Last updated: 11 June 2026
This Data Policy describes how Crevo Concepts LLP, operating the X Race platform and app, manages the data we hold — including how it is stored, secured, shared and governed. It complements our Privacy Policy, which focuses on your personal information and rights.
1. Categories of data we process
- Identity & account data — name, contact details and login credentials.
- Racing data — bookings, lap times, results, rankings and event participation.
- Transaction data — purchases, refunds and billing records.
- Technical data — device, app and connectivity information.
- Usage & analytics data — how the Services are accessed and used.
- Location data — where you grant permission, to surface nearby tracks.
2. Legal bases for processing
Where applicable law requires it, we process data on the basis of: performance of a contract (to deliver bookings and events), your consent (for marketing and location), our legitimate interests (to improve and secure the Services) and legal obligations (such as tax and accounting).
3. Cookies & tracking technologies
Our website uses cookies and similar technologies to:
- Essential — keep you signed in and the site functioning.
- Analytics — understand usage so we can improve the experience.
- Preferences — remember your settings and choices.
You can manage cookies through your browser settings. Disabling some cookies may affect functionality.
4. Data storage & data residency
We host user data in the region associated with your country of use:
- India — data for users in India is hosted in India.
- United Arab Emirates — data for users in the UAE is hosted in Dubai, UAE.
- Singapore — data for users in Singapore is hosted in Singapore.
Data is stored on secured servers provided by reputable hosting and cloud partners. Where data is transferred across borders — for example to provide support or operate shared services — we take steps to ensure an appropriate level of protection consistent with applicable law.
5. Data security
- Encryption of data in transit using industry-standard protocols.
- Access controls limiting data access to authorised personnel.
- Regular reviews of our systems and security practices.
- Secure handling of payments via certified payment providers.
6. Data sharing
We share data only as described in our Privacy Policy — with service providers, venue and event partners, and where required by law. We do not sell your data.
7. Data retention
We retain data only as long as necessary for the purposes set out in this policy, to meet legal and regulatory requirements, and to resolve disputes. When data is no longer needed, we delete or anonymise it.
8. Your data rights
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your data, subject to legal limits.
- Portability — request your data in a portable format where applicable.
- Objection & restriction — object to or limit certain processing.
To exercise these rights, contact tech@crevoconcepts.com. We may need to verify your identity before acting on a request.
9. Data breaches
We maintain procedures to detect, report and respond to data security incidents, and will notify affected users and regulators where required by law.
10. Changes to this policy
We may update this Data Policy from time to time and will post the revised version here with an updated date.
11. Contact us
For data-related queries, contact our team at tech@crevoconcepts.com or write to Crevo Concepts LLP (LLPIN ACP-6032), Mh Tower Building No.2678, Makkani, South Bazar, Kannur, Kerala, India, 670002.