Privacy Policy

Privacy Policy & Terms of Use (PDPA-Aligned)

Random Sunday Highs (“RSH”, “we”, “us”, or “our”) is a community-based running and trail group. This policy outlines how we collect, use, disclose, and manage personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

1. Collection of Personal Data

We may collect the following personal data from participants:

• Basic Information: name / nickname, contact number, emergency contact details.
• Identity Information (when required): full NRIC / passport number, only for forestry permits or regulatory requirements.
• Event-Related Information: registration details, attendance records, lodging preferences, transport selections, payment proof, and insurance documents.
• Optional Information: UTMB profile link and medical or allergy information, if provided.

2. Purpose of Collection

• Event registration and participation management
• Safety and emergency contact handling
• Forestry / regulatory permit submissions
• Payment verification and administration
• Insurance validation where required
• Transport and lodging coordination
• Community communication and updates

We do not use your data for unrelated commercial marketing without consent.

3. Disclosure of Personal Data

Your personal data may be disclosed to government authorities for permits and compliance, event partners where necessary for operational purposes, and internal RSH organisers and crew. We do not sell or rent personal data to third parties.

4. Data Protection & Security

• Role-based access control
• Encryption of sensitive data
• Secure storage with no public access to documents
• Audit logs for data access and actions

Despite these measures, no system is completely secure, and users acknowledge inherent risks.

5. Cross-Border Data Transfers

Where personal data is stored or processed outside Singapore, including through cloud services or where information is provided to external authorities for permit purposes, we take reasonable steps to ensure that such data receives a standard of protection comparable to that required under the PDPA.

6. Access and Correction

You have the right to:

• request access to personal data we hold about you; and
• request correction of any inaccurate or incomplete personal data.

Requests may be made by contacting us. We may require reasonable time and appropriate verification before processing such requests.

7. Data Retention & Purge Policy

Event-Based Data: Payment proofs and insurance documents are automatically deleted 180 days after the event date. Transport, lodging, and attendance data are retained only as necessary for operational and safety purposes.

Account Inactivity Policy: If a user does not log in or interact with the system for more than 365 days, RSH reserves the right to deactivate the account and permanently delete all associated personal data, including profile information, event history, and uploaded documents.

Early Deletion: Users may request account deletion at any time. Upon verification, RSH will delete personal data and remove access to the platform, retaining only minimal records if required by law.

8. User Responsibilities

• Provide accurate and truthful information
• Ensure uploaded documents belong to them
• Comply with event rules and safety requirements
• Understand that participation is voluntary and at their own risk

9. Limitation of Liability

RSH is a community group and not a professional event organiser. RSH shall not be liable for personal injury, accidents during activities, loss or damage to personal belongings, or third-party service failures. Participants are encouraged to obtain appropriate insurance and assess their own fitness and readiness.

10. Consent

By registering for events or providing personal data, you consent to the collection and use of your data as described, disclosure where necessary for event operations, and the retention and deletion policies stated above.

11. Data Protection Officer (DPO)

If you have any questions, or wish to exercise your rights, including access, correction, or withdrawal of consent, please contact us.

• Email: dpo@randomsundayhighs.com
• Organisation: Random Sunday Highs

12. Marketing Communications and Newsletters

By creating an account, registering for an event, subscribing through our website, joining our mailing list, or otherwise providing your contact information to Random Sunday Highs ("RSH"), you consent to receiving communications relating to:

• Event announcements and registration updates;
• Hiking, trail running, and outdoor activity updates;
• Community news and announcements;
• Training sessions, educational content, and blog articles;
• Event photographs, race reports, and community highlights; and
• Promotions, discounts, sponsorships, and partner offers relevant to the trail running, hiking, and outdoor community.

You may opt out of receiving marketing communications or newsletters at any time by:

• Using the unsubscribe mechanism provided in the communication; or
• Contacting our Data Protection Officer.

Please note that opting out of marketing communications does not affect our ability to send essential operational communications, including but not limited to:

• Event registration confirmations;
• Payment notifications;
• Safety advisories;
• Transport and lodging arrangements;
• Forestry permit requirements;
• Event cancellations or schedule changes; and
• Other administrative communications necessary for participation in RSH activities.

RSH does not sell, rent, or disclose participant contact information to third parties for their independent marketing purposes without prior consent.

13. Updates to this Privacy Policy

RSH reserves the right to amend, update, or revise this Privacy Policy from time to time to reflect changes in legal, regulatory, operational, or business requirements.

Any updated version will be published on this website and shall take effect from the date of publication unless otherwise stated.

Continued use of our services, participation in our activities, or maintenance of an account after such updates constitutes acceptance of the revised Privacy Policy.