Steeleford Events
Privacy notice
Last updated 18 October 2026
This notice explains how Steeleford Events handles the personal data you give us through this portal: when you make an account here, apply to an event, keep your details or message us. Steeleford Events is the data controller for that information.
Steeleford Events is run by Steeleford Events Ltd, company number 11812963, registered at The Millroom (Unit 11), Redhill Business Park, Olveston, Bristol, BS35 4AL.
You can reach us at contact@steeleford.co.uk.
Questions about your personal data go to supercarshow@steeleford.co.uk.
Our main website has its own privacy policy at steeleford.co.uk/termsandconditions. This notice is about the portal.
1. The portal and who runs it
The portal is provided to us by our portal provider, which stores and processes your data on our behalf and on our instructions as our processor. Our portal provider also runs your sign-in account under its own privacy notice, available on request.
The portal is hosted in the United Kingdom. The services it is built on are listed below.
2. What we collect
| Account | Your name and email address, and your member type with us (for example car owner, media, exhibitor or crew) |
|---|---|
| Cars | Any car you add to your garage: make, model, year, a photo and your note. We use it to see which categories you are eligible for |
| Applications | Each event you apply to, the categories and days you ask for, your answers, our decision and the messages that go with it |
| Your details | What your member type needs: for media, your outlet and role; for exhibitors and crew, the details we ask for. Any document you upload, such as proof of insurance, with its expiry date |
| Tickets | When you buy a ticket for one of our events through TicketTailor, the order details it gives us: your name, email, phone number, address, the tickets and your answers to checkout questions. We match orders to applications by email address, including any extra email you add to your account |
| Messages | Messages you send us and our replies, and which notifications you have chosen to receive |
| Usage | When you signed in and from which internet address, for security |
Giving us your details is needed to apply; without them we cannot consider an application. Adding a car, a photo or a document is your choice unless an event requires it.
3. Why we use it
- To run applications and decide them: performance of our contract with you, or the steps you ask us to take before one.
- To check eligibility, allocate places and plan the event, including paddock and parking layouts: our legitimate interest in running a safe, well organised event.
- To match your ticket purchase to your application and remind you to buy before a deadline: performance of the contract and our legitimate interest in filling places.
- To send you event news, decisions and replies through the portal and by email. You can turn each kind of email off in your account except decisions and changes to an event you are part of.
- To keep the portal secure and prevent misuse: our legitimate interest.
- To meet legal obligations, including insurance and licensing conditions at a venue.
We do not sell your data and we do not use it for advertising. If we ever want to use it for a new purpose we will tell you first.
4. Who sees it
Our organising team sees your applications, details, documents and messages so they can run the event. Other members never see them.
| Our portal provider | Provides the portal and processes your data on our instructions |
|---|---|
| Supabase | Database, sign-in and file storage. London, United Kingdom |
| Vercel | Web hosting and cookieless page analytics. London, United Kingdom (hosting); analytics aggregated in the United States |
| Resend | Sending email (sign-in links, decisions, organiser messages). United States, under the UK Addendum to the EU Standard Contractual Clauses |
| TicketTailor | Sells our tickets. It is a separate controller under its own privacy policy; it shares order details with us so we can match them to applications |
We may share what the law requires with the police, a venue or an insurer, and we may share your details with a venue where its access rules require a list of attending vehicles or people.
Where a provider is outside the United Kingdom, the transfer is protected by the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision.
5. How long we keep it
- Your account, cars and details: for as long as you keep an account with us.
- Applications and decisions: for the season they belong to and the following two seasons, so we can see what you have attended before and answer any dispute. Then they are deleted or anonymised.
- Documents such as insurance: until they expire plus one season.
- Ticket orders: six years, as financial records.
- Messages: two years from the last message in the conversation.
Deleting your account removes your profile, cars, applications, documents and messages from the portal at once. Ticket orders already recorded stay as financial records. Backups are kept for 30 days and then overwritten.
7. Your rights
You can ask for a copy of your personal data, have it corrected or erased, restrict or object to how we use it, and have it moved to another service. You can change most of it yourself in your account. For anything else, email supercarshow@steeleford.co.uk and we will reply within one month.
You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
8. Children
The portal is for people aged 16 and over. Younger people attend our events with an adult who holds the ticket.
9. Changes
We will post any change here and update the date at the top. A material change will also be announced in the portal before it takes effect.