practices. EduEnroute Overseas Pvt Ltd disclaims all liability for data processing executed by Google or its sub-processors.
• Functionality Cookies: Implemented to recognise your device upon return, enabling us to automatically restore your customised preferences and settings.
• Commercial/Targeting Cookies: Placed by us or carefully selected third-party advertising networks to deliver targeted advertisements, track cross-platform user activity, and evaluate marketing campaign efficacy.

You may occasionally encounter cookies deployed by third-party companies, sponsors, or advertisers via hyperlinks or embedded content on the Platform. EduEnroute Overseas Pvt Ltd does not control, review, or supervise these third-party cookies. They are entirely exempt from this Policy, and you agree that EduEnroute Overseas Pvt Ltd bears no responsibility or legal liability for any data processing or privacy breaches occurring through your interaction with such third-party sites.

You retain the capability to accept, decline, or modify cookie configurations. While you may attempt to withdraw or modify your cookie tracking choices by adjusting your individual browser settings to decline tracking or by purging your browser cache, you acknowledge that doing so is at your own operational risk. If you block essential cookies, EduEnroute Overseas Pvt Ltd is completely absolved of any failure to provide functional Services or a secure user experience.

Separate from automated site data, you expressly agree that if you transmit personal correspondence to us (such as emails, letters, or support requests), or if other users or third parties forward correspondence to us regarding your specific activities, entries, or postings on the Platform, EduEnroute Overseas Pvt Ltd reserves the unconditional right to collect, compile, and store such information within our systems for security, verification, and legal defence purposes.

3. How We Use Your Information

We use the information described in Section 2 for the following purposes (collectively, the “Purposes”):

• to create and verify Your account, identity and access privileges;
• to register You for, and enable Your participation in, Our events and Services, and to improve those Services;
• for internal business purposes, including event operations, logistics, IT support and data analysis;
• to resolve disputes, manage Your requests and complaints, and diagnose and troubleshoot technical problems;
• to promote a safe environment at Our events and on the Platform, and to protect the security and integrity of the Platform, the Services and participants, spectators and volunteers;
• to design and improve Our Services and customer-relationship processes;
• to collect payment from You for the Services;
• to inform You about Our events, offers and updates;
• to customise Your experience on the Platform;
• to detect, prevent and investigate fraud and other unlawful or prohibited activity in connection with the Platform or an event;
• to enforce Our Terms and this Policy;
• to process and fulfil Your requests, and respond to Your comments and queries;
• to audit, monitor and enhance Our internal processes;
• to contact You through email, SMS, WhatsApp, telephone or other channels in relation to the Services;
• to identify and respond to security incidents and threats, and to support audits or investigations by Us or by regulatory authorities in India or abroad;
• to communicate important notices or changes to the Services, the Platform, this Policy or the Terms;
• to comply with legal, regulatory and reporting requirements applicable to Us;
• to perform Our obligations, and enforce Our rights, under any contract between You and Us; and
• for any other purpose that is reasonably related to, and consistent with, the specific purposes listed above, or for which We have separately obtained Your consent at the time of collection.

Where We conduct optional surveys, We use Your responses to tailor Your experience and to send You personalised offers and communications through channels such as email, WhatsApp, SMS or push notification. You may opt out of promotional communications; You cannot opt out of administrative, transactional or safety-related communications necessary for Us to provide the Services. We may monitor or record calls or chats with Our customer support team for training, quality, legal compliance, or to establish or defend a legal claim. We will not share Your Personal Data with another User of the Platform without Your express consent, other than as reasonably necessary to operate a team-based or group event registration You have opted into.

4. Health and Medical Information (Event Participation)

Where You register for or participate in an EduEnroute Overseas Pvt Ltd event, We, directly or through independent on-ground medical personnel engaged by Us, may collect health information disclosed by You in a Form, registration form, or medical declaration, or generated at the venue during or after the event, including by paramedical or ambulance personnel responding to an incident (“Health Information”). We use Health Information solely to: (a) assess Your fitness or eligibility to participate; (b) enable on-ground medical, paramedic and safety personnel to respond appropriately to an injury or medical emergency; (c) process insurance or liability claims arising from the event; and (d) comply with event-safety and other applicable regulatory requirements.

Health Information is shared strictly on a need-to-know basis, and only with Our on-ground medical and safety team; empanelled event insurers, solely for claims processing; emergency responders, hospitals and ambulance services, where necessary to respond to a medical emergency; and, where legally required, regulatory or law-enforcement authorities. Health Information is never used for marketing, profiling or any commercial purpose, and is never sold or licensed to any third party. We retain Health Information only for as long as necessary for the purposes above and for the applicable limitation period for injury-related or insurance claims under Applicable Law.

By executing a Waiver Form and disclosing Health Information, You provide the explicit consent required under Applicable Law for the processing of this category of information, on the terms set out in this Section and the Waiver Form.

5. Event Photography, Videography and Likeness

At Our events, We and Our photography, videography, broadcast and media partners may capture Event Media of participants, spectators and attendees, including through fixed cameras, drone footage, and, where deployed for a particular event, bib-scanning used solely to help participants locate their own event photographs and to verify race results and timing.

By registering for or attending an event, You grant EduEnroute Overseas Pvt Ltd and its licensees, sponsors and media partners a worldwide, perpetual, irrevocable, royalty-free, non-exclusive licence to use, reproduce, publish, broadcast, adapt and distribute Event Media featuring You for event highlights, archival records, results and timing verification, and for Our promotional, marketing and sponsorship activities, including on social media, television and sponsor content, subject to the Waiver Form and Terms applicable to the event.

6. How We Share Your Information

We may disclose Your information, including Personal Data, to the following categories of recipients, for the Purposes described in this Policy:

• Our affiliates, group companies, personnel, agents and professional advisors, for the Purposes and for accounting, tax, audit and administrative purposes;
• service providers and data processors who process information on Our behalf, including IT and hosting providers, analytics providers, payment gateways, ticketing platforms, logistics partners, timing and results providers, AI-based photo-matching and facial-recognition service providers, and event-management contractors, each of whom is engaged under a written agreement that requires confidentiality and data-protection obligations at least equivalent to those undertaken by Us under this Policy, including appropriate technical and organisational security measures;
• co-organising, cooperation or sponsorship partners in connection with a jointly organised event or promotion, who may separately process Your information under their own privacy policy, which We recommend You to review;
• courts, tribunals, regulators, the Data Protection Board of India, law-enforcement or other government authorities, where required by Applicable Law, a court order, or a valid governmental request;
• any party as reasonably necessary to protect the rights, property, safety or interests of EduEnroute Overseas Pvt Ltd, Our personnel, participants, sponsors or the public, or to investigate suspected fraud, safety incidents or unlawful activity; and
• a successor entity in connection with a merger, acquisition, sale of assets, or restructuring of EduEnroute Overseas Pvt Ltd's business, provided such entity remains bound by the terms of this Policy in respect of Personal Data already collected; We will notify You of any such change through the Platform or other reasonable means.

We do not sell Your Personal Data to any third party for monetary consideration. We may share aggregated or anonymised information, which does not identify You, with third parties at Our discretion, including for research, analytics or promotional purposes.

7. Cross-Border Transfer of Personal Data

Your Personal Data may be stored, hosted or processed on servers located outside India, including by Our cloud infrastructure and IT service providers. We will only transfer Personal Data outside India in accordance with Applicable Law, and will not transfer Personal Data to any country or territory restricted by the Central Government of India from time to time under Section 16 of the Digital Personal Data Protection Act, 2023. Where We transfer Personal Data outside India, We will require the recipient to be contractually bound to apply protections substantially equivalent to those required of Us under this Policy and Applicable Law. To the extent feasible, We endeavour to store Personal Data and health-related data within India.

8. Data Security

We maintain reasonable security safeguards and procedures, including technical and organisational measures to protect Your privacy and Personal Information from loss, misuse, unauthorised access, disclosure, destruction, and alteration, in compliance with applicable laws.

You are responsible for maintaining the confidentiality of Your Account credentials and for all activity that occurs under Your Account. You agree to notify Us immediately of any unauthorised use of Your Account or any other suspected breach of security, and to log out of Your Account at the end of each session. We are not liable for loss or damage arising from Your failure to keep Your login credentials, password or one-time passwords confidential; please never share these with anyone, including anyone claiming to represent EduEnroute Overseas Pvt Ltd.

Payment information transmitted through the Platform is protected using industry-standard encryption. While We take reasonable steps to secure Your information, no method of transmission or storage is completely secure, and We cannot guarantee absolute security against a sufficiently determined unauthorised third party. Subject always to Our statutory obligations, We are not liable for unauthorised access, disclosure or loss of Your information that results from causes beyond Our reasonable control, including a security breach on a third-party website or platform, or a Force Majeure Event.

A “Force Majeure Event” means any event beyond Our reasonable control, including but not limited to acts of God, fire, explosion, war, civil unrest, strikes, epidemic or pandemic, governmental action or restriction, or failure of a third-party hosting, telecommunications or internet service provider.

9. Personal Data Breach Notification

If We become aware of a personal data breach that affects Your Personal Data, We will, in accordance with Applicable Law, notify the Data Protection Board of India and take reasonable steps to notify affected Data Principals without undue delay.

10. Retention of Personal Data

We retain Personal Data only for as long as necessary to fulfil the Purposes for which it was collected, including to meet legal, accounting, insurance, safety or reporting requirements, or as otherwise required or permitted under Applicable Law. As a general guide: account and registration data is retained for the duration of Your relationship with the Platform and for a reasonable period thereafter to address post-event queries and claims; transactional and payment data is retained in accordance with applicable financial record-keeping requirements; Health Information is retained as described in Section 4; biometric and facial-recognition data generated for event photo-matching or timing purposes is retained by Us and by any third-party service provider engaged for this purpose, save where retention for a longer period is necessary to resolve a dispute or claim; and Event Media is retained for archival, results-verification and promotional purposes for as long as it continues to serve those purposes, consistent with the licence described in Section 5.

Where You request erasure of Your information, We will honour that request, save that We may retain certain information where permitted or required by Applicable Law including to prevent fraud or abuse, to exercise or defend a legal claim, or to comply with a legal or regulatory obligation.

11. Third-Party Links and Embedded Content

The Platform may contain links to, or embed content from, third-party websites or platforms, including payment gateways, event-registration partners, sponsor microsites, and social-media plug-ins (“Third-Party Sites”). This Policy does not apply to, and We accept no responsibility for, the privacy or data-security practices of any Third-Party Site, which are governed solely by that Third-Party Site's own privacy policy. We recommend You to review the privacy policy of any Third-Party Site before providing information to it.

12. User-Generated Content and Public Posts

Any Post that You voluntarily submit to a publicly viewable area of the Platform may be viewed by other Users and is not governed by the confidentiality obligations set out in this Policy. You should not include any Personal Data in a Post that You do not wish to be publicly available. We may remove, edit or disable access to any Post at Our discretion in accordance with the Terms.

13. Your Rights as a Data Principal

Subject to Applicable Law, You have the right to: (a) obtain confirmation as to whether We process Your Personal Data, and a summary of the Personal Data processed and the processing activities undertaken; (b) request correction, completion or updating of inaccurate or incomplete Personal Data; (c) request erasure of Your Personal Data where it is no longer necessary for the Purposes for which it was collected; (d) nominate another individual to exercise Your rights in the event of Your death or incapacity; and (e) access a readily available means of grievance redressal in respect of any act or omission by Us regarding Your Personal Data.

You may exercise these rights by writing to Our Grievance Officer at the contact details set out in Section 15. We may require You to verify Your identity before acting on a request. We will respond to a valid request within the period prescribed by Applicable Law.

14. Withdrawal of Consent

Where We process Your Personal Data on the basis of Your consent, You may withdraw that consent at any time by writing to Us at info@eduenrouteoverseas.com. Withdrawal of consent will be given effect within a reasonable period and will not affect the lawfulness of processing carried out before the withdrawal.

You acknowledge that where the withdrawn consent relates to Personal Data that is necessary for Us to provide a Service to You, We may be unable to continue providing that Service. Withdrawal of consent does not affect processing that We are required or permitted to carry out under Applicable Law, including for the establishment, exercise or defence of a legal claim.

15. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the Digital Personal Data Protection Act, 2023, the contact details of Our Grievance Officer are set out below. You may contact the Grievance Officer with any question, concern, complaint or request relating to this Policy or Your Personal Data.

The Grievance Officer will acknowledge receipt of Your grievance within 48 (forty-eight) hours and endeavour to redress it within 30 (thirty) days of receipt. Where You are not satisfied with the response, You may escalate the matter to the Data Protection Board of India in accordance with Applicable Law.

16. Limitation of Liability and Indemnity

Our aggregate liability arising out of or in connection with this Policy, whether in contract, tort or otherwise, is limited to the fees, if any, actually paid by You for the Services in connection with which the claim arises. In no event will We be liable for indirect, incidental, consequential, special or punitive damages, including loss of profits, data or goodwill, arising out of or in connection with this Policy or Our processing of Your Personal Data, even if We have been advised of the possibility of such damages.

You agree to indemnify, defend and hold harmless EduEnroute Overseas Pvt Ltd, its officers, directors, employees and agents from and against claims, losses, liabilities, damages, costs and expenses (including legal fees) arising out of or in connection with: (a) Your breach of this Policy; (b) Your provision of inaccurate, incomplete or fraudulent information to Us; (c) Your violation of Applicable Law; or (d) Your infringement of a third party's rights, including in connection with a Post or Event Media featuring a third party that You submit to Us.

17. Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Gurugram, Haryana, without prejudice to any statutory remedy available to You before the Data Protection Board of India under Applicable Law.

18. Personal Data of Minors and Dependants

We do not knowingly collect Personal Data directly from a child under the age of 18 years, or from a person with a disability who has a lawful guardian, otherwise than through their parent or lawful guardian. Where a minor or dependant participates in Our Services, the parent or lawful guardian must provide the required Personal Data, accept this Policy, and execute any applicable Waiver Form on the minor's or dependant's behalf, and We will treat that parent or guardian as the contracting party for all purposes.

We will not undertake tracking, behavioural monitoring, or targeted advertising directed at a child. Where We become aware that We have collected Personal Data from a child without verifiable parental or guardian consent, We will take reasonable steps to delete such Personal Data. If You believe We hold Personal Data relating to a child collected without such consent, please contact Our Grievance Officer at the details in Section 15.