Privacy Policy | Nairobi City Marathon 2026
top of page
Map_edited.jpg

PROGRAM

1I9A3864.jpg

06:45

07 June

42km

START MARATHON

09:00

07 June

21km

START HALF MARATHON

10:00

07 June

10KM EXPRESSWAY

START 10KM

11:00

07 June

5KM FUN RUN

START 5KM

Privacy Policy

Golazo Right Here ("the Company” or “we” of “us”) is committed to protecting your privacy and processing your personal data in accordance with applicable data protection laws and regulations.


This Privacy Policy explains how we process and protect your personal data when you participate in, attend, volunteer at, sponsor, support or otherwise engage with our sporting events including marathons, cycling races and other sporting events and related activities.

1.

WHO WE ARE

 

Golazo Right Here, located in Nairobi Kenya, forms part of the Golazo Group, an international sports event management group headquartered in Belgium. Golazo specializes in the planning, organization, promotion, and delivery of sporting events, including mass participation events, marathons, cycling races, walking events and other sporting events (“Events”) and related activities and services. For purposes of applicable data protection laws, Golazo Right Here acts as the data controller in respect of the personal data processed in connection with our Events, websites, applications, and related activities and services.

Event Management

2.

WHO DOES THIS PRIVACY POLICY APPLY TO?


This Privacy Policy applies to all individuals whose personal data we collect and process in connection with our events, services, websites, applications, and related activities, including:

​

  • Participants registering for or taking part in our Events;

  • Spectators and attendees at our Events;

  • Volunteers, marshals, officials, and event staff;

  • Coaches, team managers, and support personnel;

  • Sponsors, exhibitors, partners, and vendors participating in our Events;

  • Representatives of corporate teams and organisations participating in our Events;

  • Individuals making enquiries, submitting requests, or otherwise communicating with us;

  • Visitors to our websites, social media pages, mobile applications, and digital platforms;

  • Individuals whose personal data is provided to us as emergency contacts or next of kin; and

  • Any other individuals whose personal data is processed in connection with the planning, organisation, administration, promotion, and delivery of our Events and related services.

  • This Privacy Policy should be read together with any event-specific privacy policies, registration terms and conditions, consent statements, or other privacy information that may be provided to you at the point of data collection.

Event Management

3.

WHAT TYPES OF DATA WE COLLECT ABOUT YOU?


Depending on your interaction with us and the event in which you participate, we may collect the following categories of personal data:

​

  • Personal and contact information, such as your name, date of birth, gender, nationality, identification or passport number, email address, telephone number, and physical or postal address;

  • Registration and participation information, including your race category, bib number, participation history, timing and performance results, rankings, placements, and event records;

  • Athlete and competition information, including your World Athletics Code or other athlete identification numbers, personal best times and performance records, and the location and year in which personal best performances were achieved;

  • Organizational and affiliation information, including details of your team, club, school, employer, sponsor, or other organization associated with your participation. (Personal data relating to health is classified as Sensitive Personal Data. We will only process health data by or under the responsibility of a health care provider, a person subject to an obligation of professional secrecy, or where such processing is otherwise necessary for reasons of public interest in the area of public health or permitted by law. We apply appropriate safeguards to protect such information.)

  • Health, medical, accessibility, emergency contact, and next of kin information provided for participant safety and event administration purposes.

  • Payment and transaction information relating to Event registrations, purchases, and related services;

  • Photographs, video recordings, audio recordings, livestream footage, and other media content captured during or in connection with our Events;

  • Information provided through group registrations by clubs, teams, employers, schools, parents, guardians, sponsors, travel partners, or other authorised representatives; and

  • Technical and online information collected through our websites, applications, and digital platforms, including IP addresses, device information, browser information, cookies, and website usage data.

Event Management

4.

PROCESSING CHILDREN’S PERSONAL DATA

​

Certain Events organised or managed by Golazo Right Here may permit participation by individuals under the age of eighteen (18) years (“Children”).

​

  • ​Where we collect or process personal data relating to a Child, we shall do so only where:

    • the Child’s parent or legal guardian has provided the necessary consent, where required by applicable law;

    • the processing is necessary to facilitate the Child’s participation in an event, programme, competition, or activity;

    • the processing is necessary to protect the health, safety, welfare, or vital interests of the Child; or

    • the processing is otherwise necessary and permitted under applicable data protection laws.

  • Parents and legal guardians are responsible for ensuring that any information submitted on behalf of a Child is accurate, complete, and up to date.

  • Golazo Right Here reserves the right to verify the authority of a parent, legal guardian, or other authorised representative and to request reasonable evidence of such authority or consent where necessary.

  • We will process Children's personal data in a manner that respects their privacy, dignity, and best interests and will implement appropriate technical and organisational measures designed to protect Children's personal data from unauthorised access, disclosure, alteration, loss, or misuse.

  • Where required by applicable law, we will obtain verifiable parental or guardian consent before collecting, using, or disclosing a Child's personal data.

Event Management

5.

HOW DO WE COLLECT YOUR PERSONAL DATA?

​

We collect personal data from a variety of sources depending on your interaction with us and the services we provide. We may collect personal data:

​

  • Directly from You: We collect personal data that you voluntarily provide to us when you:

    • Register for or participate in an Event;

    • Purchase tickets, merchandise, or other Event-related products and services;

    • Subscribe to our newsletters or marketing communications;

    • Complete registration forms, surveys, waivers, or other event documentation;

    • Contact us with enquiries, requests, complaints, or feedback;

    • Participate in promotions, competitions, or campaigns; and

    • Interact with us through our websites, mobile applications, social media platforms, or other communication channels.

  • From Third Parties: We may receive personal data from third parties, including:

    • Event registration and ticketing platforms;

    • Timing and results service providers;

    • Sports clubs, teams, federations, or associations;

    • Sponsors, Event partners, and promoters;

    • Corporate organisations registering participants on behalf of employees or teams;

    • Payment service providers;

    • Medical service providers involved in event support;

    • Emergency contacts or next of kin; and

    • Other service providers engaged in the organisation and administration of our events.

  • Through Your Participation in Events: We may collect personal data during the course of an Event, including through:

    • Race timing and results systems;

    • Accreditation and access control systems;

    • Medical and emergency response processes;

    • Event check-in and attendance records;

    • Participant tracking and safety systems where applicable; and

    • Communications relating to the management and delivery of the Event.

  • Automatically Through Our Digital Platforms: When you access our websites, applications, or other digital platforms, certain information may be collected automatically through cookies and similar technologies, including:

    • Device information;

    • IP address;

    • Browser type and settings;

    • Website usage information;

    • Location information where enabled; and

    • Information relating to your interactions with our digital platforms.

  • Through Photography, Videography and Media Coverage: As part of the organisation and promotion of our Events, we may collect personal data through photographs, video recordings, livestreams, interviews, and other media coverage conducted during or in connection with our Events. Such content may be captured by us, our authorised photographers and videographers, media partners, sponsors, or other Event service providers. Where required by applicable law, we will obtain your consent before using your personal data for marketing, or promotional purposes.

  • From Participants Who Identify You as a Next of Kin or Emergency Contact
    Where you have been identified by a participant as their next of kin or emergency contact, we may collect and process personal data relating to you, such as your name, telephone number, email address, relationship to the participant, and other contact details provided by the participant. Where we wish to use your personal data for any purpose that requires your consent, we will provide you with appropriate information regarding the processing and an opportunity to provide or withhold your consent.

Event Management

6.

PURPOSE AND LAWFUL BASES FOR PROCESSING

​

  • Registering participants and administering events, including participant verification, accreditation, race entry management, communications, logistics, and Event operations.

    • Categories of Personal Data

      • Identification details,

      • contact information,

      • participant information,

      • Event records.

    • Lawful Basis

      • Performance of a contract;

      • legitimate interests.

  • Processing payments and maintaining financial and accounting records.

    • Categories of Personal Data

      • Identification details,

      • payment and transaction information.

    • Lawful Basis

      • Performance of a contract;

      • compliance with legal obligations.

  • Managing race timing, rankings, results, records, and competition administration.

    • Categories of Personal Data

      • Participant information, timing and performance data.

    • Lawful Basis

      • Performance of a contract;

      • legitimate interests in maintaining the integrity and administration of sporting events.

  • Managing participant health, safety, medical support, emergency response, and accessibility requirements during Events.

    • Categories of Personal Data

      • Health information, emergency contact information, participant information.

    • Lawful Basis

      • Protection of vital interests;

      • medical purposes;

      • compliance with legal obligations where applicable.

  • Managing volunteers, officials, service providers, sponsors, partners, and other stakeholders involved in the organisation and delivery of Events.

    • Categories of Personal Data

      • Identification details, contact information, engagement records.

    • Lawful Basis

      • Performance of a contract;

      • legitimate interests.

  • Responding to enquiries, requests, complaints, incidents, and customer support matters.

    • Categories of Personal Data

      • Contact information, correspondence records, participant information.

    • Lawful Basis

      • Legitimate interests;

      • performance of a contract;

      • compliance with legal obligations.

  • Contacting and communicating with next of kin or emergency contacts in the event of an accident, medical emergency, safeguarding concern, or other incident affecting a participant, and maintaining emergency contact records for participant safety purposes.

    • Categories of Personal Data

      • Next of kin and emergency contact details, participant information, incident records

    • Lawful Basis

      • Protection of vital interests;

      • legitimate interests;

      • consent.

  • Conducting photography, videography, livestreaming, media coverage, and documenting events.

    • Categories of Personal Data

      • Images, video recordings, audio recordings.

    • Lawful Basis

      • Legitimate interests in documenting, administering, promoting and preserving the historical record of sporting events;

      • consent.

  • Providing live performance features through apps to create the best event experience for participants and fans, and in which performances can be tracked live, live rankings can be viewed, important information and latest updates about the Event can be found.

    • Categories of Personal Data

      • Live tracking, live rankings.

    • Lawful Basis

      • Legitimate interests;

  • Marketing our events, services, promotions, organisational activities, sponsor offers and marketing materials.

    • Categories of Personal Data

      • Contact information, marketing preferences, images and testimonials

    • Lawful Basis

      • Consent

  • Conducting research, analytics, reporting, and service improvement activities.

    • Categories of Personal Data

      • Participant information, feedback, usage data, event statistics

    • Lawful Basis

      • Legitimate interests;

      • historical, and statistical purposes.

  • Detecting, preventing, and investigating fraud, misconduct, security incidents, and unlawful activities.

    • Categories of Personal Data

      • Identification details, transaction information, system usage information, incident records

    •  

      Lawful Basis

       

      • Legitimate interests;

      • compliance with legal obligations.

  • Complying with applicable legal, regulatory, sporting federation, insurance, and governance requirements and establishing, exercising, or defending legal claims.

    • Categories of Personal Data

      • Any personal data relevant to the applicable obligation, investigation or claim.

    • Lawful Basis

      • Compliance with legal obligations;

      • legitimate interests.

Event Management

7.

WHOM DO WE SHARE YOUR INFORMATION WITH?

​

  • We may share your personal data with third parties where necessary for the organisation, administration, delivery, promotion, and safety of our Events, or where required by law.

  • We may share your personal data within the Golazo Group, specifically with Golazo Belgium and Golazo South Africa, where necessary for event management, participant registration, rankings and results management, operational support, customer service, reporting, group administration, and, where you have provided your consent, marketing and promotional communications.

  • Depending on the nature of your interaction with us, we may share your personal data with:

    • Event registration, ticketing, timing, results management, and Event management service providers, including ChronoRace, which may support participant registration, race timing, results management, and other event administration functions;

    • Medical personnel, emergency responders, healthcare providers, and other parties involved in providing medical assistance or responding to emergencies during Events;

    • Sports federations, governing bodies, sanctioning authorities, and regulatory organisations where required for competition administration, rankings, licensing, compliance, or record-keeping purposes;

    • Sponsors, partners, exhibitors, and event collaborators where necessary for the delivery of an event or where you have consented to such sharing;

    • Payment service providers, financial institutions, auditors, and professional advisers who support our business operations;

    • Photographers, videographers, broadcasters, media organisations, and production partners involved in documenting, reporting on, or promoting our Events;

    • Co-organisers or Event partners with whom we organise the Event together or who provide specific Event management services;

    • Event app providers of apps to create the best event experience for you and your fans, in which apps your performance can be tracked live, live rankings can be viewed, important information and latest updates about the Event can be found and much more.

    • Security service providers, venue operators, logistics providers, and other contractors engaged in the planning and delivery of our Events;

    • Insurance providers, brokers, and claims administrators where necessary in connection with insurance coverage, incidents, accidents, or claims arising from participation in our Events;

    • Law enforcement agencies, regulators, courts, public authorities, and other governmental bodies where disclosure is required by law or necessary to protect legal rights, safety, or security; and

    • Other third parties where you have provided your consent or where disclosure is otherwise permitted or required under applicable law.

  • We may also publish certain participant information, including names, race categories, race numbers, timings, rankings, and Event results, where necessary for the administration, integrity, and public reporting of our Events.

  • We require all third parties who process personal data on our behalf to implement appropriate security measures and to process personal data only in accordance with our instructions and applicable data protection laws.

Event Management

8.

WHAT RIGHTS DO YOU HAVE OVER YOUR DATA?

​

  • Subject to applicable law, you have the right to:

    • Be informed about how we process your personal data;

    • Request access to your personal data;

    • Request correction of inaccurate or incomplete personal data;

    • Request deletion of your personal data in certain circumstances;

    • Object to or restrict the processing of your personal data in certain circumstances;

    • Withdraw your consent where processing is based on consent; and

    • Lodge a complaint with the relevant data protection authority.

  • Depending on your country of residence or the applicable data protection laws, you may be entitled to additional rights in relation to your personal data. Where such laws apply, we will honour and facilitate the exercise of those rights in accordance with the applicable legal requirements.

  • To exercise any of these rights, please contact us using the contact details provided in this Privacy Policy. We may request additional information to verify your identity before responding to your request.

Event Management

9.

HOW DO WE PROTECT YOUR DATA?

​

  • We are committed to protecting your personal data and have implemented appropriate technical and organisational measures to safeguard it against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

  • These measures include:

    • Restricting access to personal data to authorised personnel and service providers who require access for legitimate business purposes;

    • Using secure systems and technologies to store and process personal data;

    • Implementing physical, administrative, and technical security controls designed to protect personal data;

    • Requiring third-party service providers who process personal data on our behalf to implement appropriate security measures; and

    • Regularly reviewing and updating our security measures to address emerging risks and threats.

  • While we take reasonable steps to protect personal data, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee absolute security, but we will take appropriate steps to investigate and respond to any actual or suspected security incidents involving personal data.

Event Management

10.

INTERNATIONAL DATA TRANSFER

​

  • In the course of organising and managing our Events, we may transfer or permit access to your personal data outside Kenya, including where we engage international service providers, Event partners, technology providers, registration platforms, timing and results management providers, or cloud hosting providers.

  • We may transfer or permit access to your personal data outside Kenya to other members of the Golazo Group, such as Golazo Belgium and Golazo South Africa. Such transfers may be necessary to facilitate participant registration, Event administration and management, timing and results management, customer support, group administration, reporting, information technology support, marketing and promotional communications (where you have provided your consent), and compliance with applicable legal and regulatory requirements.

  • Where we transfer personal data outside Kenya, we will take reasonable steps to ensure that appropriate safeguards are in place to protect your personal data and that such transfers are conducted in accordance with applicable data protection laws.

Event Management

11.

HOW LONG DO WE KEEP YOUR INFORMATION?

​

  • We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including the administration and delivery of our Events, publication and maintenance of Event results, responding to enquiries and complaints, complying with legal and regulatory obligations, and establishing, exercising, or defending legal claims.

  • The length of time for which we retain personal data may vary depending on the nature of the information, the purpose for which it was collected, and any applicable legal, regulatory, or operational requirements.

  • When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with our data retention practices and applicable law.

Event Management

12.

WHERE SHOULD YOU DIRECT YOUR PRIVACY COMPLAINTS?

​

If you have any questions, concerns, or complaints regarding how we collect, use, or protect your personal data, or if you wish to exercise any of your data protection rights, please contact us on the following email address privacy@right-here.com or call us on +254 788 254 254. You can also visit our offices at Springette Office Park, Spring Valley, Lower Kabete Road, Nairobi, Kenya.

Event Management
Map.png

NAIROBI CITY MARATHON

info@nairobicitymarathon.com

 Tel: +254 794 622 675

+254 721 901 100

  • Instagram
  • Facebook
  • X
  • 4691462_strava_icon

© 2026 Nairobi City Marathon

​

DISCLAIMER: 

The Participant grants permission to the Organiser and its partners to publish photographs and images and similar material prior, during and after the Event in which the Participant is recognisable.

Read the Priivacy Policy

bottom of page