Enter the Rally

Privacy Policy

Last updated: September 2026

Three Castles Classic Rallies Limited ("Three Castles", "we", "us" or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use and protect personal information when you use the Three Castles website or contact us.

1. Who we are

This website is operated by Three Castles Classic Rallies Limited.

Three Castles Classic Rallies Limited
185 London Road
Twickenham
TW1 1EJ
United Kingdom

If you have a question about this Privacy Policy or how we use your personal information, please contact us using the details provided on our Contact page.

2. Information we may collect

Depending on how you interact with us, we may collect information including:

  • your name and contact details, such as your email address and telephone number;

  • information you provide when contacting us or making an enquiry;

  • information relating to participation in our events where applicable;

  • technical information about your use of our website, such as your IP address, browser, device and interactions with the website; and

  • cookie and similar technology identifiers where you have given the relevant consent.

3. How we use your information

We may use personal information to:

  • respond to enquiries and communicate with you;

  • administer and support our events;

  • provide information or services that you request from us;

  • operate, maintain and improve our website;

  • understand how visitors use our website where analytics consent has been given;

  • measure the effectiveness of our marketing where marketing consent has been given; and

  • meet our legal and regulatory obligations.

4. Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on:

  • Consent – where you have given us permission, including for optional analytics and marketing technologies;

  • Contract – where processing is necessary in connection with a contract with you or steps taken at your request before entering into a contract;

  • Legitimate interests – where processing is necessary for our legitimate business interests and those interests are not overridden by your rights; and

  • Legal obligation – where we need to process information to comply with the law.

5. Cookies and similar technologies

Our website uses cookies and similar technologies. Some are necessary for the website and its features to operate. Optional technologies are only enabled according to the choices you make through our cookie consent settings.

We currently provide separate consent choices for Analytics and Marketing.

Analytics

If you consent to Analytics, we use Google Analytics 4 through Google Tag Manager to help us understand how visitors use the website. This may involve collecting information about pages visited, interactions, approximate location derived from technical information, browser and device information, and other usage information.

Marketing

If you consent to Marketing, we use the Meta Pixel. This technology helps us understand the effectiveness of our advertising and may allow Meta to associate information about your visit with information held by Meta, subject to Meta's own privacy practices.

You can accept or reject optional technologies when the cookie settings are displayed. You can also change your choices later using the "Cookie settings" link in the footer of the website.

6. Sharing your information

We do not sell your personal information.

We may share information with organisations that provide services to us where this is necessary for the purposes described in this policy. These may include website and IT service providers, analytics providers, event-related service providers and other professional suppliers.

Where you consent to the relevant technologies, information may also be processed by Google in connection with Google Analytics and by Meta in connection with the Meta Pixel.

We may also disclose information where required to do so by law or where necessary to establish, exercise or defend legal claims.

7. International transfers

Some of the service providers we use may process information outside the United Kingdom. Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable data protection law and that appropriate safeguards are used where required.

8. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements.

Different types of information may therefore be retained for different periods. When information is no longer required, we will delete it or anonymise it where appropriate.

9. Your data protection rights

Depending on the circumstances, UK data protection law gives you rights in relation to your personal information. These may include the right to:

  • request access to the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to erase your personal information in certain circumstances;

  • ask us to restrict the processing of your information;

  • object to certain processing;

  • request the transfer of your information in certain circumstances; and

  • withdraw consent at any time where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

10. Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

11. Third-party websites

Our website may contain links to websites operated by third parties. We are not responsible for the privacy practices or content of those websites. We recommend reviewing the privacy information provided by the relevant third party when visiting another website.

12. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, technologies or legal obligations. The latest version will be published on this page and the "Last updated" date will be amended accordingly.

Event Partners