Privacy Notice

Last updated: 16 July 2026

Who we are

TrailTrack.co.uk is operated by the TrailTrack team. We are the data controller responsible for the personal data we collect through our website and services.

If you have any questions about this notice or how we handle your information, please contact us at:
Email: team@trailtrack.co.uk

What personal data we collect

We collect the following types of personal data:

  • Identity and contact information: your name and email address when you register for a member account.
  • User-uploaded content: GPX route files you choose to upload to your private member account. These files may contain personal data such as location information, timestamps, or waypoints that could identify you or others.
  • Strava activity data: if you choose to connect your Strava account, we import your outdoor activity data (including GPS tracks, activity name, date, distance, duration, and heart rate where available) to power our fell classification tracking features. See the Strava Integration section below for full details.
  • Usage data: basic technical information about how you use the site (e.g., IP address, browser type, pages visited), collected automatically via server logs and cookies.
  • Other information: anything you voluntarily provide when contacting us (e.g., via support emails).

We do not collect payment details directly (if payments are involved, they are handled securely by third-party providers who do not share card information with us). We do not knowingly collect special category data (e.g., health information) or data about children.

How we collect your data

  • Directly from you when you register, upload GPX files, or contact us.
  • Automatically through website technology (e.g., server logs).
  • From Strava, if you choose to connect your Strava account and authorise TrailTrack to access your activity data.

Strava Integration

TrailTrack offers an optional Strava integration. If you choose to connect your Strava account, we will import your outdoor activity data to automatically detect and record fell summits against UK hill classifications (such as the Wainwrights, Munros, and Corbetts).

The data we import from Strava includes:

  • Activity name, type, date, distance, and duration
  • GPS track data (used to match routes against fell databases)
  • Heart rate data where available (displayed on your own activity record)

Attribution:Every activity imported from Strava is clearly labelled as “Imported from Strava” wherever it appears in TrailTrack.

Visibility: You control who can see your Strava-imported activities. Activities you set to private in TrailTrack are visible only to you. Activities you set to public may be visible to other TrailTrack members. You can change the visibility of any activity at any time from your account.

Disconnecting Strava: You can disconnect your Strava account at any time from your account settings. When you do, we will remove your Strava-imported activity data from our systems promptly.

We do not use your Strava data for any purpose other than fell classification tracking. We do not sell it, share it with third parties (beyond the hosting infrastructure required to run the service), or use it to train artificial intelligence or machine learning models. Our use of the Strava API is governed by Strava's API Agreement.

How we use your personal data

We process your personal data only for the following purposes:

  • To provide and manage your member account and our services (including storing and displaying your private GPX routes within your account)
  • To communicate with you about your account, uploads, or support queries
  • To keep the website secure and improve it
  • To comply with legal obligations (e.g., responding to lawful requests)

Important note about GPX routes

All GPX routes you upload are private to your member account only. We will never access, use, analyse, share, or process your GPX files (or any location-derived data from them) for any other purpose — including marketing, research, product improvement, or sharing with third parties — unless you give us your explicit, separate consent in advance. We treat these files as strictly confidential user content.

Who we share your data with

We do not sell or rent your personal data. We may share limited data only when necessary:

  • With service providers who help run the site (e.g., hosting providers, email services) under strict confidentiality agreements
  • If required by law (e.g., to authorities)

No third parties receive your GPX routes without your explicit consent.

International transfers

Some of our service providers may be based outside the UK (e.g., in the EEA or US). Where this happens, we ensure appropriate safeguards are in place (e.g., UK-approved standard contractual clauses or adequacy decisions).

How long we keep your data

We keep your data only for as long as necessary:

  • Account details (name, email) and GPX routes: for the lifetime of your active account
  • Other data: typically up to 6 years for legal/tax purposes where required, or shorter periods for logs and technical records

You can delete your account and GPX files at any time via your member dashboard.

Your rights

You have rights under UK data protection law, including:

  • To access your personal data
  • To correct inaccurate data
  • To delete your data (including GPX routes)
  • To restrict processing
  • To object to certain processing
  • To data portability (in some cases)

To exercise these rights, just email us at team@trailtrack.co.uk. We’ll respond as quickly as possible (usually within a few days). You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Security

We take reasonable steps to protect your data, including secure storage, access controls, and encryption where appropriate (especially for uploaded GPX files).

Cookies and Similar Technologies

Our website uses two types of cookies:

  • Strictly necessary cookies: These keep you logged in securely, remember your session preferences, and ensure basic functionality and security. They do not require your consent under UK law.
  • Analytics cookies (Google Analytics): We use Google Analytics to understand how visitors use our site — for example, which pages are most popular and how people navigate between them. Google Analytics sets cookies to collect this information anonymously. These cookies are only set if you choose to accept analytics cookies via our cookie consent banner when you first visit the site.

When you first visit TrailTrack.co.uk, you will be shown a cookie consent banner. You can choose to accept or decline analytics cookies at that point. If you decline, no analytics cookies will be set and your visit will not be tracked by Google Analytics.

You can also control or delete cookies at any time through your browser settings. For more general information about cookies, visit aboutcookies.org. For details on how Google uses data collected via Analytics, visit Google's Privacy Policy.

Changes to this notice

We may update this notice from time to time. Changes will be posted here with a new “last updated” date. Please check back periodically.

By using TrailTrack.co.uk and creating an account, you acknowledge this Privacy Notice. Thank you for trusting us with your data — we’re committed to keeping your tracks private!