runem
Legal

Privacy Policy

How personal data is handled when clubs and members use RUNEM. Last updated 15 June 2026.

1. Who we are and our role

RUNEM is operated by RYM Property Limited, registered in England and Wales (company number 15613602), trading as RUNEM. Our registered office address is on the public register at Companies House. For privacy questions, please use our contact form. We are registered with the Information Commissioner's Office (ICO) under registration number ZC121941.

Our role depends on the data. For a club's own account and our marketing, RUNEM is the data controller. For the personal data of a club's members, the club is the data controller and RUNEM is the data processor, handling that data on the club's behalf and on its instructions. If your enquiry is about your membership data, please contact your club first; we will support the club in answering it.

2. The data we handle

For club accounts and enquiries: the names, email addresses and messages of club administrators and people who contact us.

For members, on behalf of clubs: the details a club or member enters, which can include name, date of birth, contact details, address, emergency and, for junior members, parent or guardian contacts, any medical or accessibility notes the club asks for, England Athletics registration and URN, membership category, status and history, and a record of payments. Payments are processed by Stripe; we receive a confirmation and store the last four digits and card type for reference, never the full card number.

Technical data: basic information needed to run the site securely, such as a session cookie and a security token. With your consent we also use Google Analytics to measure how the site is used, which you can accept or reject and change at any time; see our cookie policy. We do not use advertising cookies.

3. How and why we use it

  • To provide the service: setting up memberships, taking payments, sending receipts and the emails a club chooses to send, such as welcome and renewal reminders. Lawful basis: performance of a contract, and the club's instructions as controller.
  • To run and secure the platform, prevent misuse and keep records accurate. Lawful basis: our legitimate interests in operating a reliable, secure service.
  • To meet legal obligations, such as keeping financial records. Lawful basis: legal obligation.
  • For our own marketing to clubs and prospects, where appropriate. Lawful basis: consent or legitimate interests, and you can opt out at any time.

We do not sell personal data, and we do not use member data for our own marketing.

4. Who we share it with

We use a small number of trusted providers to run the service, acting as our sub-processors: Stripe for card payments, Brevo for transactional email, and Krystal for hosting. They handle data only to provide their part of the service. We may also share data where the club instructs us to, or where the law requires it. Where a club is affiliated to a governing body such as England Athletics, the club, as controller, decides what is shared with it.

5. Where data is held

We aim to keep data within the UK or the European Economic Area. Some providers, such as Stripe, may process limited data outside the UK or EEA. Where that happens, appropriate safeguards are in place, such as the UK International Data Transfer Agreement or equivalent approved mechanisms.

6. How long we keep it

We keep member data for as long as the club needs it to run its membership, and on the club's instructions as controller. When a member is removed under a data deletion request, we blank their personal details but retain the minimum financial footprint, such as the membership number, payment amounts and dates, that is needed for the club's accounting and legal records. Financial records are kept for as long as the law requires. When a club closes its account, we delete its data within a reasonable period except where we must keep limited records by law. Account and enquiry data is kept only as long as needed for the purpose it was given.

7. Your rights

You have rights over your personal data, including to access it, correct it, ask for it to be deleted, object to or restrict certain uses, and ask for a copy in a portable format. For member data, the club is the controller, so please contact your club first; we will help the club respond. For data where RUNEM is the controller, contact us directly. You can also complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to put things right first.

8. Security

We take reasonable technical and organisational steps to protect personal data, including encrypted connections, restricted access, and processing card payments through Stripe so that full card details never reach our systems. No system is completely secure, but we work to keep risks low and to respond quickly if something goes wrong.

9. Junior members

Clubs may hold data about members under 18. Where they do, the club, as controller, is responsible for obtaining any consent needed from a parent or guardian and for handling junior data appropriately. RUNEM processes that data only to provide the service to the club.

10. Changes

We may update this policy from time to time. The current version is always on this page with the date it was last updated.

11. Contact

For anything to do with privacy, please use our contact form.