Privacy policy
Last updated: October 2026
Who we are
This policy covers the Festive 50 website and sign-up, run by Avalanche Endurance Events ("AEE", "we", "us"). It explains what personal data we hold about participants, why, and your rights over it.
What we collect
- Account details: your name, email address and password. We store your password only as a one-way hash; nobody, including us, can read it.
- Registration details: date of birth, gender, phone number, postal address, and your event choices (category, class, Fan Dance attendance).
- If you walk for a charity: the charity's name and the link to your fundraising page, which we show to other signed-in participants.
- If you buy the Finisher Pack: the delivery name and address, and a record of the payment (amount, date and the payment provider's reference). We never receive your card details.
- Participation data: the miles, elevation and time you log each day, and the proof photos you upload.
- Photos you choose to share in the gallery.
- Sign-in activity: when you last signed in, to keep accounts secure.
Why we collect it
- To register you and run the event (performance of a contract with you).
- To check eligibility for your category.
- To track progress and publish results to other signed-in participants: your name, gender, category, county and country, and totals appear on the league table.
- To show photos you've chosen to share in the gallery, once approved.
- To post your Finisher Pack and run the New Year's Day prize draw (performance of a contract with you).
- To keep accounts secure and investigate misuse (our legitimate interest in running a safe service).
Where it's stored and who we share it with
Your data is held in Microsoft Azure's UK South region (London), encrypted in transit and at rest. Photos are stored and served by Bunny.net from its UK storage region. Card payments for the Finisher Pack are handled by Stripe, which processes your card details itself. Donations to your charity go through your own fundraising page (for example JustGiving) and never through us. Account emails (invites and password resets) are sent through Resend, which may process your email address in the United States under standard contractual clauses. These providers act as our processors and don't use your data for their own purposes. We don't sell your data, share it for marketing, or use analytics or advertising trackers.
How long we keep it
We keep your data while your account is active and for a reasonable period afterwards, in case you take part again or contact us about a previous event. Ask us to delete it sooner at any time; you don't need to give a reason.
Your rights
Under UK GDPR you can ask to access, correct, delete, or receive a portable copy of your data, and object to or restrict some processing. You can correct most details yourself from your profile. You can also complain to the Information Commissioner's Office (ICO).
Cookies
We use one strictly necessary cookie to keep you signed in. Nothing else.
Changes
If this policy changes we'll update the date above, and tell you directly about significant changes.
Contact
For anything about your data, email aeefestive50.techteam@gmail.com.