Privacy policy

Northtrack Studios Ltd operates Roost, the UK dirt-track discovery and booking service. We are the data controller for the personal data described in this policy. Northtrack Studios Ltd is a company registered in England & Wales, registered office [registered office address — to be added].

Privacy questions and data requests: admin@roost.mx. We reply within one calendar month.

• Account details — name, email, mobile number, home region, riding preferences, and a profile photo if you add one.
• Bookings & payments — sessions booked, rider counts and amounts paid. Card details go directly to our payment processor; we never see or store full card numbers.
• Photos & media you upload — track photos and review images. We strip embedded location metadata (EXIF GPS) from photos on upload to protect track-location privacy.
• Usage & analytics — pages viewed, searches, device type and approximate location from your IP address. Collected only if you accept optional analytics cookies, and analysed in aggregate.
• Communications — reviews, condition reports, corrections you submit and messages to track owners.

We do not track your GPS position while you ride, and we do not collect special-category data.

Where we rely on consent you can withdraw it at any time — in Account settings or by emailing us — without affecting your use of Roost.

• Track owners — your name and booking details for sessions you book, plus your mobile number so they can reach you if a ride day is cancelled or moved.
• Our payment processor, for taking payments and issuing refunds.
• Hosting and email providers who run our infrastructure under data-processing agreements.
• Authorities, only where the law requires it.

We never sell your personal data.

Your data is stored in the UK and EEA. If a provider processes data outside those regions we use recognised safeguards (UK IDTA or EU Standard Contractual Clauses).

• Account data — while your account is active, then deleted within 30 days of account deletion.
• Booking and payment records — 6 years, as UK tax law requires.
• Analytics — aggregated after 26 months.
• Moderation records for removed content — 12 months.

Under UK GDPR you can ask us to: access a copy of your data, correct it, erase it, restrict or object to how we use it, and export it in a portable format.

The quickest route is Account settings → Privacy & data, where you can request a data export or account deletion directly. You can also email admin@roost.mx.

If you’re unhappy with our answer you can complain to the Information Commissioner’s Office (ico.org.uk).

Essential cookies keep you signed in, remember your theme and make bookings work — these are always on. Analytics cookies are optional and off unless you accept them in the cookie banner. Change your choice any time in Account settings → Privacy & data.

You must be 16 or over to create a Roost account. Riders under 18 should be booked in by a parent or guardian.

We’ll email account holders before any material change to this policy takes effect. The date at the top shows the current version.