RUST 2 DUST

PRIVACY POLICY

Rust 2 Dust Rally 2027 — How we use your personal data

Version 1.0 · June 2026 · LMR Management Ltd

1. Who We Are

The data controller for personal data collected in connection with the Rust 2 Dust Rally 2027 is:

OrganisationLMR Management Ltd DirectorJonathan Richardson Emailinfo@rust2dust.com Governing lawEngland and Wales

All personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

When you register for the Event, we collect the following personal data:

Driver details (Driver 1 and, where applicable, Driver 2)

  • Full name and title
  • Date of birth
  • Email address and phone number
  • Home address and postcode
  • Passport number
  • Medical notes or conditions (optional: shared only with the Event first aider)
  • Dietary requirements (optional: shared with accommodation providers)

Vehicle details

  • Make, model, year and colour
  • Purchase price
  • Any additional notes

Insurance and roadside assistance

  • Provider name, policy reference and expiry date
  • Countries covered

Emergency contact

  • Name, relationship, phone number(s) and email address

Motivation (optional)

  • Your reason for taking part, only collected where you provide consent and only shared with the Dragonfly Cancer Trust for their communications and fundraising materials

Payment and registration data

  • Entry type, pricing tier and registration number
  • Payment status (deposit and balance)
  • Registration date and submission timestamp

3. How We Use Your Data

We use the personal data we collect for the following purposes:

  • Organising and administering the Event, including managing registrations, payments, and communications
  • Arranging ferry crossings, flights, accommodation, and logistics on your behalf
  • Sending confirmation, reminder, and administrative emails relating to your registration
  • Verifying eligibility requirements (age, insurance, car purchase cap)
  • Preparing manifests for ferry, flight, and medical purposes
  • Complying with legal obligations, including customs and border requirements
  • Supporting the Dragonfly Cancer Trust's fundraising activities (motivation text only, with your explicit consent)

The legal basis for processing is contract performance (processing is necessary to fulfil your registration and deliver the Event) and, for sensitive data such as medical notes and motivation text, explicit consent.

4. Who We Share Your Data With

We share personal data only where necessary and only with the following parties:

Ferry and transport operators

Name, date of birth, passport number: required for booking and border compliance.

Accommodation providers

Name and dietary requirements: required for room allocation and catering.

Event first aider

Name and medical notes: held securely for emergency preparedness only.

Dragonfly Cancer Trust

Motivation text only, where you have explicitly consented to this sharing during registration.

Clarand Accounting

Financial data only (payment amounts, registration numbers): for the Organiser's accountancy purposes.

No personal data will be sold to or shared with any third party for marketing purposes.

5. How Long We Keep Your Data

Personal data collected in connection with the Event will be retained for a period of 6 months following the conclusion of the Event (i.e. until approximately October 2027).

After this period, all personal data will be securely deleted, except where a longer retention period is required by law (for example, financial records for HMRC purposes).

6. Your Rights

Under the UK GDPR you have the following rights in relation to your personal data:

Right of access You may request a copy of the personal data we hold about you.
Right to rectification You may ask us to correct inaccurate or incomplete data.
Right to erasure You may ask us to delete your personal data. We will comply unless we are required by law to retain it. Note that requesting erasure before the Event may result in forfeiture of your entry.
Right to restriction You may ask us to restrict how we use your data while a query is resolved.
Right to object You may object to processing based on legitimate interests.
Right to withdraw consent Where processing is based on consent (e.g. sharing your motivation text with the Dragonfly Cancer Trust), you may withdraw consent at any time by contacting us in writing.

To exercise any of these rights, please contact us at info@rust2dust.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Sensitive data (including passport numbers and medical notes) is stored in encrypted form.

Access to personal data is restricted to authorised personnel involved in organising the Event.

8. Cookies and Website Data

This website uses session cookies necessary for the operation of the registration form. No analytics, advertising, or third-party tracking cookies are used. No personal data is transferred outside the United Kingdom in connection with website operation.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated to registered Participants by email. The current version will always be available at /privacy on this website.

10. Contact

For any data protection queries, requests to exercise your rights, or complaints, please contact:

OrganisationLMR Management Ltd DirectorJonathan Richardson Emailinfo@rust2dust.com

Version 1.0 · June 2026 · LMR Management Ltd · Subject to revision