Privacy Policy

Privacy Policy

Effective Date: March 23, 2026 Last Updated: March 23, 2026

This Privacy Policy explains how Riyadh Racing (riyadhracing.com), a publication of The Vanderbilt Portfolio (“we,” “us,” or “our”), collects, uses, shares, and protects information from visitors to this website (“Website”). By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

Information We Collect

Information You Provide: When you contact us via email at info@riyadhracing.com, subscribe to our newsletter, submit feedback, or otherwise communicate with us, we may collect your name, email address, professional affiliation, and the content of your correspondence. We collect this information solely to respond to your inquiry and to improve our services.

Information Collected Automatically: When you visit the Website, our servers and third-party analytics services automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, time spent on each page, click behavior, and the date and time of your visit. This information is collected through cookies, web beacons, JavaScript tags, and similar tracking technologies as described in our Cookie Policy.

Google Analytics: We use Google Analytics, a web analytics service provided by Google LLC, to collect and analyze information about how visitors use the Website. Google Analytics uses cookies to collect information including your IP address, which is anonymized before storage. Google Analytics generates statistical and other information about website use through cookies, as detailed in cookie usage policy. The information collected is used to create reports about the use of the Website. Google’s privacy policy is available at policies.google.com/privacy.

Google AdSense: The Website displays advertisements served by Google AdSense. Google and its advertising partners may use cookies, web beacons, and similar technologies to collect information about your browsing activity on this Website and other websites to provide targeted advertising. This may include your IP address, browser information, pages visited, and interactions with advertisements. For more information about how Google uses data from partner sites, visit policies.google.com/technologies/partner-sites.

How We Use Your Information

We use the information we collect for the following purposes: to operate and maintain the Website; to respond to your inquiries and communications; to analyze Website usage patterns and improve our content, features, and user experience; to display relevant advertisements through Google AdSense; to detect and prevent security threats, fraud, and abuse; to comply with legal obligations; and to enforce our Terms of Service.

Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances: with service providers who assist us in operating the Website, including hosting providers, analytics services, and advertising networks; when required by law, court order, or governmental regulation; to protect the rights, property, or safety of The Vanderbilt Portfolio, our users, or the public; and in connection with a merger, acquisition, or sale of assets, in which case your information may be transferred to the successor entity, as detailed in our terms of use.

Your Rights and Choices

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal information, restrict or object to certain processing, and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at info@riyadhracing.com. You can manage cookie preferences through your browser settings or opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on. You can opt out of personalized advertising through the Network Advertising Initiative, the Digital Advertising Alliance, or Google Ad Settings.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal requirements. Contact information and correspondence are retained for as long as necessary to address the inquiry and for a reasonable period thereafter. Analytics data is retained in aggregated and anonymized form.

Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

The Website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.

International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. By using the Website, you consent to such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes are effective upon posting to the Website. We encourage you to review this policy periodically.

Third-Party Service Providers

We periodically review the privacy practices of our third-party service providers. We do not control the privacy practices of these third parties and encourage you to review their privacy policies directly.

California Residents (CCPA/CPRA Compliance)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights include the right to know what personal information we collect, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it. You may request a copy of the specific pieces of personal information we have collected about you in the preceding twelve months.

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law, including where the information is necessary to complete a transaction, detect security incidents, comply with legal obligations, or exercise free speech rights. You also have the right to opt out of the sale or sharing of personal information. We do not sell personal information as defined under the CCPA/CPRA. However, certain uses of cookies for advertising purposes may constitute “sharing” under the CPRA, and you may opt out of such sharing through the cookie consent mechanism on the Website or by contacting us at info@riyadhracing.com.

Under the CPRA, you also have the right to correct inaccurate personal information, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising your privacy rights. We will not deny you goods or services, charge different prices, or provide a different level of quality for exercising any of these rights. To submit a verifiable consumer request, contact us at info@riyadhracing.com. We will verify your identity before fulfilling your request and will respond within 45 days, with the possibility of a 45-day extension where reasonably necessary.

European Economic Area and United Kingdom Residents (GDPR Compliance)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, your personal data is protected under the General Data Protection Regulation (GDPR) or UK GDPR. You have the following rights: the right of access to obtain confirmation of whether your personal data is being processed and to receive a copy of that data; the right to rectification to have inaccurate personal data corrected without undue delay; the right to erasure (“right to be forgotten”) to request deletion of your personal data when it is no longer necessary for the purpose for which it was collected, when you withdraw consent, or when you object to processing; the right to restriction of processing in certain circumstances, including where accuracy is contested or processing is unlawful; the right to data portability to receive your personal data in a structured, commonly used, and machine-readable format; and the right to object to processing based on legitimate interests or for direct marketing purposes.

The legal bases for our processing of your personal data include: your explicit consent (for cookies, newsletter subscriptions, and personalized advertising); our legitimate interests in operating, maintaining, and improving the Website (for analytics and security); performance of a contract (for responding to your inquiries); and compliance with legal obligations. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal. You may lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated. The lead supervisory authority for cross-border processing complaints may be contacted through the European Data Protection Board.

Middle Eastern Residents (Saudi PDPL Compliance)

Users in Saudi Arabia are protected under the Personal Data Protection Law (PDPL), enacted by Royal Decree M/19 and administered by the Saudi Data and Artificial Intelligence Authority (SDAIA). Under the PDPL, personal data may only be collected for a specific, clear, and legitimate purpose, and must be limited to the minimum necessary to achieve that purpose. We collect personal data from Saudi residents only in connection with the specific purposes described in this Privacy Policy.

Under the PDPL, you have the right to be informed about the legal basis for processing your personal data, the purpose of collection, and the identity of any entity to which your data may be disclosed. You have the right to access your personal data held by us, the right to request correction of inaccurate or incomplete data, and the right to request destruction of personal data that is no longer necessary for the purpose for which it was collected. You also have the right to withdraw your consent to data processing at any time, and to lodge a complaint with SDAIA if you believe your data protection rights have been violated.

We recognize that cross-border transfer of personal data from Saudi Arabia is subject to restrictions under the PDPL. Any transfer of personal data outside the Kingdom is conducted in accordance with the regulations issued by the competent authority, and we implement appropriate safeguards to ensure an adequate level of protection for transferred data. Users in the United Arab Emirates, Bahrain, Qatar, Kuwait, and Oman should be aware that similar data protection frameworks are developing across the Gulf Cooperation Council, and we aim to comply with applicable requirements in each jurisdiction where our users reside.

Contact

Questions about this Privacy Policy may be directed to info@riyadhracing.com.

Data Processing Activities Summary

The following table summarizes our key data processing activities:

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. Automated processes are limited to website analytics aggregation and advertising targeting performed by third-party services (Google Analytics and Google AdSense), which operate under their own privacy policies and provide their own opt-out mechanisms.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority without undue delay where required by applicable law, and we will notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms, providing information about the nature of the breach, the data affected, the measures taken to address the breach, and recommended steps for individuals to protect themselves.

Privacy Policy Scope

This Privacy Policy applies only to information collected through the Riyadh Racing website at riyadhracing.com. It does not apply to information collected through other Vanderbilt Portfolio properties, which maintain their own privacy policies. When you follow links from our Website to third-party websites, those sites have their own privacy policies that govern the collection and use of your information.

Your Responsibilities

You are responsible for ensuring that any personal information you provide to us is accurate and current. If you provide personal information about other individuals (for example, when identifying a contact person for a research collaboration), you represent that you have the authority to do so and that you have informed those individuals of this Privacy Policy.

Privacy Shield and International Frameworks

While the EU-US Privacy Shield framework has been invalidated by the Court of Justice of the European Union, The Vanderbilt Portfolio remains committed to applying privacy protections consistent with the principles underlying that framework to data transfers from the EEA and UK. We rely on applicable legal mechanisms for cross-border data transfers, including standard contractual clauses where required. We monitor developments in international data transfer frameworks and will adopt appropriate transfer mechanisms as they become available and applicable to our operations.