We at Spartan AUS 3.0 Pty Ltd (including our affiliates, “Spartan Race”, “we”, “us”, “our”) are strongly committed to protecting the privacy of your Personal Information. This privacy policy (“Privacy Policy”) is applicable to the primary Australian websites and digital properties operated by us under the Spartan Race, Tough Mudder, Highlander Adventure, DEKA, and other brands we operate from time to time, any related Australian-facing websites, registration platforms, event microsites and digital services (the “Sites”). This Privacy Policy also explains our collection and processing of Personal Information (as described below) that you may provide to us when purchasing a product, registering for an event (“Events”) as a participant, volunteer, spectator or other such capacity, communicating with us, or otherwise interacting with us including use of the Sites and related services (the “Services”).
Depending on the type of Service or the location where the Services take place, different Spartan entities may be involved in the processing of your Personal Information. For Events and Services operated in Australia, Spartan AUS 3.0 Pty Ltd is the primary entity responsible for handling Personal Information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Where applicable, Personal Information may also be accessible to overseas franchisors, licensors or affiliated entities through shared registration, event management or customer administration systems, as further described in this Privacy Policy.
- Purpose
The purpose of this Privacy Policy is to describe how Spartan AUS 3.0 Pty Ltd collects, uses, stores and discloses Personal Information in connection with the operation of its Events, websites, registration platforms, products and services in Australia. This Privacy Policy is intended to inform individuals about: the types of Personal Information we may collect how and why we may collect, use and disclose Personal Information
how Personal Information is stored and protected
how individuals may access and correct their Personal Information, and
how to make a complaint about the handling of Personal Information.
Please be advised that the practices described in this Privacy Policy apply only to the Personal Information we collect directly through our Sites and Services. They do not necessarily apply to information you provide to:
third party websites or platforms , including registration, ticketing, timing or results platforms (such as Active Network, Ticket Socket, ChronoTrack, Athlinks or similar providers,
other third parties with links on our Sites,
websites, pages or services operated by our overseas franchisors or global brand partners, which may be governed by separate privacy policies, or
websites of vendors, sponsors, partners, affiliates or social networking services (such as Facebook, YouTube, Instagram, X/Twitter or similar platforms).
We encourage you to review the privacy policies of those third parties and global sites, as their practices may differ from ours. - Contact
If you have any questions about this Privacy Policy, do not see your concerns addressed here, or wish to request access to or correction of any Personal Information we have collected, you should contact us by email at info@spartan.com.au. - Information We May Collect
Except as disclosed below, we do not sell, barter, give away, or license your Personal Information.
(a) Information You Provide to Us. If you have registered with one of our Brands, or ordered items from us, you may have provided us with your name, email address, telephone number, postal address, postal/ZIP code, gender, bank account details, and payment information. If you entered an Event you may also have provided your date of birth, photograph, and information about the person who serves as your emergency contact. We also may collect and store Personal Information that we receive from other sources (for example information we receive from Active Network, TicketSocket, ChronoTrack, Athlinks, or other registration, timing or results providers we may utilise when you register for an Event, attend as a spectator, or otherwise interact with our Services). Please be advised that Active Network, TicketSocket, ChronoTrack, Athlinks and similar third-party providers have their own privacy policies and you should refer to those policies for any questions you may have about the information they may collect about you when you register for an Event, attend as a spectator or use their services.
(b) Information We Collect Automatically. Even if you do not request a newsletter or fill-out a survey, when you interact with our Sites, we may collect certain information automatically. For example, our servers may keep activity logs that track visitors to our Sites. The information collected may include, but is not limited to: IP address, registered domain or home server, time and date of access, web page(s) visited, number of clicks, software crash reports, type of browser used, session identification numbers, search terms, search results, access times, and referring website addresses.
(c) Cookies and Spyware. We do not install spyware on your computer, nor do we use spyware to retrieve information from your computer.
Like many other websites, we, and/or our third party vendors may use cookies, which are small text files stored on your computer or device when you visit certain online pages that record your preferences (“Cookies”).We use Cookies to track your use of our Sites and their features, monitor traffic, improve site functionality, and make our Sites easier and/or more relevant to users.
You may also occasionally receive Cookies from companies with links on our Sites. We do not control those Cookies, and they are not subject to this Privacy Policy.
You have the ability to accept or decline Cookies. Most web browsers automatically accept Cookies, but, if you prefer, you can usually modify your browser setting to decline Cookies. For more information on Cookies and how to manage them, you may consult resources such as those provided by the Interactive Advertising Bureau at www.allaboutcookies.org.
(d) Google Analytics. We use Google Analytics on our Sites. Google Analytics is a web analytics service provided by Google LLC. Google Analytics uses Cookies to collect information about how visitors use our Sites. The information generated by Cookies (including your IP address) may be transmitted to and stored by Google on servers located outside Australia, including in the United States. Google uses this information for the purpose of evaluating use of the Sites, compiling reports on website activity, and providing other services relating to website activity and internet usage.
Google may also transfer this information to third parties where required by law, or where such third parties process the information on Google’s behalf. By using our Sites, you consent to the processing of data by Google in the manner and for the purposes described in this Privacy Policy.
(e) No Information Collected From Children. Our services are not directed to or intended for use by children, except where children are registered for Events by their parents or legal guardians. We collect Personal Information about children only where we have the express consent of a parent or legal guardian. Information collected about children is used only for the purposes of administering Event participation, safety, results, and related Services, and where consent is provided, to publish or disclose a child’s race results on our Sites or at Events.
If we become aware that we have collected Personal Information directly from a child without appropriate parental or legal guardian consent, we will take reasonable steps to delete that information, except where retention is required or permitted by law.
This section is intended to operate consistently with applicable Australian law and, where relevant, other applicable international child-privacy requirements. - How We May Use Your Information
Except as otherwise described in this Privacy Policy, we do not use or disclose information about your individual visits to our Sites or your Personal Information collected online to parties other than those with whom we partner or are affiliated, except as necessary to provide the Services, with your consent, or as otherwise permitted or required by law.
(a) Personal Information Obtained in Connection with the Services. We use your Personal Information in different ways depending on the nature of the Services, communications, or other interactions between you and the Event Producer. This includes, for example, registering you for Events, processing payments, communicating with you, delivering services, administering Events, and improving our Sites and offerings. The table below describes the categories of Personal Information we may process, as well as examples of how and why we use the information.
Category of Personal Information
How and Why We Use the Information
Name and contact details
To deliver or confirm purchases
Send service-related communications by email or post regarding orders or Services
Enable registration for and participation in Events
Enable creation and administration of user accounts
Provide customer service and support; and
Send information by email, SMS or post about Events, products or services, where permitted.
Date of birth information
To enable entry into and participation in Events that have age restrictions; and
To create and administer user accounts where applicable.
Photographs and audiovisual recordings
To enable Event participation, timing, results and identification; and
To share publicly or use in connection with Event promotion, media, or related content, where consent has been provided.
Purchase and financial account information
To enable our partners, affiliates and service providers to process payments for Event registrations, products or services
To administer refunds, chargebacks or related financial transactions.
Emergency contact information
To respond to emergencies or health incidents arising during an Event in which you are participating.
Information collected automatically
To enable website analytics; monitor and improve website performance and functionality; understand how users interact with our Sites; and make the content, advertising and marketing messages displayed on our Sites more relevant.
(b) Use of Anonymous (De-Identified) and Aggregated Information. We may use information collected automatically, or derived from Personal Information, in a de-identified or aggregated form, to help us understand how users interact with our Sites and Services, to improve functionality and to analyse segments and usage trends. De-identified or aggregated information does not identify you personally and may be shared with partners, service providers or other third parties for these purposes.
(c) Third-Parties. We may occasionally engage third party representatives, agents, affiliates, and partners to perform functions on our behalf, such as Event registration, timing and results processing, payment processing, race photography purchases, marketing, analytics, IT services and data hosting (for example, platforms such as TicketSocket, Active Network, Stripe or similar providers). These third parties may have access to Personal Information only to the extent necessary to perform their services, and are required to handle that information in accordance with their own privacy policies and applicable laws.
(d) Legal and Emergency Situations. We may use or disclose Personal Information where we reasonably believe it is necessary to:
comply with applicable laws, regulations, court orders or lawful requests
protect and defend our legal rights or property or Sites, or those of our users or partners
respond to or manage an emergency or health incident, or
protect the safety of us, our affiliates, agents, the users of our Sites, participants, staff and volunteers at our Events, or the public.
For example, if an Event participant is injured, it may be necessary to disclose relevant Personal Information, including health or emergency contact details to medical care providers or emergency services.
5. How We Share Personal Data
Your Personal Information may be used by the Event Producer and its related entities, affiliates, licensors or franchise partners for the purposes described above and for accounting, tax, administrative, and other internal business purposes.
We may disclose some or all of your Personal Information to third parties in accordance with contractual arrangements we have in place with them, including representatives, agents, affiliates, and partners that perform functions on our behalf, such as Event registration, timekeeping, race results processing, photography services, marketing, analytics, IT services, data storage, payment processing, and survey and market research. Stripe, Inc. (“Stripe”) acts as a payment processor for Event registration purchases; and Stripe processes Personal Information in accordance with its own privacy policy.
We may also share your Personal Information with third-parties so that they can send you communications about their products and services, however we will only share your Personal Information under these circumstances where you have provided consent or where such communications are otherwise permitted by law. You may opt out of receiving marketing communications at any time using the unsubscribe or opt-out mechanisms provided
If we determine it to be necessary, we may also disclose your Personal Information to a third party:
to respond to an emergency or health incident;
to comply with applicable law, court order, or lawful request from law enforcement or other authorities;
to protect the legitimate rights, privacy, property, interest or safety of the Event Producer, its personnel, participants, customers, business partners or the general public;
in connection with a change in ownership or control of the Event Producer such as a merger, sale, acquisition, insolvency or bankruptcy; or
to prevent, detect or investigate actual or potential fraud or other unlawful activities.
Race/Event Photos. If you participate in an Event, and provided consent, we may disclose limited Personal Information (Such as your name or contact details) to third-party photography or media service providers engaged in connection with the Event, for the purpose of providing Event-related photography or media services. Additionally, by participating in an Event, you also acknowledge that such service providers may photograph, film, record and/or otherwise capture your participation in the Event, subject to their own terms and conditions and privacy policies.
6. Linking to or from Other Websites
Our Sites may contain links to, or frame, other websites operated by our affiliates, partners or third parties (for example, event registration, timing or results platforms). Please be advised that the practices described in this Privacy Policy apply only to information collected by us through our Sites and Services, and do not apply to information collected through other websites or platforms. Those other websites may send their own cookies to you, collect data or request Personal Information. We encourage you to be aware of when you leave our Sites and to read the privacy policies of any third-party websites or services that you visit. To the extent permitted by law, we are not responsible for the privacy practices or content of third-party websites or services.
7. Security
The Event Producer maintains appropriate security measures designed to reduce the risk that Personal Information is lost, misused, or accessed, disclosed or altered without authorisation. Access to Personal Information is restricted to persons who have a legitimate business need to access it for the purposes described in this Privacy Policy. Those who process Personal Information on our behalf are required to do so in an authorised manner and are subject to confidentiality obligations. We have procedures in place to identify and respond to suspected data security incidents involving Personal Information and will notify affected individuals and the relevant regulators of eligible data breaches where required by applicable law.
8. International Transfer of Personal Information
Your Personal Information may be transferred to, stored in, or processed in countries outside Australia, including the United States and other jurisdictions where the Event Producer, its related entities, licensors, franchise partners, or service providers operate or maintain systems. These overseas recipients may include, for example:
event registration, ticketing, timing or results platforms;
payment processors;
data hosting, cloud storage and IT service providers;
analytics, marketing and communications providers; and
franchisors or brand licensors that support the administration, operation or delivery of Events.
By registering for or participating in an Event, or otherwise interacting with the Event Producer, and the Sites or Services, you acknowledge and consent to the overseas disclosure of your Personal Information as described in this Privacy Policy.
You acknowledge that privacy laws in overseas jurisdictions may not provide the same level of protection as Australian privacy laws, and that, to the extent permitted by law, the Event Producer is not responsible for the handling of Personal Information by overseas recipients once disclosed in accordance with this Privacy Policy.
Nothing in this clause excludes, restricts or modifies any rights you may have under the Privacy Act 1988 (Cth).
9. Your Rights
You have certain rights in relation to the Personal Information we hold about you under the Privacy Act 1988 (Cth).
Access and Correction
You may request access to the Personal Information we hold about you and request that it be corrected if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading.
You can exercise these rights by contacting us using the information in the Contact Us section of this Privacy Policy. We may require you to verify your identity before responding to a request and in order to prevent the unauthorised disclosure or misuse of Personal Information.
Limitations
Bear in mind that your rights in relation to your Personal Information are not absolute. In some circumstances, we may refuse or limit access to Personal Information, or decline to make a requested correction, where permitted or required by law. If we do so, we will provide you with reasons for our decision, where required by law.
Fees
We will only charge you for requests to access your Personal Information where they are unreasonable, unfounded or excessive. If we are unable to honour your request, or before we charge a fee, we will notify you in advance.
Impact on Services
Please note that if you request access to, correction of, or deletion of certain Personal Information, this may affect our ability to provide Events, Services or communications to you.
10. Retention of Personal Information
We retain Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, including for any legal, accounting, insurance or reporting requirements. In determining appropriate retention periods, we consider the nature and sensitivity of Personal Information, the purposes for which it is used, the potential risk of harm from unauthorised access, use or disclosure,whether the purposes can be achieved through other means, and any applicable legal or regulatory requirements.
Where Personal Information is no longer required for these purposes and is not required to be retained by law, we will take reasonable steps to destroy or de-identify it.
11. SMS/MMS Communications
Use of SMS and MMS
Where you provide us with a mobile phone number, we may use SMS or MMS messages to communicate with you in connection with your account, Event registrations, transactions, event participation, safety, operational updates, customer service matters, and other service-related communications, as described in this Privacy Policy.
We may also use SMS or MMS messages to send you marketing or promotional communications, where permitted by law, and as described in this Privacy Policy.
You may opt out of receiving marketing or promotional communications at any time using the opt-out mechanisms embedded in such communications.
Opting Out of Marketing or Promotional Messages
You may opt out of receiving SMS or MMS marketing or promotional messages from us at any time using the opt-out mechanisms embedded in such communications.
Please note that opting out of marketing messages does not prevent us from sending you SMS or MMS messages that are necessary for service, safety, or administrative purposes (for example, Event updates, emergency notifications, or transactional messages).
Third-Party Service Providers
We may engage third-party service providers to assist in delivering SMS or MMS messages on our behalf. These service providers may have access to Personal Information only to the extent necessary to provide the messaging services and are required to handle such information in accordance with their own privacy policies and applicable laws.
12. Changes to this Policy
This Privacy Policy was last updated 17 December 2025.
We may amend this Privacy Policy from time to time, at our sole discretion. Any changes will take effect when the updated version is published on our Sites. We encourage you to review this Privacy Policy periodically to stay informed about how we handle Personal Information. We will update the ‘last updated’ date when we make changes, and may also notify you of material changes in other ways, including by email.
13. Contact Us, Manage Your Personal Information
You can contact us if you have questions about this Privacy Policy, do not see your concerns addressed here, or wish to request access to or correction of any Personal Information we hold about you. You may opt-out of receiving marketing communications by email, SMS or post at any time using the unsubscribe or opt-out mechanisms provided in those communications. To contact us please send an email to info@spartan.com.au. We aim to respond to privacy enquiries and requests within a reasonable time.
If you are not satisfied with our response to a privacy-related concern or complaint, you may also contact the Office of the Australian Information Commissioner (OAIC).
