Privacy Policy
On A Plod Ltd respects your privacy and is committed to protecting your personal information. Last updated: 27 August 2026.
On A Plod Ltd ("On a Plod", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what information we collect, why we collect it, how we use and share it, how long we keep it and the rights you have in relation to your information.
It applies when you:
- Visit or use our website
- Create or use an On a Plod account
- Register for or attend an On a Plod event
- Purchase event tickets, merchandise or other products
- Sign up for a waitlist, newsletter or marketing communication
- Join one of our community activities or social events
- Contact or otherwise interact with us
For the purposes of UK data protection law, On A Plod Ltd is the data controller of the personal information covered by this Privacy Policy.
1. Who We Are
On A Plod Ltd
Inchmarlo
Station Road
York
YO26 8DX
United Kingdom
Email: come@onaplod.com
Where another organisation separately determines how and why your personal information is processed, such as certain ticketing or payment providers, that organisation may also act as an independent data controller under its own privacy policy.
2. Information We Collect
The information we collect depends on how you interact with On a Plod.
Contact and identity information
This may include:
- Name
- Email address
- Telephone number
- Billing or delivery address
- Date of birth or age information where required
- Account username or profile information
Event and participation information
When you register for or participate in an event, we may collect information such as:
- Events you have entered or attended
- Ticket and registration information
- Participant or bib numbers
- Running distances, laps, timings, results or achievements
- Check-in and attendance information
- Run club or community information
- Rewards, milestones and event history
- Emergency contact information
Where reasonably necessary for event safety, you may also choose to provide relevant health or medical information.
Purchase and payment information
We may collect:
- Products or tickets purchased
- Order and transaction history
- Payment status
- Refund information
- Delivery or collection information
Payment card information is generally processed directly by our payment providers. We do not normally store your full payment card details ourselves.
Account information
If you create an account with us, we may collect information including:
- Login details
- Account preferences
- Event history
- Purchase history
- Rewards and achievements
- Saved preferences
Passwords are stored using appropriate security measures and are not available to us in readable form.
Communications
If you contact us, we may retain information contained in:
- Emails
- Contact forms
- Customer support requests
- Refund requests
- Surveys or feedback
- Social media communications
Website and device information
When you use our website, we may automatically collect information such as:
- IP address
- Device type
- Browser type
- Operating system
- Pages viewed
- How you interact with our website
- Referral source
- Approximate location derived from your IP address
- Cookie and similar technology information
Marketing preferences
We may record:
- Whether you have agreed to receive marketing
- The types of communications you have requested
- When and how you gave consent
- Whether you have unsubscribed or opted out
Photography and video
Photography and filming may take place at On a Plod events.
As a running event and community business, we may use photographs or video showing participants, spectators and the event environment to:
- Document our events
- Share event highlights
- Promote On a Plod
- Publish content on our website and social media channels
- Produce marketing and promotional materials
Where appropriate, we will take reasonable steps to respect objections to the use of identifiable photographs or footage.
3. Where We Get Your Information
We may collect personal information:
Directly from you
For example, when you:
- Create an account
- Purchase a ticket
- Buy merchandise
- Register for an event
- Sign up to a waitlist or mailing list
- Complete a form
- Contact us
- Attend or participate in an event
From organisations that provide services to us
This may include:
- Ticketing providers
- Ecommerce platforms
- Payment providers
- Event timing and results providers
- Delivery providers
- Technology providers
Automatically
We may collect technical information when you interact with our website using cookies, analytics tools and similar technologies.
From event and community partners
We may occasionally receive information from run clubs, event partners or other organisations where there is a lawful basis for them to provide that information to us.
4. How and Why We Use Your Information
Under UK data protection law, we must have a lawful basis for processing your personal information.
We may rely on the following lawful bases:
| What we use your information for | Main lawful basis |
|---|---|
| Processing ticket purchases and event registrations | Performance of a contract |
| Processing merchandise orders and deliveries | Performance of a contract |
| Creating and managing your account | Performance of a contract |
| Recording your events, results, rewards and participation history | Performance of a contract and our legitimate interests |
| Communicating important event information | Performance of a contract |
| Customer service and responding to enquiries | Performance of a contract and our legitimate interests |
| Processing payments, refunds and preventing fraud | Performance of a contract, legal obligations and legitimate interests |
| Operating our events safely | Performance of a contract, legitimate interests and, where appropriate, vital interests |
| Improving our website, events and services | Legitimate interests and, where required, consent |
| Website analytics and non-essential cookies | Consent where required |
| Marketing our events, products and services | Consent or legitimate interests where permitted by law |
| Photography and video of our events | Legitimate interests, where appropriate |
| Protecting our business, users and systems | Legitimate interests |
| Accounting, taxation and regulatory obligations | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests and legal obligations |
Legitimate interests
Where we rely on legitimate interests, those interests may include:
- Operating and improving On a Plod
- Understanding how customers use our services
- Developing our events and community
- Protecting our systems and preventing fraud
- Communicating with customers
- Promoting and documenting our events
- Managing our commercial relationships
- Protecting our legal rights
We consider whether these interests are balanced against your rights and freedoms before relying on this basis.
5. Health and Other Sensitive Information
Certain information receives additional protection under data protection law.
If we collect health or medical information in connection with participation in an event, we will only process it where we have both a lawful basis and an appropriate condition for processing special category information.
Depending on the circumstances, this may include:
- Your explicit consent
- Protecting your vital interests or those of another person in an emergency
- Establishing, exercising or defending legal claims where permitted by law
We will only collect this information where reasonably necessary.
6. Marketing
We may contact you about:
- Upcoming On a Plod events
- Ticket releases and early access
- Community events
- Merchandise
- Offers
- Partnerships
- Other On a Plod news
We will only send electronic direct marketing where we are permitted to do so under applicable data protection and electronic marketing laws.
This may be because:
- You have specifically agreed to receive marketing; or
- You are an existing customer and the applicable "soft opt-in" rules allow us to contact you about similar products or services.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us.
Unsubscribing from marketing will not prevent us from sending essential communications relating to an event, order, account or service you have requested.
7. Cookies and Analytics
Our website may use cookies and similar technologies.
Some cookies are necessary for the website to operate, for example to:
- Keep you signed in
- Maintain your shopping basket
- Process transactions
- Protect the website from fraud or misuse
- Remember essential preferences
We may also use optional cookies for purposes such as:
- Analytics
- Measuring website performance
- Understanding how visitors use our website
- Advertising and marketing
Where required by law, optional cookies will only be used after you have given consent.
You can manage your preferences through our cookie controls where available.
8. Who We Share Your Information With
We do not sell your personal information.
We may share personal information where necessary with organisations that help us operate On a Plod, including:
- Ticketing and registration providers
- Payment processors
- Ecommerce providers
- Website hosting and technology providers
- Email and communications providers
- Analytics providers
- Delivery and fulfilment companies
- Event timing and results providers
- Photographers and event media providers
- Event venues
- Medical and first aid providers
- Security providers
- Professional advisers such as accountants, insurers and lawyers
We may also disclose information:
- Where you ask or authorise us to
- Where required by law
- To law enforcement, courts or regulatory authorities where legally required
- To protect our rights, property, users or the public
- In connection with a merger, acquisition, restructuring, sale or transfer of all or part of our business
Where another organisation processes information on our behalf, we require appropriate contractual and data protection arrangements where required by law.
9. Third-Party Services and Websites
Our website or communications may contain links to third-party websites or services.
These may include ticketing platforms, payment providers, social media platforms, event partners or other websites.
Those organisations are responsible for their own privacy practices where they act as independent controllers.
We recommend reviewing their privacy policies before providing personal information directly to them.
10. International Transfers
Some of the companies that provide technology or other services to us may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we take steps required by applicable data protection law to ensure that an appropriate level of protection is provided.
This may include relying on:
- UK adequacy regulations
- The UK International Data Transfer Agreement
- The UK Addendum to approved Standard Contractual Clauses
- Other safeguards permitted under applicable data protection law
You can contact us if you would like more information about safeguards relating to international transfers.
11. How Long We Keep Your Information
We do not keep personal information for longer than reasonably necessary.
How long we retain information depends on:
- Why it was collected
- Whether you have an active account
- Whether it is required to provide a service
- Legal, tax or accounting requirements
- Insurance requirements
- The limitation period for potential legal claims
- Fraud prevention and security requirements
For example:
- Transaction and accounting records may be retained for the period required by UK tax and accounting law.
- Event and participation records may be retained where necessary to maintain your event history, results, achievements and account.
- Customer service communications may be retained where reasonably necessary to resolve disputes or maintain records of our relationship.
- Marketing information will be retained until you withdraw consent, unsubscribe or we determine it is no longer appropriate to use it.
- We may retain limited information about an unsubscribe request to ensure we continue to respect your marketing preference.
When personal information is no longer required, we will delete, anonymise or securely dispose of it where reasonably practicable.
12. Security
We use appropriate technical and organisational measures designed to protect personal information from:
- Unauthorised access
- Accidental loss
- Misuse
- Alteration
- Disclosure
- Destruction
No online service can guarantee absolute security. However, we take reasonable steps appropriate to the nature of the information we process and the risks involved.
You are responsible for keeping your account password and login information confidential.
13. Your Rights
Under UK data protection law, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information in certain circumstances
- Restrict processing in certain circumstances
- Object to processing in certain circumstances
- Object to direct marketing at any time
- Receive certain information in a portable format
- Withdraw consent at any time where our processing relies on consent
Not every right applies in every circumstance.
Withdrawing consent does not affect processing that took place lawfully before you withdrew it.
Your right to object
You have the right to object at any time to our use of your personal information for direct marketing.
You may also have the right to object where we rely on legitimate interests. If you object, we will consider your circumstances and whether we have compelling legitimate grounds to continue processing the information.
To exercise any of these rights, contact:
We may need to verify your identity before responding to a request.
14. Children
Our services may be used by younger participants where an event allows this and any applicable entry requirements are satisfied.
Where appropriate, we may require consent or information from a parent or legal guardian.
We will take additional care when processing children's personal information and will only collect information that is reasonably necessary for providing our services.
15. Complaints
If you have a concern about how we use your personal information, please contact us first at:
We will aim to resolve your concern.
You also have the right to complain to the UK's data protection regulator:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including when:
- Our services change
- We introduce new technology or features
- Our service providers change
- Our legal or regulatory obligations change
The latest version will always be available on our website and the date at the top of this policy will show when it was last updated.
Where a change materially affects how we use your personal information, we will provide additional notice where required by law.
17. Contact Us
For questions about this Privacy Policy, how we use your information or your data protection rights, contact:
On A Plod Ltd
Inchmarlo
Station Road
York
YO26 8DX
United Kingdom
Email: come@onaplod.com
On A Plod Ltd is the data controller responsible for the personal information described in this Privacy Policy.