Privacy Policy

01 Introduction

This Privacy Policy explains how Paper Mache Pvt Ltd ("we", "us", "our") collects, uses, shares, and protects the personal information of participants and website visitors in connection with the Guwahati Marathon 2026 ("the Event"). This policy is framed with reference to India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). By registering for the Event or using this website, you consent to the practices described here.

02 Data Controller

For the purposes of this policy, the "Data Fiduciary" (data controller) is Paper Mache Pvt Ltd, the organizer of the Guwahati Marathon.

03 Information We Collect

When you register for the Event, we collect the following information directly from you:

• Full name
• Email address
• Phone number
• Date of birth
• T-shirt size
• State of residence
• Medical conditions (if any)
• Blood group
• Emergency contact name and phone number

04 Why We Collect It

Your information is used for the following purposes:

• Processing your registration and confirming your race category
• Verifying age eligibility for your selected category
• Producing your race bib, finisher certificate, and event jersey
• Ensuring participant safety, including responding to medical emergencies on race day
• Sharing important event updates, logistics, and communications
• Compiling official race results and rankings
• With your consent, sharing promotional updates about future editions of the Guwahati Marathon

05 Legal Basis for Processing

We process your personal data on the basis of your explicit consent, provided at the time of registration, in accordance with the Digital Personal Data Protection Act, 2023. You have the right to withdraw this consent at any time, as described in Section 10 below.

06 Sensitive Personal Data

07 Data Sharing

We do not sell your personal data. We may share your information with:

• Authorized third-party partners who support race operations, such as timing and results technology providers
• On-ground medical and safety personnel, strictly for emergency response purposes
• Government or regulatory authorities, where required by applicable law

Any third party we share data with is required to handle it securely and only for the purpose for which it was shared.

08 Data Retention

We retain participant data for as long as reasonably necessary to fulfil the purposes outlined in this policy — including result verification, prize distribution, and record-keeping — and generally not longer than 24 months after the Event, unless a longer retention period is required by law or you have separately consented to receive future communications. You may request earlier deletion of your data as described in Section 10.

09 Data Security

We implement reasonable technical and organizational safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Access to sensitive data, including medical information, is restricted to authorized personnel only.

10 Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw your consent to processing at any time
• Request erasure of your personal data, subject to our legal and operational retention requirements
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these rights, contact our Grievance Officer using the details in Section 14.

11 Cookies

Our website may use basic cookies to support core functionality, such as remembering your navigation preferences. We do not use cookies for third-party advertising or cross-site tracking.

12 Minors' Data

Participants in the 10K City Run may be as young as 12 years old. For any participant under the age of 18, we require guardian consent at the time of registration, and the guardian's contact information may be collected as the emergency contact. We do not knowingly collect personal data from children outside the context of event registration with guardian consent.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically.

14 Grievance Officer

In accordance with applicable data protection law, if you have any concerns, questions, or complaints regarding how your personal data is handled, please contact our Grievance Officer: