Legal
Privacy Policy
Last updated: 17 October 2026
In short
We collect what we need to run your account and your event entries. When you enter an event, the organiser gets your entry details, including any medical and emergency contact information, so it can keep you safe.
We never sell your information or share it with advertisers. You can see, change or delete it from Settings.
1. About this policy
This policy explains how Startline Pty Ltd (ABN 85 775 067 904) (“Startline”, “we”, “us”) handles personal information when you use startlineau.com, the organiser portal or any other Startline service. It covers athletes, guests who enter without an account, organisers and their team members, and anyone who contacts us.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Words such as “personal information”, “sensitive information” and “health information” have the meaning they have in that Act.
2. What we collect
2.1 Your account
Your email address, name, username, and anything you add to your profile, such as a bio, photo, city and state. Your password and authenticator app setup are held by Amazon Cognito, our sign-in provider, and we never see your password. We also keep your notification settings and whether your profile is public.
2.2 Event entries
For each person entered into an event: first and last name, email address, mobile number, date of birth, gender, emergency contact name and phone number, any medical conditions or allergies you tell us about, an estimated finish time if asked, the ticket and category chosen, and whether the organiser’s waiver was accepted. Afterwards we hold the bib number, start wave, check-in time and results the organiser records. If you are signed in, we can save your own details so your next entry is filled in for you.
2.3 Health information
Medical conditions and allergies are health information, a kind of sensitive information. We collect them only when you choose to provide them at entry, and only so the organiser can keep you safe at the event. By providing them, you consent to us collecting them and passing them to the organiser of that event.
2.4 Organisations
The organisation’s name, contact name, email address, phone number, ABN, description and images, and who its owners and managers are. To take paid entries we also collect the legal name and date of birth of the person responsible, which we need for identity checks and for tax reporting to the Australian Taxation Office under the Sharing Economy Reporting Regime. Each time an organisation publishes an event it confirms that it holds the public liability insurance and permits the event needs, but we do not collect insurance documents. We may check an ABN against the Australian Business Register.
2.5 Payments
Card details go directly to Stripe, and we never see or store them. We keep a record of each payment and refund: the amount, the booking fee, its status and Stripe’s reference for it.
2.6 How you use Startline
The events you save, the organisers you follow, the reviews you write or report, and the notifications we send you.
2.7 When you contact us
Your email address and message when you use the contact or feedback form, or join the waitlist.
2.8 Technical and security information
Your IP address and basic browser information, which we use to limit repeated requests and to record suspicious activity such as failed bot checks. Cloudflare Turnstile checks that forms are being filled in by a person. We use cookies to keep you signed in and remember your preferences; see the Cookie Policy. We do not use analytics or advertising trackers.
2.9 Information from other people
Someone else may enter you into an event, such as a friend, a team captain or a parent. Organisers add bib numbers, start waves and results. Stripe tells us whether an organiser’s payout account is set up. If someone gives us your details, we handle them under this policy.
2.10 Staying anonymous
You can browse events without an account or telling us who you are. To enter an event or run one, we need the details above.
3. How we use it
We use personal information to:
- create and secure your account, including sign-in codes and the authenticator app;
- process entries, payments, refunds and organiser payouts;
- give organisers what they need to run their events (see 4.1);
- send emails you need, such as entry confirmations, verification codes, start wave changes, refund updates and event approvals;
- tell you when an organiser you follow publishes an event, unless you turn that off;
- show your public profile, reviews and results;
- review new organisations and their events before they are published;
- meet our tax reporting and other legal obligations;
- keep the platform safe, including preventing spam, fraud and abuse;
- answer your questions and improve the platform.
We only send marketing emails, such as news about Startline, if you have agreed to them, for example by joining the waitlist. Every marketing email has an unsubscribe link.
5. Information sent overseas
Our database and uploaded images are stored in Sydney. Some of the providers in 4.3 handle information outside Australia, mainly in the United States: Stripe for payments, Resend for email, Mapbox for maps and Cloudflare for bot checks. We choose providers that protect personal information to a standard comparable with the Australian Privacy Principles and that are bound by contract to do so.
6. How we protect it
Information is encrypted when it travels between your browser and Startline. Passwords and authenticator app secrets are held by Amazon Cognito, not in our database. Only staff who need it can see personal information, and actions in the admin console are logged. Uploaded files are checked to make sure they are what they claim to be.
No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
7. How long we keep it
- Your account and profile: until you delete your account.
- Event entries: these are the organiser’s records, so they stay with the organiser after you delete your account, without the link to it.
- Payment and tax records: for as long as tax law requires, usually five years.
- Security records: only as long as we need them to keep the platform safe.
- Email verification codes: they expire shortly after they are sent.
When we no longer need information, we delete it or remove anything that identifies you.
8. Seeing and correcting your information
You can see and change most of your information in Settings, and delete your account under Login & security. To ask for a copy of what we hold about you, or to have something corrected, email [email protected]. We will answer within 30 days and will not charge you. If the law allows us to refuse a request, we will tell you why.
To correct details on an entry the organiser holds, contact the organiser, or tell us and we will pass the request on.
9. Your choices
- Make your profile private in Settings.
- Turn off emails about new events from organisers you follow in Settings. Emails about your own entries are always sent.
- Unsubscribe from marketing emails using the link in any of them.
- Manage cookies in Settings, under Privacy.
- Leave the medical conditions field empty when you enter, unless the organiser needs it.
10. Children
Accounts are for people aged 18 and over. A parent or guardian can enter a child into an event, and in doing so gives us the child’s details and consents to how we handle them under this policy, including passing them to the organiser.
11. Complaints
If you think we have mishandled your personal information, email [email protected]. We will look into it and reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
12. Changes to this policy
We will update this policy when the way we handle personal information changes. If a change is significant, we will email you before it takes effect. The date at the top shows when it was last updated.
13. Contact
For anything about privacy, contact us at [email protected].