1. ABOUT THIS PRIVACY NOTICE
Mud4Fun 4×4 Challenge Limited (“Mud4Fun”, “we”, “our”, or “us”) is a corporate entity duly incorporated under the Companies Act (No. 17 of 2015 of the Laws of Kenya) and registered as a Data Controller with the Office of the Data Protection Commissioner
(ODPC).
This Privacy Notice explains how we collect, process, store, share and safeguard personal data when you visit our official portal (https://mudforfun.com ), scan venue entry QR codes, purchase event ticket packages, apply for media accreditation, or interact with our digital channels.
This Privacy Notice operates alongside:
a. The Legal Notices and Website Terms of Use (governing website copyright, liability and cyber interference).
b. The Mud4Fun Media Policy & Regulatory Framework (governing physical venue entry, photography/video consent, safety zones, child protection and media accreditation).
2. PERSONAL DATA WE COLLECT
In compliance with Section 25 of the Data Protection Act (2019), we process personal data strictly necessary for event management, ticketing, venue security and promotional storytelling:
2.1 Information Provided Directly by You:
2.1.1 Account and Contact Details:
Full name, phone number, physical address, national ID/passport number and email address submitted during ticket purchases, VIP bookings, or general inquiries.
2.1.2: Media and Accreditation Credentials:
Media house details, press passes, KCAA drone registration certificates, remote pilot licenses (RPL) and third-party aviation insurance policies submitted by journalists, photographers and drone operators under Section 7 and Section 9 of the Media Policy.
2.1.3: Communications & Feedback:
2.2 Information Collected Automatically (Cookies and Web Analytics):
2.2.1 Technical and Device Data: IP address, device identifiers, browser type, operating system, network location and geolocation data.
2.2.2 Website Usage Metrics: Pages viewed, navigation duration, link clicks and event package interactions captured via technical log files and cookies.
2.3 On-Site Audio-Visual Capture & Media Content:
2.3.1 Photographs, live video streams, drone footage and acoustic recordings captured within event venue perimeters.
Note: Venue entry and physical capture of attendee images and likenesses are explicitly governed by Section 2 and Section 4 of the Mud4Fun Media Policy.
3. STATUTORY LAWFUL BASIS FOR PROCESSING
Pursuant to Section 30 of the Data Protection Act (2019), we process your personal data under the following recognized legal bases:
3.1 Contractual Performance:
To issue event tickets, process media accreditation hard cards, provide customer support and enforce venue access licensing terms.
3.2 Legitimate Interests:
To monitor website security, prevent cyber interference, maintain historical event archives, protect our intellectual property and promote off-road motorsport culture.
3.3 Legal Obligation:
To comply with statutory tax reporting, Kenya Civil Aviation Authority (KCAA) drone regulations, child protection laws and ODPC reporting mandates.
3.4 Explicit Consent:
To deploy non-essential analytics/advertising cookies or send direct promotional updates where you have expressly opted in.
4. DISCLOSURE AND SHARING OF PERSONAL DATA
We do not sell or rent personal data. We may share processed data with trusted third parties strictly necessary for event operations:
4.1Authorized Partners and Sponsors:
Corporate partners, official event venues, and hospitality providers for cobranded activations, ticket fulfillment and credential verification.
4.2Media Outlets and Rights Holders:
Accredited media houses and broadcast channels receiving official event press packages under Section 10 of the Media Policy.
4.3IT and Service Providers:
Third-party hosting platforms, payment gateway processors and cybersecurity services acting under Data Processing Agreements.
4.4Statutory Authorities and Law Enforcement:
Government regulators, court orders, or law enforcement bodies where required under the Laws of Kenya.
5. COOKIE POLICY AND CONSENT FRAMEWORK
In accordance with Section 32 of the Data Protection Act (2019), our portal utilizes cookies and tracking technologies:
5.1Essential / Necessary Cookies:
Required for core website navigation, secure checkouts and system firewalls (these operate automatically without prior consent).
5.2Performance and Analytics Cookies:
Collect aggregated, anonymized metrics on visitor traffic and navigation (e.g., Google Analytics). These are deployed only upon your express opt-in choice on our cookie banner.
5.3Managing Preferences:
You can modify or withdraw your cookie consent at any time via our website Cookie Preference Center or your web browser settings.
6. PROTECTION OF MINORS AND ETHICAL STANDARDS
In compliance with Section 8 of the Mud4Fun Media Policy and the Children Act (No. 29 of 2022), our website strictly safeguards the digital privacy of children:
6.1We do not knowingly collect personal data from children under 18 online without verifiable parental or guardian consent.
6.2Media hosted on https://mudforfun.com/ featuring minors captured incidentally at event grounds (e.g., Kiddie Corner or Little Muddy Warriors Village) enforces digital face-blurring standards unless explicit written parental consent is on file.
7. CYBERSECURITY, AI PROTECTION AND TECHNICAL SAFEGUARDS
To protect personal data and event IP against cyber threats, unauthorized extraction, or digital piracy:
7.1Data Security: We employ AES-256 bit encryption at rest, SSL/TLS protocols in transit, Multi-Factor Authentication (MFA), and role-based access controls for administrative databases.
7.2Generative AI Scraping Prohibition: Pursuant to Section 9.3 of the Media Policy and our Legal Notices, we deploy automated technical safeguards prohibiting generative AI bots, scripts, or scrapers from training models on our website data, imagery, or video feeds without a commercial license.
8. DATA SUBJECT RIGHTS UNDER THE DATA PROTECTION ACT 2019
As a data subject in Kenya, Section 26 of the Data Protection Act grants you the right to:
8.1 Be Informed:
Receive clear details on how your data is collected and processed.
8.2 Access:
Request a copy of your personal data held in our systems.
8.3 Object:
Object to data processing for direct marketing or profiling.
8.4 Rectification:
Request correction or updating of inaccurate personal records.
8.5 Erasure (“Right to be Forgotten”):
Request deletion or digital blurring of your data/imagery where processing lacks legal justification.
9. DATA RETENTION AND INTERNATIONAL DATA TRANSFERS
9.1Retention:
Website interaction logs, ticketing records, and accreditation files are retained strictly as long as necessary to satisfy event management, tax, and legal obligations.
9.2International Transfers:
Where cloud hosting servers or third-party IT providers reside outside Kenya, Mud4Fun ensures compliance with Section 48 of the Data Protection Act (2019) by verifying recipient jurisdictions maintain adequate data protection laws or executing binding contractual clauses.
10. CONTACT US AND ODPC PRIVACY COMPLAINTS
To exercise your data protection rights, request image blurring, or submit a privacy inquiry, please contact our Data Protection Officer:
Mud4Fun 4×4 Challenge Limited
Email: media@mudforfun.com
Official Website: https://mudforfun.com/