Privacy Policy

Almeida Racing Academy

Effective Date: November 28th 2022 · Last Updated: June 29th 2026

1. Introduction

This Privacy Policy describes how Almeida Racing Academy by Suellio Almeida (“we,” “our,” or “us”) collects, uses, stores, and protects your personal information when you use our website https://almeidaracingacademy.com and our league event dashboard at https://events.almeidaracingacademy.com, or participate in our online programs, communities, leagues, and coaching services (collectively, the “Services”).

By using our Services, you consent to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with this Policy, you should stop using our Services immediately.

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new “Last Updated” date.

2. Who We Are

Data Controller: Almeida Racing Academy by Suellio Almeida
Contact Email: contact@almeidaracingacademy.com
Website: https://almeidaracingacademy.com

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, Almeida Racing Academy acts as the data controller for your personal data.

3. Information We Collect

We collect personal and non-personal data to provide and improve our Services. The information we may collect includes:

a. Personal Information You Provide

• Full name, email address, and contact details
• Billing and payment information (processed securely through third-party providers such as Stripe or PayPal)
• Account login details
• Any information you voluntarily provide through registration forms, support requests, or community participation

b. Automatically Collected Data (Usage Data)

When you access our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Referring pages and URLs
• Pages visited and time spent on them
• Date and time of visits
• General geographic location (city/country level only)

c. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience, analyze traffic, and personalize content. You can manage your cookie preferences via your browser settings or cookie banner.

Types of cookies we use:

• Essential Cookies – required for website functionality (e.g., login, security). On the league event dashboard (events.almeidaracingacademy.com) these include a shared sign-in cookie set across the almeidaracingacademy.com domain and a session cookie, both used solely to keep you signed in across our sites. The dashboard does not set analytics or marketing cookies.
• Analytics Cookies – to understand usage and improve our Services.
• Marketing Cookies – to deliver personalized advertisements or promotions (with your consent).

d. League and Competition Data

If you participate in our sim racing leagues, we also collect and process: your iRacing customer ID and iRacing name, iRating, qualifying and lap times, finish positions and race results, championship points, and your assigned team and race split. Some of this data is sourced from the iRacing Data API and from your Outseta membership record.

Public display: to operate a public league, your iRacing name, iRating, qualifying/lap times, race results, championship standings, team, and split are displayed publicly on the league event dashboard (events.almeidaracingacademy.com) and are visible to anyone, including visitors who are not signed in. Your email address, Discord ID, iRacing customer ID, and account identifiers are not shown publicly.

4. How We Use Your Information

We process personal data only when there is a legal basis to do so, including consent, contractual necessity, or legitimate interest.

We may use your information to:

• Provide and maintain our Services
• Process payments and manage subscriptions
• Communicate with you (support, updates, marketing, or transactional emails)
• Personalize content and recommendations
• Conduct analytics to improve products and services
• Comply with legal obligations

We do not sell or rent your personal information to third parties.

5. Legal Bases for Processing (GDPR/UK GDPR)

If you are located in the EEA, UK, or similar jurisdictions, we process your data based on one or more of the following legal grounds:

• Consent: You have given clear consent for processing (e.g., marketing emails).
• Contract: Processing is necessary to fulfill our agreement with you.
• Legal Obligation: Processing is required to comply with the law.
• Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., improving services or preventing fraud).

6. Sharing and Disclosure of Information

We may share your personal data in the following limited circumstances:

Service Providers: With trusted third parties who assist in operating our business (e.g., payment processors, analytics providers, learning platforms, email delivery tools). These providers are contractually obligated to protect your information. The key infrastructure and platform providers we use include:

• Supabase – database, authentication, and storage for the league event dashboard (hosts member records, registrations, and league results).
• Vercel – web hosting and content delivery for the league event dashboard (processes request metadata such as IP addresses in server logs).
• Outseta – membership, identity, and billing platform; the source of your account and subscription record.
• iRacing – queried via the iRacing Data API for publicly available driver statistics (name, iRating, results). No personal data is written back to iRacing.
• Discord – used to manage league roles and notifications via our private bots.

These providers may store data on servers outside your country of residence (see Section 8).

Legal Requirements: When required by law, subpoena, or court order.

Business Transfers: In connection with a merger, sale, or acquisition, provided that your data remains protected.

With Your Consent: For other purposes you explicitly authorize.

We do not allow third parties to use your information for their own marketing without your consent.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law.

Account and transaction data are typically retained for up to 7 years for accounting and compliance purposes.

Usage data and analytics information may be retained in anonymized form indefinitely.

8. Data Transfers

We may transfer your information to servers located outside your country of residence (including the United States).

When we transfer data internationally, we ensure adequate safeguards are in place — such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms — to protect your rights and privacy.

9. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, misuse, or alteration. However, no system is 100% secure, and we cannot guarantee absolute security.

If you believe your data has been compromised, please contact us immediately at contact@almeidaracingacademy.com.

10. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data we hold.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data (“right to be forgotten”). Note that where your data forms part of a completed public competition record (e.g., historical league standings and race results), we may anonymize your entries — removing your name and identifiers while retaining the result itself — rather than delete them outright, so the integrity of past championships is preserved. We will delete personal identifiers (email, Discord ID, iRacing customer ID, account identifiers) on request.
• Restriction: Request to limit how your data is processed.
• Data Portability: Request to receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Withdraw Consent: Withdraw consent for data processing at any time.

To exercise your rights, email us at contact@almeidaracingacademy.com. We may need to verify your identity before fulfilling your request.

11. Children’s Privacy

Our Services are not intended for individuals under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us personal information, contact us at contact@almeidaracingacademy.com to delete it immediately.

12. Your Privacy Rights (Additional Notices)

California (CCPA/CPRA)

Residents of California have the right to:

• Request disclosure of categories and specific data collected.
• Request deletion of personal data (with exceptions).
• Opt out of the “sale” or “sharing” of personal data.

We do not sell personal information as defined by CCPA.

European Economic Area / UK

You have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe your rights are being violated.

13. Third-Party Links

Our website may contain links to third-party websites or platforms. We are not responsible for their privacy practices. Review their privacy policies before providing personal information.

14. Service-Specific Notices

The following notices describe data practices for specific Almeida Racing Academy services — our two Discord bots and our league event dashboard.

Discord Bot (Almeida Event Bot)

Almeida Racing Academy operates a private Discord bot ("Almeida Event Bot") used exclusively within the official Almeida Racing Academy Discord server to manage league event signups, team and split assignments, iRacing statistics, and league points for members of our sim racing league.

Data Collected by the Bot

When you interact with the bot (via a signup button, slash command, or the league signup form on our website), the following information may be collected and stored:

• Discord User ID — used to identify you across league events and assign Discord roles.
• Discord username / display name — for display in notifications and reports.
• iRacing Customer ID and iRacing name — used to look up iRating and driver profile for team balancing purposes.
• Team and split assignment — your assigned league team (e.g. Premier, Club) and race split (e.g. Split 1–4).
• Signup timestamp — the date and time you signed up for an event.
• Outseta membership identifier — used to link your Discord identity to your Almeida Racing Academy membership record.

How This Data Is Used

The bot uses this data exclusively to:

• Assign and manage Discord roles (league event role, team roles, split roles).
• Synchronize league membership status with our membership platform (Outseta).
• Calculate and display iRating-based team assignments for fair competition.
• Record and display league points results.

We do not use this data for advertising, profiling, or any purpose outside of operating the league.

Where Data Is Stored

• Supabase — signup records including Discord ID, iRacing ID, team, split, and league results are stored in our Supabase database (the source of truth for the league system), protected by row-level security and accessible only to league administrators and the systems operating the league.
• Railway (cloud hosting) — the Discord bot's runtime state and operational logs run on Railway's infrastructure, encrypted at rest.

Data is retained for as long as the associated league season is active. Upon request, your data can be removed from all storage locations by a league administrator.

Data Sharing

Bot-collected data is not sold, shared with, or disclosed to any third party outside of:

• Supabase (database infrastructure) — league records are stored in our Supabase database, subject to Supabase's Privacy Policy.
• Railway (hosting infrastructure) — subject to Railway's Privacy Policy.
• Outseta (membership platform) — league membership status is synchronized with your existing Almeida Racing Academy membership record.
• iRacing — iRacing Customer ID is used to query the iRacing Data API for publicly available driver statistics (name, iRating). No data is written back to iRacing.

Your Rights

You may request access to, correction of, or deletion of your bot-collected data by contacting us at contact@almeidaracingacademy.com. We will process your request within a reasonable timeframe.

Discord Bot (Almeida Racing Bot)

Almeida Racing Academy operates a second private Discord bot ("Almeida Racing Bot") used exclusively within the official Almeida Racing Academy Discord server to manage member subscription roles and Garage61 training data pack access for members of our sim racing academy.

Data Collected by the Bot

When your Outseta membership is created, updated, or when you connect your Garage61 account through our platform, the following information may be collected and processed:

• Discord User ID — used to identify you in the Discord server and assign or remove Discord roles based on your membership plan.
• Outseta Account UID — used to link your Discord identity to your membership record and subscription status.
• Garage61 User ID — used to manage your access to Garage61 training data packs based on your membership plan.
• Garage61 OAuth tokens (access token, refresh token, token expiry) — stored temporarily in your Outseta account record to allow the bot to act on your behalf in Garage61. Tokens are cleared automatically when your account becomes inactive for 30 days or when you disconnect your Garage61 account.
• Subscription plan information — your current Outseta subscription plan, used to determine which Discord roles and Garage61 data pack groups you are entitled to.

How This Data Is Used

The bot uses this data exclusively to:

• Assign and remove Discord roles based on your active membership plan.
• Subscribe or unsubscribe you from Garage61 training data pack groups based on your membership plan.
• Remove paid data pack access for accounts that have been inactive for 30 days or whose Outseta subscription has expired.
• Restore your data pack access automatically when you re-link your Garage61 account after a period of inactivity.

We do not use this data for advertising, profiling, or any purpose outside of operating the academy membership system.

Where Data Is Stored

• Outseta (membership platform) — Discord User ID, Garage61 User ID, and Garage61 OAuth tokens are stored as fields on your Outseta account record, subject to Outseta's Privacy Policy.
• Railway (cloud hosting) — the bot's runtime state and logs are stored on Railway's infrastructure, encrypted at rest. No personal data is written to Railway's persistent storage beyond what appears in operational logs (account UIDs, Discord IDs).

Data is retained for as long as your membership account is active in Outseta. Upon request, your Garage61 tokens and linked identifiers can be cleared from your Outseta record by a league administrator.

Data Sharing

Bot-collected data is not sold, shared with, or disclosed to any third party outside of:

• Outseta (membership platform) — Discord and Garage61 identifiers are read from and written to your existing Almeida Racing Academy membership record.
• Garage61 — your Garage61 User ID and OAuth tokens are used exclusively to manage your data pack group subscriptions via the Garage61 API. No additional data is written to Garage61 beyond subscription group membership.
• Railway (hosting infrastructure) — subject to Railway's Privacy Policy.

Your Rights

You may request access to, correction of, or deletion of your bot-collected data by contacting us at contact@almeidaracingacademy.com. We will process your request within a reasonable timeframe.

League Event Dashboard (events.almeidaracingacademy.com)

Almeida Racing Academy operates a league event dashboard at events.almeidaracingacademy.com that manages season registrations, team and split assignments, qualifying, and league results for our sim racing league.

Data Collected

• Account data linked from your membership: email, display name, and Outseta account identifier.
• Driver data: iRacing customer ID, iRacing name, iRating, and (where linked) Discord ID.
• Competition data: registrations, team and split assignment, qualifying and lap times, finish positions, race results, penalties, and championship points.

How This Data Is Used

To run the league: register drivers, assign teams and splits, score sessions, calculate and publish standings, and synchronize Discord roles. We do not use this data for advertising or profiling.

Public Display

To operate a public league, the following are displayed publicly on the dashboard and are visible to anyone, including signed-out visitors: your iRacing name, iRating, qualifying and lap times, finish positions, race results, championship standings, team, and split. Your email address, Discord ID, iRacing customer ID, and account identifiers are never displayed publicly and are not accessible to the public.

Where Data Is Stored

• Supabase — the league database (member records, registrations, results), protected by row-level security.
• Vercel — web hosting and content delivery for the dashboard, which processes request metadata (such as IP addresses) in server logs.

Both may store data on servers outside your country of residence (see Section 8).

Retention

Competition results and standings are retained as a historical record of past seasons. Account and driver records are retained while your membership is active.

Your Rights

You may request access to, correction of, or deletion of your dashboard data by contacting us at contact@almeidaracingacademy.com. Where data forms part of a completed public competition record, we may anonymize your entries (removing your name and identifiers) rather than delete the result itself, as described in Section 10.

15. Contact Us

For questions, concerns, or data requests, please contact:

Almeida Racing Academy by Suellio Almeida
Email: contact@almeidaracingacademy.com