Privacy Policy
Bib Flip Privacy Notice
This policy describes how Bib Flip LLC (“Bib Flip” or the “Company”) collects, aggregates, stores, safeguards and uses the data and information (including non-public personal information, or “NPI”) provided by users through our website, bibflip.com (the “Site”), as well as information collected by us through other means, including by email, over the phone, or in offline communications. This Site is operated by the Company and has been created to provide information about our company and our services and related services (together, the “Services”).
We take your privacy and the security of your information seriously. This policy explains:
What information we collect, and how we use it
Choices you can make about the way your information is collected and used
How we protect personal information electronically and physically
This policy is incorporated into and a material term of your registration and/or use of Bib Flip’s products and services. By using the Site or Services, you consent to the practices set forth in this Privacy Policy.
General Statements
This is the Privacy Policy for Bib Flip LLC, but we’ll refer to ourselves as “Bib Flip,” or “the Company,” or use “we/us/our” pronouns.
We have a Privacy Policy for a few reasons. First: it’s required by law. Second, and more important, we want you to understand how we use data so you can make an informed decision about how you share with us, what you share with us, and how we use your information. Finally, our privacy policy sets internal rules for how we use data and holds us accountable: if we don’t tell you what we’re doing here, in the Privacy Policy, we won’t do it at all unless we specifically obtain your permission.
We want this Privacy Policy to be understandable on its own, but there are concepts, terms, and phrases that have specialized meaning because they come directly from privacy laws. You can look at the “Further Reading” section to get a clearer idea of what these terms mean.
We operate in more than one state and specific laws in many places require those specific things are included within a privacy policy. We believe that including all these requirements throughout a privacy policy makes it harder for the policy to be understood.
Information About Bib Flip and this Privacy Policy
This Privacy Policy outlines how Bib Flip collects and processes your personal data through your use of Bib Flip’s websites, any related app, or any other services sponsored or controlled by Bib Flip (a conference or an in-person survey, for instance). In other words, if we’re collecting personal data in any form, this Privacy Policy applies.
Along those lines, Bib Flip is the “Controller” of the personal data it collects, which means we are the entity that decides how to collect, process, and use personal data.
We’ll provide links to this Privacy Policy wherever we can – on our websites, at conferences, on another website before you take a survey, etc. You should read this Privacy Policy, think about it, ask questions, and decide if you’re comfortable with it. Also read our Terms and Conditions, which control how we provide our services, and any other notices or policies we post so that you can make an informed decision about interacting with us.
When we make a change to this Privacy Policy, we’ll post a notice for you to review. This Privacy Policy was last changed on October 1, 2022.
We are not responsible, though, for links to third-party sites that we present to you, either on this website or elsewhere online. Once you access sites or apps via those links, our Privacy Policy no longer applies, and so you’ll need to read their privacy policies as well.
What Data Are We Collecting About You?
Not all data is “personal data” under the law, but a lot of it is, and more than you might think. Because we operate in more than one country, we’ve taken the approach that the broadest definition of personal data is best, because it allows us to explain what we collect more simply. And so, for Bib Flip’s purposes, personal data is:
Any information that can, either alone or with other information, be used to identify an actual human person or their household.
These are the categories of personal data that we collect:
“Basic Data” means your name and your email address. Basic Data is collected only if you elect to provide it to Bib Flip in the course of using the Bib Flip Services or our website.
“Transaction Data” is all Basic Data plus any other information related to the purchase of a bib or service from us.
“Technical Data” means any information we collect as we operate our websites and apps, like your IP address when you connect to our websites, your mobile device identifier, what browser you used to access our site and what operating system you’re using, the movement of your mouse on the screen (mouse hovers and clicks, for example) the length of time you spend on our website, any extensions or apps you use along with ours.
“Race/Event Data” means any data about your attendance at, participation in, or activity during related to a race or event. This can include data such as your registration information for a race/event, any material you submit, documents you review or download, etc.
“Profile Data” means the more detailed Bib Flip profile information that you’ve set up and shared with us. Your profile data includes your account id, your password, your activity while logged in (including user-generated content) and history, and races you’ve registered for or attended.
“Feedback and Marketing Data” means information that we collect to suggest new products or services that you might find interesting. This includes any surveys or questionnaires we conduct (whether they’re in an email, on our website, or at a physical location). Feedback and marketing data also means all other forms of Personal Data, your preferences when it comes to how, when, and why we communicate with you about our products and services, and any interactions you have with our marketing materials (for instance, whether you opened a survey or responded to an in-store questionnaire). Feedback and Marketing Data is collected whenever you provide the types of feedback described in this section or interact with our marketing materials. We talk a lot more about marketing in the section below called “Marketing our Products.”
“Third Party Data” means any personal data about you that we obtain – whether by purchasing it or simply receiving it – from anywhere outside of Bib Flip. We don’t control how those third parties get their data about you, but we won’t take any personal data about you from a third party unless they can prove to us that they had your data lawfully and properly in the first place and are permitted to share it with us. Often times, this data is publicly available information like an address, business title, or social media profile, but it could be just about anything.
As explained below, we may combine different kinds of personal data in the performance of our services. We’ll also sometimes combine the personal data you’ve given us with non- personal data. For example, we might combine data about the time and location of your race with data about your purchase of a bib to improve our offerings and make changes to our services. If the combined data can identify you, we’ll treat it like personal information, even though some parts of the combined data (like the weather at a race) can’t identify you.
We do not collect any “Special Categories” of Personal Data about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data, or information about criminal convictions or offenses.
Cookies
We use Cookies and other tracking technology to make our websites operate properly and to provide you with a better experience. You can control how non-technical cookies operate on our sites by clicking on the cookie banner that appears when you visit one of our sites.
How We Collect Personal Data
We collect personal data in a variety of ways, depending on how you interact with us, including:
Direct interactions. You may give us your Basic, Purchase, Technical, Session, Profile, or Feedback and Marketing Data, by interacting with us, as when you: sign up for or take part in sessions;
create an account or profile;
create any user-generated content;
engage in any Bib Activity or other transactions;
sign up to receive information, including marketing information, from us;
make a claim based on your registration or communicate with us about your account;
contact customer support or request technical assistance;
access Bib Flip via social media accounts or Bib Flip’s website(s);
enter a promotion or survey; or
give us feedback or reviews.
Through automated technologies or interactions. As you interact with our website, we automatically collect Product Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Product Data about you if you visit other websites employing our cookies.
From third parties or publicly available sources. We may receive personal data about you from various third parties and public sources. We also store or process personal data through our third-party vendors, including
completing sales;
hosting and managing sessions
identifying potential new customers or conducting market research
monitoring activity on our website, including user interaction and fraud prevention, and;
managing email and marketing campaigns
Why (and How) We Use Personal Data
We only use personal data when we have a lawful basis for doing so. Sometimes we rely on your consent to use personal data. When we do, we will always give you the option to withdraw your consent at any time. 6.2 The following list sets out how we use personal data, and the lawful basis for doing so:
Completing a transaction. We need Basic Data and Purchase Data in order to complete bib transactions. We need this information in order to be able to fulfil our contract to act as a marketplace.
Providing customer service. Depending upon what you contact us for and request, we will use any and all categories of Personal Data we have in order to provide you with customer service. For instance, if you call us to discuss a problem with your session in the marketplace, we’ll use Basic Data, Purchase Data, and likely also Profile Data to be able to respond to your query. We need this information in order to be able to fulfill our part of our contract with you and because we have a legitimate interest in being able to respond to your questions.
Marketing to you and others. See section 7 below, “Marketing our Products.”
Managing our website and services. We’ll use Basic Data, Technical Data, Purchase Data, and Profile Data to keep our website and other online services operating properly (fraud detection and prevention, site maintenance and updates, app maintenance and updates, IP logs). We use this data because we have a legitimate interest in administering/improving our site and apps, running IT services, ensuring network security, preventing fraud and because we need to demonstrate our compliance with data security obligations both as a legal matter and if we are involved in a business reorganization (a merger or acquisition)
Creating insights and analysis. We’ll use Basic Data, Event Data, Profile Data, and Feedback and Marketing Data to analyze what our users are doing, how they use their accounts, what kind of races are trending, how they use other products and services related to ours, how we might be able to build better products (better layouts for a race exchange, for instance) and to understand general trends in the market. We may share or sell those analyses to third parties, and we may also sell or share data about you to providers who would like to market to you. As we explain below, you can decide how much information we share with third parties.
Rating, grading, and evaluating a buyer or seller’s experience. We will store and information around transactions within the marketplace. This will include: names, prices, transaction dates, and any related UGC. This information will not be shared with any other individual or entity. We need this information in order to be able to fulfil our part of our contract with you, and so collecting this data is necessary to the performance of our contract with you.
Creating and managing your profile. When you create a profile, you agree to share Basic Data, Usage Data and Profile Data with us so that we can provide you with a tailored, custom experience (use metrics, recommendations, trends, etc). We need this information in order to be able to fulfil our part of our contract with you, and so collecting this data is necessary to the performance of our contract with you
We also use this information to create our own internal user profile for you, which we use to market products to you, deliver content that we think is relevant to you, to advertise to you, to learn about you in particular and our customers more generally, and to create an analysis of our business, our customers, and our market. We have a legitimate interest in doing these things in order to grow our business and learn about our industry , but we will only process this information in this way if you have agreed (consented) to us doing so, and you can withdraw your consent at any time
6.3 We will only keep your Personal Data for as long as necessary under the circumstances in which we collected it, including our obligation to hold onto it for legal, regulatory, or accounting purposes. If we are able to make data completely anonymous (that is, it can’t be used to identify you), we may keep that data indefinitely for statistical or analytic purposes.
Marketing our Products
A general note on marketing data: We advertise because we want people to participate in to, and get value from, our marketplace, and because we want our business to succeed. That means we place ads, send emails, run promotions, send out questionnaires, take surveys, conduct interviews, and do everything else that a marketing department does to try to create a brand. We’re telling you this bluntly so that you have an easier time understanding what we mean when we talk about marketing: it’s our effort to help our business grow.
Part of that growth is understanding what our existing users like, what they don’t like, and what they might like in the future. We want to know, for instance, why our users are exchanging bibs for 10Ks at a much higher rate than for marathons. We think that knowing what our customers like will help us improve our existing services and design and deliver new, better ones in the future.
The most important part in all of this: you have control over how, and if, we market to you. The basis upon which we use this information is your consent, and you can withdraw that consent at any time. You can always decide how much information you share and how we contact you when it comes to marketing.
Promotional offers We use your Basic, Usage, Profile, and Feedback and Marketing Data to create a marketing profile for you so that we can send you information about what sessions, products, or services you may find interesting. If you’ve opted-in to receive communications, we’ll send you emails, texts, or other communications in the format you’ve chosen. We may ask you to opt-in to
marketing communications via email, on our website, in the app, or in a physical location like a store or a conference.
Third-party marketing As explained above, we do share Marketing and Profile data about you with commercial partners and third parties who may want to directly market to you. We will get your express opt-in consent before we share your personal data with any other company for their own marketing purposes.
Opting out You can ask us or third parties to stop sending you marketing messages at any time by contacting us at any time. Where you opt-out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience, or other transactions.
Cookies
Cookies are small files that track your activity online. Some of them are purely functional (they allow websites to load faster) and some of them are for marketing (tracking how you interact with websites). We use cookies for both purposes, but you can read more about cookies (and how to block them) in our cookie policy.
Change of purpose We only use your Personal Data in the ways we’ve outlined in this Privacy Policy, unless we think there is a reason that we can use it for another purpose that 1) is fair, and 2) is compatible with the original reason we collected it. We’ll tell you if we need to use your Personal Data for a purpose other than the original purpose for which we collected it If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Data retention We delete or anonymize your Personal Data as soon as it is no longer required for the purposes we have collected unless we are legally required to continue processing your Personal Data. The one primary exception here is that, if you ask us to delete your data and “forget” you, or ask us not to contact you, we’ll keep your email address on our master do-not-contact list as proof that we followed your request and so that we can avoid contacting you in the future.
Automated Decisions We don’t use an automated decision-making system (an algorithm or machine learning tool) to make decisions about you. We’ll use a system that makes recommendations for what we think you’ll like, but acting on those recommendations is always in your hands, not ours.
Disclosures of your personal data
Sometimes, we will share your Personal Data with:
Outside third parties. As explained above, we use outside vendors and service providers to enable our company to function. The kinds of third parties we share your data with are:
Service providers acting as processors who provide IT and system administration services including cookies/user experience/analytics.
Professional advisers acting as processors including lawyers, bankers, auditors and insurers based outside the EEA who provide consultancy, banking, legal, insurance and accounting services.
We’ll also share Personal Data if we buy, sell, transfer, or merge parts of our business with another company.
Regulators. If we are subject to an audit, review, or other inquiry by a properly constituted regulatory agency (like the Federal Trade Commission, for instance), they may require us to share the data we have, including Personal Data.
Subpoenas and legal demands. We have to comply with lawful subpoenas or investigative demands from courts and law enforcement agencies.
We share your Personal Data outside third parties only to enable us to fulfil our part of our contract with you, because you have consented to it, or because it’s necessary for a legal or regulatory requirement. None of these third parties are allowed to use your Personal Data in any way that is different from the reasons we outline here.
International transfers
We are based in the United States and will transfer data from other parts of the world as outlined in this Privacy Policy.
Data security
We work hard to keep your data (and ours) safe. We use a variety of tools – technological, administrative, and physical – to keep data secure. These safeguards are designed to ensure that whatever Personal Data we keep is protected against unlawful access or use. Despite our best efforts, however, no security measures are completely impenetrable.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.