Privacy Policy

CAVAHO, LLC Privacy Policy

Last modified: September 1, 2025

This Privacy Policy (“Policy”) discloses CAVAHO, LLC, MyRacePass Pty Ltd ABN 76 688 151 019 and our subsidiaries’ (“CAVAHO, LLC” or “We” or “Us” or “MyRacePass”) privacy practices for www.myracepass.com, (the “Site”), the MyRacePass app, or in email, text, and other communications between you and MyRacePass (the “Services”). This Policy is meant to help you understand what information we collect, why we collect it, and how you can manage your information.

If you are a resident of the European Economic Area, United Kingdom, Australia or New Zealand, please read our GDPR Notice, Notice to Australia Residents or Notice to New Zealand Residents (as applicable) further below.

This Policy does not apply to the privacy practices of any third-party sites. We encourage our users who visit external sites from links within the Site or the Services to read the privacy statements of those external sites as their privacy practices may differ from ours.

If you have questions or concerns regarding this statement you should first contact us via Customer Service by calling 402.302.2464. If you prefer to write us our postal address is:
CAVAHO, LLC, 151 N 8th St., Fl. 5 Lincoln, NE 68508

CAVAHO, LLC has taken numerous precautions to guard your security while making purchases online in order to make you feel comfortable and secure. Our goal is to make you feel as comfortable shopping here as you would from any retail showroom.

We may make changes to this Privacy Policy from time to time. We will notify you of any material changes by placing a prominent notice on our Site and/or by sending you an email (if you are a registered user). Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Site or the Services. By accessing or using this Site or the Services, you agree to this Privacy Policy.

What information is being collected?

Personal information is data that can be used to identify you as an individual by reference to a direct identifier, such as name, postal address, e-mail address, telephone number, or photograph, or with indirect identifiers, such as device identifiers that permit the physical or online contacting of a specific individual (“Personal Information”). We collect Personal Information depending on the nature of your interactions with us. For example, when you visit the Site or engage with the Services or when you apply for a career opportunity with us. We also collect Personal Information to prevent fraud, improve our Site and Services, and enforce our Terms and Conditions. Further information about our data collection practices is provided below.

Data you provide to us.

We collect Personal Information that you provide to us, such as when you:

• Place an order for a product or Service, such as race tickets or merchandise, through the Site or the MyRacePass app.
• Submit a search query on the Site or the MyRacePass app.
• Create an account to use the Site, the MyRacePass software, or the MyRacePass app as a fan, driver, driver’s employee, or Race Track or Race Series employee.
• Claim your MyRacePass Driver Bio.
• Register for a race or race series.
• Subscribe to our newsletter.
• Provide your photograph as part of our e-waiver verification process.

Managing your requests and registrations
In order to process and deliver your requests for our products or services or process your registration as a user of our Site, you will be asked for information that may include your name, birthdate, shipping and billing addresses, your email address, your phone number, or your credit card information. If you submit a product review through the Site, we will collect information related to your name, location, and any information you provide in the text of your review, including any images you upload as a part of your review. Additionally, if you request one of our newsletters or send an inquiry to one of our customer service representatives, we will collect and securely store a record of your request, along with your email address, in order to coordinate any follow-up correspondence or to help you stay connected and informed about your inquiry.

Waiver verification process
Some of the events we sponsor or facilitate may require you to sign a waiver in order to participate. In order to streamline this process and ensure its authenticity, we have established an electronic waiver submissions procedure. As part of this procedure, we may collect your photograph when you submit your waiver to verify your identity at the event. This waiver, together with the photograph you provide, will be accessible to you via a randomly generated URL unique to your submission, allowing you to view your waiver. We have also developed robust security and retention policies to protect the integrity of your information. We, and our necessary business partners as described in the "With whom do we share your information" section, will retain your waiver and photograph for no longer than is reasonably necessary to facilitate the purpose for which it was provided, not to exceed eight (8) years from the date of submission.

Data you generate

We use cookies and other tracking technologies to collect certain information about you when you use our Site or our Services. For example, our web servers track various technical details about your Site visit, including traffic data, information about your computer's IP address, browser type, the pages you visit, and what you search for. This sort of usage information does not typically contain any direct identifiers about you. To learn more about these technologies, please see our Cookie Notice below.

Cookie Notice

A cookie is a block of text placed in a file on your hard drive by a website you've visited and enables websites to remember your actions, preferences, and other session information related to your visits. CAVAHO, LLC uses cookies to deliver basic functions on our Site, such as page navigation, as well as to observe users’ behaviors throughout the Site. This helps us identify any user experience issues and opportunities to improve the shopping experience. This includes the use of session cookies, which are a piece of identification between your browser and our server that helps to do things such as keeping track of the items in your shopping cart. The shopping cart cookie is saved for a designated period of time in case your session expires or if you return to complete a purchase within that time frame.

You can control what cookies you allow on our Site by selecting your preferences in your web browser settings. Be advised that if you change your settings to block certain cookies, some features on our Site may not operate as intended. We do not support the Do Not Track browser option.

We also collect demographic and interest information about you (such as age, gender, and interests) using Google Remarketing and Analytics services. This allows us to present specific products and services to you based on your preferences and past Internet activity. We do not share direct identifiers or contact information, such as telephone number and address, with Google via cookies. Google may use the data collected on our Site to contextualize and personalize ads on its own advertising network, which are separately governed by Google's Terms of Service and Privacy Policy. Google also offers a browser opt-out mechanism, which you may access here.

Data from third parties.

We may also collect Personal Information about you from other third-party sources, including from social media platforms. For example, if you voluntarily use your Facebook to interact with us, we may collect your profile information or information within your posts. If you choose PayPal to process any payments on our Site, we collect relevant transaction information from the payment vendor to facilitate your request or order.

We use appropriate and reasonable security measures as required by relevant law and security best practices to maintain and secure your Personal Information and further require the third parties with whom we work with to implement and maintain appropriate, technical and operational measures to protect your Personal Information.

How do we use your information?

We use information that we collect about you or that you provide to us, including any Personal Information:

Generally
• To present our Site and its contents, and our Services to you.
• To provide you with information, products, or Services that you request from us.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To notify you about changes to our Site or any products or Services we offer or provide though it.
• To allow you to participate in interactive features on our Site and through our Services.
• To take and process payments.
• To carry out analysis and improve or personalise our Site, products or Services to you.
• To respond to any inquiries you may have.
• To comply with a law, regulation, court order or other legal process.
• To investigate or report suspected unlawful activity.
• To protect enforce or defend our rights.
• To confirm your identity as part of our waiver verification process.

Direct marketing
To send you newsletters, product information emails, promotional emails, purchase receipts, or any other informational updates you subscribe to.

Job applications
If you have applied for a job with us, we collect and process your personal information to assess your suitability for the role, including verification of your identity, qualifications, certifications, entitlement to work, and to conduct background or criminal history checks.

With whom do we share your information?

We do not rent or sell your Personal Information to anyone. In limited circumstances, as described below, we may share your Personal Information as needed to run our business and provide Services, and also as required for legal compliance purposes.

Other users

Any Personal Information that you publish on your profile (whether on our Site or the MyRacePass app) may be accessed by or available to other users. Any Personal Information that you publish through your public interactions with us on social media or that are comprised in our marketing content (such as photographs or recordings of you) may also be available to, and accessed by, any person who visits our social media accounts.

Vendors, consultants, and other service providers.

We may transmit your Personal Information to third party vendors, consultants, and service providers who assist us in processing orders, shipping products, processing payment information, sending mailings, conducting surveys, processing job applications, facilitating events, and sending emails and newsletters. We have agreements with third parties that require protection of your Personal Information in accordance with the terms of this Policy. Some of these third parties may have their own privacy policies, which may give you additional protections. You are encouraged to read those policies when presented. For example, we share your data with Mailchimp and/or Insightly for assistance in sending emails and newsletters. Mailchimp’s and Insightly's privacy policy can be viewed on their website(s). You are encouraged to read those policies when presented.

Affiliates and business partners.

We may provide your Personal Information, including in aggregated form, to affiliated companies and business partners with whom we jointly offer products or Services. This includes hosts for events that require a waiver and associated insurance underwriters. If you provide us with your postal address, you may receive periodic mailings from us or other notices containing information about new products and Services or upcoming events. Occasionally, we may make our postal mailing address lists available to subsidiaries and affiliated companies that are part of the CAVAHO, LLC's family of companies. However, we do not share email addresses, telephone numbers, or facsimile numbers with any third parties for marketing purposes.

Merger, sale, or other asset transfers.

If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, then we may sell or otherwise transfer your Personal Information as part of the transaction, as permitted by law and/or contract.

Legal purposes.

We will disclose your Personal Information outside of CAVAHO, LLC when required by law, subpoena, or other legal process. In such circumstances, we may, and you authorize us to, share information with the requesting government agency or investigatory body, including law enforcement or regulatory authorities. In all cases, we will require written documentation of the request, proof of the identity of the law enforcement official making the request, and we will take steps to authenticate the validity of the request. Any law enforcement or government agency request submitted with less than a court-issued order will be evaluated on a case-by-case basis according to the need and urgency as well as the particular law enforcement agency making the request.

With your consent.

We may share your Personal Information for any other legitimate purpose if we notify and receive your consent for such disclosure.

Other purposes.

We may also disclose your personal information:

• To our professional advisors enforce or apply our Terms and Conditions and other agreements, including for billing and collection purposes.
• If you are a race fan user or general user, to our race promoter users and race track operators to facilitate your purchase of event tickets and attendance at the relevant event.
• To law enforcement, our professional advisors, and/or the compromised individuals or entities, we believe disclosure is necessary or appropriate to protect the rights, property, or safety of CAVAHO, LLC, our customers, or others.

How do I access, update, or delete my Personal Information?

We will collect and use your Personal Information as described in this Policy, which includes your rights to control the collection, use, and sharing of your data, as provided below:

Access and Correct your data.

You may request access to a copy of the Personal Information that we collect from you with your consent or as necessary to provide our Services. You may request that we correct any Personal Information that you have provided to us.

Delete your data.

You can request erasure or deletion of all or some of your Personal Information, subject to certain exceptions prescribed by law.

Change your data.

If you are a registered user of the Site, you can directly manage many aspects of your information by accessing the My Account section. You may also notify us of your privacy preference by calling, sending an email, or by writing to us at the postal address provided below. In your requests, please provide us with your exact name and postal address and define which lists you wish to be removed from so that we can be sure your information is removed from future mailing lists.

For security reasons, however, some parts of your Personal Information may not be changed online and may require you to call or write to us in order to verify your identity before changes can be made.

Opt out of promotional emails.

You may also exercise control over the use of your email address, allowing you to opt out of promotional emails by clicking on the “unsubscribe” link at the bottom of the email you receive.

Object to, limit or restrict use of your data.

You can request that we stop using all or some of your Personal Information. We may continue to process data after such request to the extent required or permitted by law. Due to various legal and recordkeeping requirements, we may be required to maintain records of your purchases or other activities on this Site and through the Services. However, you will always be permitted to opt out of any marketing uses of your Personal Information.

Limit tracking technologies and advertising.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of this Site may then be inaccessible or not function properly.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI's website.

We do not meet the eligibility conditions outlined in the California Consumer Privacy Act, Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, or the Montana Consumer Data Privacy Act and therefore are not subject to the requirements of these laws.

To exercise your rights, please contact us by sending us a written request to privacy@myracepass.com. If you prefer, you may also contact us by phone at 402.302.2464, or postal mail at CAVAHO, LLC, Inc. 151 N 8th St., FL. 5, Lincoln, NE 68508.

How long do you retain Personal Information?

Except as specified herein, we retain your Personal Information over the course of your use of a registered account on our Site and as further needed to facilitate and execute orders for products and Services to you. We will also retain your Personal Information for as long a period as we have a lawful basis for the continued retention or processing, including legitimate interests where the processing of Personal Information is not overridden by your interests or fundamental rights. Personal information may be retained for extended time period for limited purposes, such as for our legal and compliance obligations. These bases are subject to your rights to access and control your data, as described above.

What kind of security procedures are in place to protect the loss, misuse or alteration of information under our control?

CAVAHO, LLC values your business and is committed to doing everything possible to make our online ordering process secure and protect your Personal Information. We use appropriate and reasonable security measures as required by relevant law and security best practices. Our Site also uses Secure Sockets Layer (SSL) to communicate with secure browsers like Chrome, Firefox, and Internet Explorer. These browsers encrypt your credit card and other Personal Information in a way that makes it extremely difficult for anyone to intercept and misuse while being transmitted between your computer and our server. If your browser is not secure, you will not be able to complete a purchase on our Site. We also take further precautions to protect the security and privacy of the information stored on our computer networks. Many of the systems which store your Personal Information are not connected to the Internet, reducing the likelihood of security breaches. Our systems are also housed in secure facilities, and access to your data by our employees is limited to a "need to know" basis, controlled by password protected systems, and monitored for abuse.

However, no system is 100% secure. We cannot warrant the security of any information that you send us, and we cannot guarantee that your Personal Information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site or in the Services. If you are unsure of giving your credit card over the Internet, please feel free to phone your order to us. For telephone ordering or assistance, please call 402.302.2464.

If you have any further questions regarding our data security practices, please contact us at 402.302.2464 or email us at privacy@myracepass.com.

Children’s Privacy

Our Site and the Services are not intended for children under 16 years of age. No one under age 16 may provide any Personal Information to or on the Site or on the Services. We do not knowingly collect Personal Information from children under the age of 16, nor do we market or direct our Services or products to children under the age of 16. If we determine that we have erroneously collected Personal Information from a child under 16 years old, we will immediately undertake to delete that data from our records. If you believe that a child under 16 may have provided us with Personal Information, please contact us at privacy@myracepass.com.

California residents who are under the age of 18

Individuals who are under the age of 18 and reside in California, USA may also request and obtain removal of their Personal Information by emailing us at privacy@myracepass.com.

GDPR Notice

This Notice is for people who are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”). Our processing of personal data of people who are in the EEA is governed by the European Union’s General Data Protection Regulation (the “GDPR”). Our processing of personal data of people who are in the UK is subject to the Data Protection Act 2018, which incorporates the GDPR as the UK GDPR. This Notice refers to the GDPR and the UK GDPR collectively as the “GDPR”.

We may rely upon one or more legal bases defined in the GDPR to collect, use, share and otherwise process the personal data of individuals located in the EEA or UK, including where:
• Necessary to perform a contract we have with you, such as our Terms and Conditions, and to provide the Services;
• You have consented to the processing (in which case you may revoke your consent at any time);
• Necessary for us to comply with a legal obligation, or to establish, exercise or defend legal claims;
• Necessary to protect your vital interests or those of others;
• Necessary in the public interest; and
• Necessary for the purposes of CAVAHO, LLC or a third party’s legitimate interests, provided that those interests are not overridden by your interests or fundamental rights and freedoms.

Where we collect, use, disclose and otherwise process your information based on legitimate interests, we may rely on the following interests:
• Marketing our products or services: We use your information as necessary to pursue our legitimate interests in marketing our products and services to you. For example, where permitted by digital marketing law, we may contact you by email to let you know of products or services you might be interested in.
• Providing, improving and developing our products or services: We use your information as necessary to pursue our legitimate interests in tailoring and improving our products and services. For example, we may send you a survey or questionnaire to understand your experience in purchasing from us.

If you are located in the EEA or UK, under certain circumstances, you may have certain legal rights under the GDPR, including:
• To access the personal data we maintain about you
• To receive information about how we process your personal data
• To correct your personal data
• To have your personal data erased
• To object to or restrict how we process your personal data
• To request your personal data be transferred to a third party
• To withdraw any consent you may have given us to process your personal data

If you are an EEA or UK resident, you have the right to object to our processing that is based on legitimate interests by contacting us at the address or number below. If you are located in the EEA or UK and you believe that we have infringed your rights under the GDPR, please contact us by sending an email to privacy@myracepass.com.

Cross-Border Data Transfers.

Any information you provide to us through the use of the Services may be stored, processed, transferred among, and accessed from the United States and other countries which may not guarantee the same level of protection of Personal Information as the one in which you reside. However, we will handle your Personal Information in accordance with this Policy regardless of where your Personal Information is kept. Regarding transfers from the EEA or UK to the United States, we rely on the derogations for transfers which are necessary to perform the transaction with you, including, as applicable, the Standard Contractual Clauses. Where required by law, you may request a copy of the suitable mechanisms we have in place by contacting us as detailed below. If you reside in other non-US jurisdictions outside the EEA or UK, your use of the Services or provision of any Personal Information constitutes your consent for the transfer of such data to the United States for the purposes identified above. If you have questions about cross-border transfers, please contact us as detailed below.

Contact Information

To ask questions or comment about this Policy and our privacy practices, contact us at:
Phone: 402.302.2464
Email: privacy@myracepass.com
Postal Address: CAVAHO, LLC. 151 N 8th St., Fl. 5, Lincoln, NE 68508

Notice to Australia Residents

When does this Notice apply?
This Notice is for people who are located in Australia. Our processing of personal information of people who are in Australia is governed by the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles (“APPs”) contained in the Privacy Act. A copy of the Privacy Act is available on the Federal Register of Legislation.

The provisions of this Policy and of this Notice are applicable to our processing of your Personal Information. This Notice will not apply if you reside outside of Australia.

To the extent of any inconsistency between the provisions of our Policy and this Notice, the provisions of this Notice will prevail.

Personal information under the Privacy Act
If this Notice applies to you, all references to Personal Information within this policy is a reference to personal information as defined under the Privacy Act.

The Privacy Act defined personal information as information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not.

Personal information includes sensitive information, which is defined under the Privacy Act as information or an opinion about a person's race, ethnic origin, political opinions, membership of political associations and trade associations, religious or philosophical beliefs, sexual orientation or practices, criminal record, health information, genetic information about an individual that is not otherwise health information, biometric information that is used for the purpose of automated biometric verification or biometric identification and biometric templates.

Collection of sensitive information
We only collect sensitive information about you if you provide your consent, when the collection is authorised or required by law, to enable us to assert a legal or equitable claim, to take appropriate action in relation to unlawful activity or serious misconduct, or the collection is otherwise allowed under the Privacy Act.

Collection of personal information from third parties
We collect your personal information from another person (such as, your legal guardian) if it is impracticable or unreasonable to collect information directly from you.

Direct marketing
We will only collect and use your personal information (but never your sensitive information) to provide you with information about our products and services that we believe may be of interest to you (including any newsletters, updates, offers, promotions or other benefits) via email, post, telephone or other direct contact methods, if:
• you have provided your consent to receive this information; or
• it is otherwise within your reasonable expectation that we send you these communications in light of your interactions with us.

Anonymity and pseudo-anonymity
Where practicable, we will provide you with an opportunity to communicate or interact with us on an anonymous basis or using a pseudonym. However there may be circumstances where we require your personal information in order to provide you with our products and services, or properly respond to any questions, concerns or inquiries you may have.

Overseas disclosure of personal information
Our headquarters, subsidiary companies, and service providers who assist us in providing our products and services to you, are located in the United States. Accordingly, your Personal Information will be disclosed to entities located in the United States for use, storage and other processing by those overseas recipients outside of Australia. However, they will only do so if you have consented to us sharing your Personal Information with them to use, store or process or if we are legally required or authorised to share your Personal Information with them.

If you provide us with this consent (for example, by providing us with your Personal Information or otherwise accepting our privacy collection statement or this Policy), you understand and acknowledge that:
• Australian Privacy Principle 8.1 does not apply to our disclosure of your personal information; and
• countries outside of Australia do not always have the same privacy protection obligations as Australia in relation to Personal Information, and you may not be able to seek redress in an overseas jurisdiction. Additionally the overseas recipient is subject to foreign law that could compel the disclosure of Personal Information to a third party, such as an overseas authority. However, we take reasonable steps to ensure that any third parties based outside Australia to whom we disclose or share your personal information, uses and holds your personal information in a secure manner.

Data retention
When we no longer require your Personal Information for the purpose for which your information was collected (as set out in this Policy), we will delete or de-identify your Personal Information as soon as reasonably possible.

However, we may retain your Personal Information for a shorter or longer period to comply with any applicable law, for the prevention of fraud, to resolve disputes or for other legitimate purposes.

Access and correction
If you wish to access any Personal Information we hold about you or for us to correct such Personal Information and are unable to do so manually access or update your data as described in the "Change your data" section of this Policy, you may make a request for access or correction of your Personal Information by contacting our Privacy Officer at the details provided in the "Questions or complaints" section of this Notice below.

If you ask, we must generally give you access to your Personal Information, and take reasonable steps to correct it if we consider it is incorrect unless an exception applies. We may refuse your request for legitimate reasons, including if we believe that granting you access to your Personal Information will endanger the life, health or safety of any person or would adversely impact the privacy of other individuals. We will notify you in writing and explain our reasons if we refuse to give you access to, or correct, your Personal Information.

No fees apply to making a request for access or correction of your Personal Information, but we may charge for reasonable administrative costs incurred in providing access to, or correcting the information.

Questions or complaints
If you have any questions or comments about this Policy and our privacy practices, or if you have any complaints regarding breach of the Privacy Act, please contact MyRacePass Pty Ltd at:

Attention: Privacy Officer
Phone: (+1) 402-302-2464
Email: privacy@myracepass.com
Postal Address:
MyRacePass PTY LTD
Level 10/1 Eagle Street
Brisbane City, QLD 4000

You can find more information about your rights and obligations in respect of privacy at www.oaic.gov.au or by contacting the Office of the Australian Information Commissioner at:

Address: GPO Box 5218, Sydney NSW 2001
Email: enquiries@oaic.gov.au

Notice to New Zealand Residents

This Notice is for people who are located in New Zealand. Our processing of personal data of people who are in New Zealand is governed by the Privacy Act 2020.

The provisions of this Policy, including those disclosing the kinds of Personal Information collected and processed, the purposes for such collection and processing, and the manners in which you may access your Personal Information, are applicable to you. Your Personal Information will be stored and processed in the United States, and we may disclose Personal Information to overseas recipients located in the United States.

To ask questions or comment about this Policy and our privacy practices, contact us at:

Phone: 402.302.2464
Email: privacy@myracepass.com
Postal Address: CAVAHO, LLC. 151 N 8th St., Fl. 5 Lincoln, NE 68508