Privacy Policy

Last updated: 4 April 2026

1. Who We Are

This Privacy Policy explains how Park5K (“Park5K”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you use:

• our website at park5k.com;
• our web app, customer account areas, product pages, and related services;
• any communications you have with us, including by email, contact form, or social channels; and
• any products, digital downloads, previews, image-generation tools, challenge-tracking features, or related services we provide.

For data protection purposes, the data controller is Park5K. You can reach us at:

If you have questions about this Privacy Policy or how we use your personal data, please contact us using the details above.

2. Scope of This Policy

This Privacy Policy applies to personal data we process when you:

• browse or use our website or app;
• create an account;
• place an order or request a product preview;
• contact us for support;
• subscribe to updates or marketing;
• upload content, images, or custom messages;
• use challenge-tracking or profile-related features; or
• otherwise interact with Park5K.

This policy does not apply to third-party websites, services, or platforms that we do not control, even if we link to them.

3. The Personal Data We Collect

Depending on how you use Park5K, we may collect and process the following categories of personal data.

3.1 Data you provide directly

You may provide us with:

• Identity data – such as your name, display name, username, or account name;
• Contact data – such as your email address, billing address, delivery address, or phone number;
• Account data – such as login credentials, account preferences, saved settings, and order history;
• Transaction data – such as details of products ordered, previews requested, customisations selected, payment status, refunds, and delivery details;
• Communications data – such as messages you send to us, support requests, form submissions, survey responses, and email correspondence;
• Content you submit – such as uploaded images, preview settings, custom text, product notes, artwork requests, or other materials you choose to submit;
• Marketing preferences – such as whether you have opted in or out of marketing emails.

3.2 Data collected automatically

When you use our website or app, we may automatically collect:

• Technical data – such as IP address, browser type, browser version, device type, operating system, language settings, screen resolution, and time zone;
• Usage data – such as pages viewed, links clicked, session duration, navigation paths, referral URLs, crash logs, feature usage, and approximate location inferred from IP address;
• Cookie and similar technology data – such as identifiers, consent preferences, analytics data, and session information.

3.3 Data from third parties or public sources

We may receive personal data from third parties or publicly available sources, where lawful, including:

• payment processors;
• website hosting, analytics, email, and customer support providers;
• fraud prevention or security providers;
• delivery and fulfilment partners;
• public profile or event-related data sources that you ask us to use or that are necessary to provide Park5K features;
• social media, marketplace, or commerce platforms where you contact us or place orders.

If Park5K uses publicly available running or event participation data, challenge-tracking data, or profile information from third-party or public sources to provide challenge-tracking, search, profile, poster, or product-personalisation features, we may collect and process that information where we have a lawful basis to do so.

3.4 Special category data

We do not intentionally collect special category personal data (for example, health data, racial or ethnic origin, political opinions, religious beliefs, or sex life data) unless this is clearly necessary, you choose to provide it, and we have an appropriate lawful basis.

Please do not send us sensitive personal data unless we specifically ask for it.

3.5 Children’s data

Park5K is not directed at children, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at hey@park5k.com and we will investigate.

4. How We Use Your Personal Data

We use personal data only where we have a lawful basis and a legitimate business need. Depending on the circumstances, we may use your personal data to:

• create and manage your account;
• provide our website, app, and features;
• generate previews, challenge pages, personalisations, and custom products;
• process and fulfil orders, payments, refunds, and delivery;
• provide customer support and respond to enquiries;
• maintain service security, prevent abuse, detect fraud, and troubleshoot issues;
• improve our website, app, products, and user experience;
• send service emails and transactional communications;
• send marketing communications where permitted by law or where you have consented;
• maintain business records, accounting records, and audit trails;
• comply with legal and regulatory obligations;
• establish, exercise, or defend legal claims.

5. Lawful Bases for Processing

Under UK data protection law, we rely on one or more of the following lawful bases:

5.1 Contract

We process personal data where it is necessary to perform a contract with you or take steps at your request before entering into a contract, for example to:

• create your account;
• process orders;
• generate previews or products you request;
• provide support relating to your purchase or account.

5.2 Legitimate interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests. These legitimate interests may include:

• operating, securing, and improving Park5K;
• preventing fraud, abuse, and misuse;
• understanding how users interact with our services;
• managing customer relationships and support;
• maintaining internal administration and records;
• enforcing our terms and protecting our business.

5.3 Consent

We rely on consent where required, including for:

• non-essential cookies and similar technologies;
• certain direct marketing communications;
• any optional processing where consent is the appropriate basis.

Where we rely on consent, you can withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

5.4 Legal obligation

We may process personal data where necessary to comply with legal obligations, including tax, accounting, consumer protection, law enforcement, and regulatory requirements.

5.5 Vital interests / legal claims

In limited circumstances, we may process personal data to protect vital interests or to establish, exercise, or defend legal claims.

6. Cookies and Similar Technologies

We use cookies and similar technologies such as local storage, pixels, tags, scripts, and analytics tools.

These may include:

• Strictly necessary technologies – required for core functionality, security, fraud prevention, login sessions, shopping basket functions, or consent management;
• Performance and analytics technologies – used to understand traffic, feature usage, and performance;
• Functionality technologies – used to remember preferences or settings;
• Advertising or marketing technologies – used to measure campaigns or deliver relevant promotions, if applicable.

Where required by law, we will ask for your consent before using non-essential cookies or similar technologies. You can change your choices at any time using the cookie banner when you first visit, or cookie preferences in the site footer.

7. Direct Marketing

We may send you marketing communications about Park5K products, launches, offers, or updates where:

• you have consented; or
• we are otherwise permitted to do so under applicable law.

You can opt out of marketing emails at any time by:

• clicking the unsubscribe link in any marketing email; or
• contacting us at hey@park5k.com.

We will still send you non-marketing communications where necessary, such as order confirmations, service messages, security alerts, or important policy updates.

8. Who We Share Personal Data With

We may share personal data with trusted third parties where necessary to operate Park5K, including:

• website hosting and infrastructure providers;
• payment processors;
• email delivery providers;
• analytics providers;
• customer support and CRM providers;
• printing, fulfilment, delivery, and logistics partners;
• cloud storage, database, and security providers;
• professional advisers such as lawyers, accountants, auditors, and insurers;
• regulators, public authorities, courts, or law enforcement where required;
• potential buyers, investors, or advisers in connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate safeguards.

We require service providers to process personal data only on our instructions, where applicable, and to use appropriate confidentiality and security measures.

We do not sell your personal data.

Where product previews, print files, or fulfilment assets contain names, custom messages, event information, or uploaded content, those details may be shared with relevant fulfilment, printing, storage, or delivery providers to complete your order.

9. International Transfers

Some of our service providers may process personal data outside the United Kingdom. Where we transfer personal data internationally, we take steps to ensure appropriate safeguards are in place, such as:

• adequacy regulations recognised under UK law;
• approved standard contractual clauses or international data transfer agreements; or
• other lawful transfer mechanisms.

You can contact us if you would like more information about the safeguards used for international transfers.

10. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including for legal, accounting, tax, dispute resolution, fraud prevention, and record-keeping purposes.

Retention periods may vary depending on the type of data and the purpose of processing. For example:

• account data – for as long as your account remains active and for a reasonable period afterwards;
• order and transaction records – for as long as needed for fulfilment, support, tax, and accounting obligations;
• customer support communications – for as long as needed to manage your enquiry and maintain support records;
• technical logs and analytics data – for as long as needed for security, diagnostics, and service improvement;
• marketing data – until you withdraw consent or object, plus a limited suppression period to respect your preferences.

Where we no longer need personal data, we will delete it or anonymise it, unless we are required or permitted to keep it for longer.

11. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

These measures may include:

• access controls and least-privilege permissions;
• encryption in transit and, where appropriate, at rest;
• secure hosting environments;
• authentication and password controls;
• logging, monitoring, and backup procedures;
• supplier due diligence and contractual safeguards;
• internal processes for handling security issues.

No method of transmission over the internet or method of storage is completely secure. We therefore cannot guarantee absolute security.

12. Your Privacy Rights

Depending on your location and the circumstances, you may have the right to:

• be informed about how your personal data is used;
• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your personal data in certain circumstances;
• restrict processing in certain circumstances;
• object to processing based on legitimate interests or to direct marketing;
• data portability in certain circumstances;
• withdraw consent where we rely on consent;
• lodge a complaint with a supervisory authority.

To exercise any of your rights, contact us at hey@park5k.com.

We may need to verify your identity before responding. We will respond in accordance with applicable law.

If you are in the UK and are unhappy with how we handle your personal data, you can complain to the Information Commissioner’s Office (ICO) via its website.

13. Third-Party Links and Services

Our website or app may include links to third-party websites, plug-ins, checkout pages, social media pages, event data sources, or other services. If you follow a link to a third-party site or use a third-party service, your information will be governed by that third party’s own privacy policy and terms.

We are not responsible for the privacy practices of third parties we do not control.

14. User Content, Uploads, and Personalisation

If you upload content or provide custom text, names, images, or other material for previews, posters, products, or personalised outputs:

• you are responsible for ensuring you have the right to provide that content;
• you should not upload personal data about other people unless you have the right to do so;
• we may process that content to generate previews, create products, provide support, moderate misuse, and fulfil your order;
• we may temporarily store working files, previews, cached renders, logs, and related metadata as needed to operate the service.

We reserve the right to remove or refuse content that is unlawful, infringing, abusive, or otherwise prohibited by our terms.

15. Public, Search, or Profile-Based Features

Park5K may offer features that use publicly available, third-party-provided, or user-requested profile, event, or participation data to generate challenge tracking, statistics, progress pages, previews, products, or search results.

Where those features apply:

• we process the data necessary to provide the requested feature;
• we may display information within the feature output, subject to your settings and the design of the service;
• we may cache or store related identifiers, snapshots, metadata, and generated assets to improve performance and maintain consistency;
• if you believe information shown by Park5K is inaccurate or should not be displayed, you can contact us at hey@park5k.com.

16. Payment Information

We do not store full payment card details on our own systems. Payments are processed by Stripe, which handles card data in line with its own privacy notice and security practices. See Stripe’s privacy information for details.

17. Automated Decision-Making and Profiling

We do not make solely automated decisions that produce legal or similarly significant effects on individuals unless we specifically tell you otherwise.

Park5K may use automated systems to generate previews, challenge outputs, rankings, recommendations, or product configurations. These processes are intended to support service delivery and do not generally have legal or similarly significant effects.

18. Business Changes

If Park5K is involved in a merger, acquisition, restructuring, investment, sale of assets, or similar corporate transaction, your personal data may be disclosed to relevant counterparties and advisers, subject to appropriate confidentiality and lawful handling.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or privacy practices.

When we make material changes, we will take reasonable steps to notify users where appropriate, such as by updating the “Last updated” date, posting a notice on our website, or contacting account holders.

20. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal data, please contact Park5K: