Last updated: 25.October.2025

Who We Are

Carrot is a gamified running platform that levels the playing field, using our unique algorithm. We strive to motivate, inspire and engage runners and communities of all abilities, everywhere.

Carrot.run gathers and processes your personal information in accordance with relevant data protection regulations and laws. This notice provides you with important information regarding your rights and our obligations, and explains how, why and when we process your personal data.

Our registered office is at: 16 Highacre, Dorking, Surrey, RH4 3BF, England. We are a company registered in England & Wales under company number 12665806.

We may act as data controller, or where applicable as data processor/co-controller, depending on the processing context.

Our Data Protection Officer

If you have any questions about how we process your personal data or wish to exercise your rights, please contact our Data Protection Officer, Nick Wright via email nick@carrot.run or by post to the address above.

Information That We Collect

We process your personal information in order to deliver and improve our products and services. We do not collect unnecessary personal data and we do not process your information in ways other than as described in this notice.

The personal data we may collect from you includes, but is not limited to:

• First name and Last name
• Home address
• Date of birth
• Email address
• Telephone number
• Running performance data (e.g., 5 km target times, run completion times) as part of our “Carrot Target Time” method described on our website www.carrot.run. 
• Other information you provide via online forms, through our app or our website.
  
  

How We Use Your Personal Data

We take your privacy seriously and, other than to provide the services you have requested and as described in this notice, we will not disclose or share your data without your consent unless required to do so by law.

We retain your data only for as long as necessary and for the purposes outlined in this notice. Where you have given consent for marketing, you may withdraw that consent at any time.

We process your personal data for the following purposes:

• To provide the running game service, including enabling you to set your individual “Carrot” target time and compete with yourself or friends.
• To send you notifications and updates regarding your activity within our app or service (e.g., run completion, leaderboard updates).
• To store your personal data as part of our business accounting and tax obligations.
• To analyse aggregated user behaviour (e.g., run times, usage patterns) for improvement of our game and service. Such analysis will not identify you individually or lead to automated decision-making about you.
• Where you have consented, to contact you for marketing purposes (for example, new features, premium socks, exclusive unlocks) that we believe may be of interest to you.
• Occasionally, we may send you information without specific consent when such information is clearly beneficial to you as a user and in our legitimate business interests (provided it remains non-intrusive).
  
  

Your Rights

You have the right to access any personal information that we process about you and to request information about:

• What personal data we hold about you and the purposes of the processing
• The categories of personal data concerned
• The recipients to whom the personal data has been / will be disclosed
• How long we intend to store your personal data for
• If we did not collect the data directly from you, information about the source
  
  

If you believe that we hold incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to respond promptly.

You also have the rights (where applicable) to request:

• Erasure of your personal data
• Restriction of processing
• Data portability
• Information about any automated decision-making we may use
  
  

If you exercise any of these rights, we will ask you to verify your identity before acting on your request in order to safeguard your data.

Sharing and Disclosing Your Personal Information

We will not share or disclose your personal information without your consent, other than for the purposes specified in this notice or where legally required.

We use certain third-party service providers (processors) to help deliver our services; all such processors act only on our instructions, comply with our data protection policy, and meet applicable data protection standards. Examples include:

• Stripe – Payment processor (for handling payments you make through our app).
• AWS – Hosting provider (for storing and accessing our infrastructure).
• Mailgun & Open Market – Email/SMS service providers (for running notifications and updates).
• Where you have given consent, we may share your marketing details with marketing automation providers.
  
  

We endeavour to ensure that each processor we use takes appropriate technical and organisational measures to protect your personal data.

Safeguarding Measures

We take all reasonable measures to protect and secure your personal data, and work hard to prevent unauthorised access, alteration, disclosure or destruction including:

• Encryption of data in transit and at rest
• Use of up-to-date security software to guard against malware and external threats
• Strict access controls (only authorised persons can access personal data)
• Regular reviews of our security practices
  
  

Transfers Outside the UK/EU

While most of our data processing infrastructure resides within the UK or EEA, some of our third-party providers may operate or store data outside the EEA. Where a transfer outside the EEA occurs, we ensure that appropriate safeguards are in place (such as standard contractual clauses) to protect your personal data.

How Long We Keep Your Data

We retain personal information only for as long as required for the purposes for which it is processed and in accordance with legal, accounting or regulatory requirements.

For example:

• If you use our service (e.g., participate in the running game), we may retain your data for a period necessary for accounting, auditing and customer support (for example, a typical retention period of 3 years)
• Where you have consented to marketing, we keep such data until you withdraw your consent
  
  

Marketing Consent

Where we send you marketing emails or messages about other services, features, or merchandise (e.g., premium socks, exclusive unlocks) you will only receive such messages if you have given your consent. You can withdraw this consent at any time by opting-out/unsubscribing or by contacting us directly.

Legitimate Interest

We may send you occasional service updates or non-intrusive communications which are relevant to you as a user of our service, and which we believe are in our legitimate interest and beneficial to you. You will always have the option to unsubscribe or opt-out.

Lodging a Complaint

If at any time you believe we have processed your personal data in a way that violates this notice or applicable data protection laws, you have the right to lodge a complaint with the supervisory authority.

Carrot.run Ltd

Nick Wright
16 Highacre, Dorking, Surrey, RH4 3BF
nick@carrot.run

Supervisory Authority

If you are based in the UK, you may lodge a complaint with the Information Commissioner’s Office (ICO): Wycliffe House, Water Lane, Wilmslow, SK9 5AF, UK. Web: 

ttps://ico.org.uk/concerns/

You may also have the right to complain in another EU/EEA state if you are subject to that jurisdiction.