Privacy and your choices

Last changed: 25 October 2026 (Strava sign-in and account linking; Google Analytics visit statistics, only with consent)

The controller is Ox-Ram System — Smart Automation (Ox-Ram), a sole trader business registered in the United Kingdom, Stirling, Scotland (“we”), which operates EventivSport. Contact for all data matters: oxram.smart@gmail.com.

We use account details to provide account features, event submissions to maintain the catalogue, and inquiry contact details to respond and deliver an agreed service.

The newsletter requires your separate consent and email confirmation. Every newsletter contains a link to unsubscribe without logging in. An inquiry is not consent for marketing.

Our own product measurement (no cookies, no third party) records allowed action categories, event identifiers, country, sport and broad referral categories. It does not store full search text, email addresses, authentication tokens or arbitrary destination URLs. Counts are activity counts, not unique visitors or ticket sales.

Visit statistics (Google Analytics), only with your consent

With your consent only, we use Google Analytics 4 to count visits and see where visitors come from, so we can improve the site and our ads. Until you accept, and after you decline, your browser makes no connection to Google for this and no Google Analytics cookie is stored. Legal basis: your consent (Article 6(1)(a) UK GDPR / EU GDPR, together with the cookie rules: PECR in the UK and the ePrivacy Directive in the EU). Consent is voluntary; declining does not take away anything from the site or change how it works.

What is measured: the pages you visit (the address without any search text or sign-in data; only campaign tags such as utm_source are kept), where you came from, device and browser type, and an approximate location (country and city) derived from your IP address. Google Analytics 4 does not store IP addresses. It sets two first-party cookies on the site you visit (eventivsport.com or www.eventivsport.com), _ga and _ga_YB3NR80QR6, holding a random identifier (no name, email or login). They are valid for up to 2 years and renewed on each visit; that is how long the cookies last, not how long data is kept. The signed-in areas (/admin and /dashboard) are never measured. Google signals and ad personalisation are switched off.

Recipients: Google Ireland Limited (Ireland) and Google LLC (USA). Data may be processed in the USA under the EU-US Data Privacy Framework and its UK Extension. Google keeps event data for 2 months and user data for 14 months counted from your last activity.

Your choice is kept in this browser (localStorage key evs.consent.analytics). You can change or withdraw it at any time under “Cookie settings” at the bottom of any page: withdrawing stops the measurement and deletes the two cookies. Withdrawal does not affect the lawfulness of processing before it.

Strava (optional)

You can sign in with Strava or link your Strava account. Only you can see data that comes from Strava. When you connect, we receive your Strava athlete number and name and an access token; with your permission to view your activities we read your recent activities (name, sport, date, start point, distance and times) to suggest which of our events you may have taken part in. We use no other Strava data and send none of it to any AI service.

Activities are kept only in a temporary file for at most 24 hours and are never written to our database or backups; they are refreshed when you open your dashboard and when you press “Sync now”. Access tokens are stored encrypted for as long as you are connected. Strava sign-ups get an internal placeholder address, never an email we would send to. Your own answers (“I completed it” or “Not me”) are kept as our data without any Strava details, until you undo them or ask us to delete them.

You can disconnect at any time on your dashboard: we then delete the connection, the tokens, the cached activities and the link that lets you sign in with Strava (a Strava-only account must first add an email and password). You can also revoke access in your Strava settings; when Strava tells us, we delete the same data. Strava is a trademark of Strava, Inc.; EventivSport is not affiliated with Strava.

Other storage, logs and your rights

Apart from that, the browser stores your language choice and sign-in session. Server access logs and temporary anti-abuse limits may process connection information for security. External registration sites have their own privacy policies; we do not process participant entry payments.

You have the right to access your data, have it corrected or deleted, restrict or port its processing, and object to processing based on legitimate interest. Write to oxram.smart@gmail.com; we answer within one month. You may also complain to a supervisory authority: in the UK the ICO (ico.org.uk), in the EU the authority in your country.