HDOR Policies - Virtual Running & Riding
Effective Date: July 24, 2025
HDOR Events Private Limited | 121 1st Floor Ansal Tower-38, Nehru Place,
New Delhi, India | support@hdor.com
Table of Contents
1. Introduction
HDOR Events Private Limited (“HDOR,” “we,” “us,” or “our”) is
committed to protecting your privacy. This Privacy Policy outlines how
we collect, use, store, and protect your personal information when you
interact with our website, mobile applications, or services. By using
our services, you agree to the practices described in this policy.
2. Information We Collect and How We Use It
HDOR collects information about participants, including information
that directly or indirectly identifies participants, if the
participant takes part in any of the challenges/events hosted by HDOR.
We receive information in a few different ways, including when
participants track, complete or upload activities for challenge. HDOR
also collects information about how participants use its platform.
Following are the place holders under which information is collected
from the participants.
A. Account and Profile
We collect basic account and profile information that helps secure
and provide participant access to his/her HDOR account.
- Participant name
- Email address
- Username and password
Use and Accessibility
All the above information is maintained confidential and neither
shared nor sold
B. Additional Profile Information
In addition, participants have options to specify profile
information.
- Gender
- Date of birth
- Organization (Corporate entity)
- Running group
- Country
- State
- City
- Accessibility
- T-shirt Size
Use and Accessibility
All the above information if provided by the participant is used to
categorize participants in different leaderboards. Except date of
birth and t-shirt size, the profile information is available
publicly on HDOR in the form of leader boards. Date of birth is used
to calculate participant age as on event start date and put him/her
into relevant age category for the purpose of leaderboard or rewards
if any. All leaderboards are publicly visible on HDOR website.
C. Activity and Use Information
An activity includes date, time and geo-location information as well
as pace and perceived exertion.
There are three mechanisms using which HDOR collects Activity data.
-
Manual FeedSubject to conditions defined for individual
challenges, HDOR collects data manually from participants. This
data is challenge/event specific and defined by mainly the kind of
challenge for e.g. for a running challenge, the participant can
manually key in the distance run, date and time taken.
-
Activity LinksActivity links are the publicly accessible URL links
which are exported from the third party applications used by
participants to keep track of activity performed by him/her. This
activity link serves as validation of the activity and may hold
data including geo-location, heart rate. Etc. The privacy policy
for these activity links are governed by the third party
applications used by the participants and HDOR does alter with the
privacy policy of the same.
-
Direct API integrationHDOR provides a facility whereby
participants can authorize HDOR to directly pull data from the
third-party applications which the participant is using to keep
track of his/her activity. The API based pulled application may
also hold data including geo-location, heart rate in addition to
Distance and time of run. The data extracted from the direct
integration is governed by the third party and participants
control the consent for HDOR to pull data from the third party
applications.
Use information includes post, joining a challenge, equipment usage,
view others’ activities and flagging activities.
Use and Accessibility
The Activity data consumed by HDOR is used to calculate ranks in
various leader boards and reward participants as per the
challenge/event the participant has registered for. All the below
data is publicly available in the form of leaderboards.
- Distance
- Pace
- Activity Link
- City (optional)
- State (optional)
- Country(optional)
- Age(optional)
Use information is used by HDOR to run analytics and create
aggregate data. The aggregate data described here is anonymously
stored and does not identify any participant. Flagging activities
are used to validate the activities in context of the challenge.
Flagging activity is publicly available and is governed by the HDOR
moderation team.
F. Embedded Content
Articles on this site may include embedded content (e.g. videos,
images, articles, etc.). Embedded content from other websites
behaves in the exact same way as if the visitor has visited the
other website.
Use and Accessibility
These websites may collect data about participants, use cookies,
embed additional third-party tracking, and monitor participant’s
interaction with that embedded content, including tracking
participant’s interaction with the embedded content if participants
have an account and are logged in to that website.
G. Content You Share
We collect information from the photos, posts, comments, kudos,
ratings, reviews, and other content participants share on the
platform, including when participants participate in other partner
events.
Use and Accessibility
The content collected from participants are shared on HDOR platform
publicly for its promotion and participant’s effort, glorification
as well as encouragement for other participants.
H. Payment Information
Users can register for events by paying a fee to HDOR. This fee is
collected either using Townscript services or directly via
integrated payment gateway.
Townscript: When a participant makes a payment on HDOR, the payment
page gets redirected to Townscript. Townscript is the third party
which processes the payment via its own payment gateway. The privacy
policy of townscript can be accessed from here. HDOR does not
collect any payment related information.
HDOR: When a participant makes a payment on HDOR via the integrated
payment gateway, the user is redirected to a page embedded with a
payment form. This form is controlled by the payment gateway
provider. HDOR uses Razorpay as payment gateway provider. Razorpay
is a fully compliant international payment gateway. The financial
information filled in this form is gathered directly by Razorpay.
HDOR neither captures nor preserves any financial data filled in by
the participants. The privacy policy of Razorpay can be accessed
from here.
Use and Accessibility
HDOR does not use or collect any payment related information from
any participant.
I. Technical Info & Log Files
We collect information from participant’s browsers, computers, or
mobile devices, which provide us with technical information when
participants access or use the platform. This technical information
includes device and network information, cookies, log files and
analytics information. Learn more about how we use cookies in our
Cookies Policy.
Use and Accessibility
The platform uses log files. The information stored in those files
includes IP addresses, browser type, internet service provider
(ISP), referring/exit pages, platform type, date/time stamp, and
number of clicks. This information is used to analyse trends,
administer, protect and secure the platform, track member movement
in the aggregate, and gather broad demographic information for
aggregate use. IP addresses may be linked to session IDs, athlete
IDs and device identifiers. The technical information and log files
are neither accessible nor sold to any third party.
J. Other Information
We may collect information from participants through third parties,
such as when we collect participant feedback through surveys.
We may also collect information about participants from other
participants such as when they give kudos, flag an activity or
comment on participant activities.
3. Aggregate Information
We do not sell participant’s personal information. We may aggregate
the information participants and others make available about the
challenges/event or platform and post it publicly or share it with
third parties. Examples of the type of information we may aggregate
include information about equipment, usage, demographics, routes and
performance. HDOR may use, sell, license, and share this aggregated
information with third parties for research, business or other
purposes such as to improve walking, running or riding in cities or to
help our partners understand more about athletes, including the people
who use their products and services. The aggregate information does
not contain any information which identifies individual participants
and does not contain any personal or contact information.
4. Sharing of Information
A. Service Providers:
We may share participant’s information with third parties who provide
services to HDOR such as postal and courier services, t-shirt vendors
for sizing and logistics partners for rewards in case partner
sponsored award is to be disbursed to the participant. We may also
engage service providers to collect information about participant’s
use of the platform over time on our behalf so that we or they may
promote HDOR or display information that may be relevant to
participant’s interests on the platform or other websites or services.
B. Legal Compliance:
We may preserve and share participant’s information with third
parties, including law enforcement, public or governmental agencies,
or private litigants, within or outside participant’s country of
residence, if we determine that such disclosure is allowed by the law
or reasonably necessary to comply with the law, including to respond
to court orders, warrants, subpoenas, or other legal or regulatory
process. We may also retain, preserve or disclose participant’s
information if we determine that this is reasonably necessary or
appropriate to prevent any person from death or serious bodily injury,
to address issues of national security or other issues of public
importance, to prevent or fraud or abuse of HDOR or its members, or to
protect our operations or our property or other legal rights,
including by disclosure to our legal counsel and other consultants and
third parties in connection with actual or potential litigation.
C. Consent-Based Sharing:
We take several measures to safeguard the collection, transmission and
storage of the data we collect. We employ reasonable protections for
participant’s information that are appropriate to its sensitivity. The
Services use industry standard Secure Sockets Layer (SSL) technology
to allow for the encryption of personal information. HDOR engages
providers that are industry leaders in online security, including
Services verification, to strengthen the security of our Services. The
Services are registered with site identification authorities so that
participants' browsers can confirm HDOR’s identity before any personal
information is sent. In addition, HDOR’s secure servers protect this
information using advanced firewall technology.
5. Data Retention
We retain participant information if it is necessary to provide the
Services to the participant and others, subject to any legal
obligations to further retain such information. Information associated
with a participant account will generally be kept until it is no
longer necessary to provide the Services or until the participant
account is deleted. In addition, participants can delete some items of
information (e.g., profile information) and can remove individual
activities from view on the Services without deleting his/her account.
Following deletion of participant’s account, it may take up to 90 days
to fully delete participant’s personal information and system logs
from our systems. Additionally, we may retain information where
deletion requests are made to comply with the law, prevent fraud,
collect fees, resolve disputes, troubleshoot problems, assist with
investigations and take other actions permitted by law.
Information connected to participants that is no longer necessary and
relevant to provide our Services may be de-identified or aggregated
with other non-personal data to provide insights which are
commercially valuable to HDOR, such as statistics of the use of the
Services. For example, we may retain publicly available mileage, pace
and ranking and other depersonalized geolocation information to
continue to improve the Services and we use aggregated information.
This information will be de-associated with the participant's name and
other identifiers.
6. Data Security
We take several measures to safeguard the collection, transmission and
storage of the data we collect. We employ reasonable protections for
participant’s information that are appropriate to its sensitivity. The
Services use industry standard Secure Sockets Layer (SSL) technology
to allow for the encryption of personal information. HDOR engages
providers that are industry leaders in online security, including
Services verification, to strengthen the security of our Services. The
Services are registered with site identification authorities so that
participants' browsers can confirm HDOR’s identity before any personal
information is sent. In addition, HDOR’s secure servers protect this
information using advanced firewall technology.
Transfers
The Services are operated from India. If a participant is located
outside of India and chooses to use the Services or provide
information to us, the participant acknowledges and understands that
his/her information will be transferred, processed and stored in
India, as it is necessary to provide the Services.
7. Your Rights and Data Deletion Requests
Participants can request deletion of their account and data via
contacting support.
After a participant makes a deletion request, we permanently and
irreversibly delete participant’s personal data from our systems,
including backups. Once deleted, the data, including account and
activities cannot be reinstated. Following deletion of the account, it
may take up to 90 days to delete personal information and system logs
from our systems. Additionally, we may retain information where
deletion requests are made to comply with the law and take other
actions permitted by law.
Reports and leader boards of events ,in which participants have
participated, will continue to showcase the participant’s position in
leader boards and public reports of the events.
Note that content the participant has shared with others, such as
photos, or that others have copied may also remain visible after the
participant has deleted his/her account or deleted specific
information from his/her own profile. The public profile may be
displayed in search engine results until the search engine refreshes
its cache.
HDOR also provides participants an option to remove individual
activities he/she has posted from view on the Services without
deleting his/her account. The activities will typically remain on
HDOR’s systems.
8. Cookies and Tracking Technologies
A “cookie” is a small piece of text file/ information stored by a web
server on a web browser/ your device about your visit on our online
platforms so it can be later read back from that browser. Cookies
allow us to recognize a specific device in order to personalize and
optimize your experience. We may use cookie and tracking technology
depending on the features offered. No Information will be collected
via cookies and other tracking technology; however, if you previously
provided Information, cookies may be tied to such information. We use
‘session’ cookies for a browser session, we also store cookies in your
computer to access your login information, and preferences. We use
cookies to enhance your experience of our services.
If you wish to change or opt out of interest-based advertising on our
website, set your preferences appropriately by clicking “Cookie
Settings”. Our online services may also contain cookies that allow you
to connect with social media networks. Also, most web browsers allow
individuals to indicate cookie preferences and block, limit, or delete
cookies at the browser level. Instructions on controlling these
preferences should be available in each browser’s help documentation.
Note that certain online services, products, features, or functions
may not be available if cookies are limited or disabled on your
browser or device.
What are web beacons? Web beacons are small graphic images that may be
included on our websites or other products. Web beacons help us
optimize our products and services and provide us and our third-party
partners with analytics information, such as how many visitors a site
receives. We may also use web beacons to measure response to email
campaigns. Web beacons are also commonly known as “clear GIFs” or
“tags”.
Third party vendors, including Google, use cookies to serve ads based
on a user’s prior visits to our website or other websites. Google’s
use of advertising cookies enables it and its partners to serve ads to
users based on their visit to our sites and/or other sites on the
Internet. Users may opt out of personalized advertising by visiting
Ads Settings. (Alternatively, you can direct users to opt out of a
third-party vendor’s use of cookies for personalized advertising by
visiting www.aboutads.info.)
9. Children’s Privacy
Our services are not intended for children under 7. We do not
knowingly collect personal information from children. If we become
aware that we have inadvertently collected data from a child, we will
delete it promptly.
10. Users in the EEA and the UK
If you are located in the European Economic Area (EEA) or the United
Kingdom (UK), HDOR Events Private Limited processes your personal
information in accordance with applicable data protection laws,
including the General Data Protection Regulation (GDPR) and the UK
GDPR. This section outlines your rights and the legal basis on which
we process your data.
Legal Basis for Processing Your Personal Information
We process your personal information only when we have a valid legal
basis to do so. These legal grounds include:
a. Performance of a Contract
We process your personal data when it is necessary to deliver the
services you have requested, such as:
- Managing your HDOR account and event registrations
- Enabling participation in virtual and physical events
- Processing payments and issuing receipts
- Providing customer support and responding to queries
- Managing competition entries and results
- Ensuring fair participation using anti-fraud tools
b. Consent
We process certain types of data based on your explicit consent. This
includes:
- Sending promotional emails and newsletters
- Collecting marketing preferences
- Running surveys or feedback forms
- Displaying personalized advertisements
You can withdraw your consent at any time by contacting us or using
the unsubscribe link provided in our emails.
c. Legitimate Interests
We may process your data where we have a legitimate business interest,
provided that your rights and interests do not override these. This
includes:
- Improving our website, services, and user experience
- Sending service-related communications (e.g., event updates)
- Preventing fraud and enhancing security
- Analyzing participation trends and usage metrics
d. Legal Obligation
We may also process your personal data to comply with legal or
regulatory obligations, such as maintaining tax or accounting records
or responding to legal requests.
Your Rights Under the GDPR and UK GDPR
If you are located in the EEA or the UK, you have the following
rights:
-
Right of Access: Request access to the personal data we hold
about you.
-
Right to Rectification: Request correction of inaccurate or
incomplete information.
-
Right to Erasure: Request that we delete your personal data
in certain circumstances.
-
Right to Restrict Processing: Ask us to restrict processing
of your personal data.
-
Right to Object: Right to Object: Object to the processing of
your data where we rely on legitimate interests.
-
Right to Data Portability: Request that we transfer your data
to another service provider.
-
Right to Withdraw Consent: Withdraw consent at any time,
where we process your data based on consent.
To exercise any of these rights, please contact us at
support@hdor.com. We will respond to your request in accordance with
applicable laws.
International Transfers
Your personal information may be stored and processed in countries
outside the EEA or the UK, including India, where our servers and
service providers are located. We take appropriate safeguards to
ensure your data remains protected, including the use of standard
contractual clauses approved by the European Commission and other
lawful mechanisms.
Contacting Us
For any data protection-related queries or to exercise your rights,
please contact:
HDOR Events Private Limited
121, 1st Floor, Ansal Tower-38, Nehru Place, New Delhi, India Email:
support@hdor.com
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes
in our practices or legal obligations. We will notify you of
significant changes by posting a notice on our website or sending an
email, where appropriate.
E. Comments
When visitors leave comments on the site we collect the data shown in the comments form, and the visitor’s IP address and browser user agent string.
HDOR uses the data primarily for spam detection and other security purposes. An anonymized string created from participant email addresses (also called a hash) may be provided to the Gravatar service to see if participants are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of a participant's comment, the participant's profile picture is visible to the public in the context of the participant's comment.