Legal
Privacy Policy
Last updated: January 2026
1. What This Policy Covers
This policy explains what personal information MadMax Karting collects when you book a session, buy a gift card, join Racer Pass, or otherwise use our website and branches, and how we use and protect it — in line with Kenya's Data Protection Act, 2019.
2. Information We Collect
Depending on how you interact with us, we may collect:
- Booking details — name, phone number, email, party size, preferred branch and date.
- Payment information — handled directly by our payment processor (M-Pesa or card provider); we don't store full card numbers on our own systems.
- Account information — if you create a MadMax account, your booking history, saved results, and lap times.
- Communications — messages you send us via WhatsApp, email, or our contact form.
- Usage data — basic website analytics such as pages visited and general location, to help us improve the site.
3. How We Use Your Information
We use your information to:
- Process and confirm your bookings, and contact you about them (confirmations, reminders, date changes).
- Deliver gift cards and manage Racer Pass or Family Pass membership benefits.
- Respond to enquiries sent through our contact form, WhatsApp, or email.
- Send occasional marketing updates — only if you haven't opted out, and always with an easy way to unsubscribe.
- Improve our website, services, and safety procedures based on aggregated, anonymized usage patterns.
4. Cookies & Analytics
Our website may use basic cookies to remember preferences and understand how visitors use the site. You can disable cookies in your browser settings — the site will still function, though some conveniences (like remembered form details) may not carry over between visits.
5. Sharing Your Information
We do not sell your personal information. We only share it with:
- Payment processors, to complete transactions securely.
- Email and SMS providers, to send booking confirmations and reminders.
- Law enforcement or regulators, only where legally required to do so.
6. Data Retention
We keep booking and account information for as long as you have an active account or as needed to meet legal, accounting, or safety-record requirements. You can request deletion of your account and associated data at any time, subject to any records we're legally required to retain.
7. Your Rights
Under Kenyan data protection law, you have the right to:
- Request a copy of the personal information we hold about you.
- Ask us to correct inaccurate information.
- Request deletion of your data, where we're not required to keep it for legal or safety reasons.
- Opt out of marketing communications at any time.
To exercise any of these rights, contact us using the details below.
8. Children's Privacy
Racers under 18 require a parent or guardian to complete a waiver before participating, which may involve us collecting limited information about a minor (name, age, emergency contact). This information is used solely for safety and booking purposes and is not used for marketing directed at children.
9. Security
We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse. No online system is completely secure, but we work to keep your data appropriately protected.
10. Changes To This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The version in effect at the time you use our services is the one that applies.
11. Contact Us
Questions about this policy or your data? Reach us at info@madmax.co.ke or via our Contact page.