Privacy Policy

This policy explains how we collect, hold, use and disclose personal information when you visit lecasquedor.com (the “Site”), buy Casque d’Or merchandise, and take part in the Casque d’Or vote for the Greatest Formula One Driver of All Time (the “Vote”). It is written with reference to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It is the single privacy policy for both voting and purchasing. Where you are located in the EEA or the United Kingdom, we also apply equivalent protections under the GDPR / UK GDPR.

WHO ARE WE?

In this policy, the terms “we”, “us” and “our” refer to Grand Epreuve Pty Ltd (ACN 702 257 065), Level 10, 387 George Street, Sydney NSW 2000, Australia — the team behind the Casque d’Or and the Grand Épreuve series. For any question about this policy or your privacy rights, write to our Privacy Officer at info@grandepreuve.com.

The Casque d’Or is an editorial fan vote celebrating 75 years of Formula One World Championship history. The Site is intended for persons over 18 years of age.

We handle personal information in accordance with the standards set by the Australian Privacy Principles.

OUR COMMITMENTS

We undertake to:

• Protect your personal information in compliance with the Privacy Act 1988 (Cth) and the APPs;
• Keep you informed of everything you need to know about your information;
• Respect your choices and preferences — marketing is always opt-in, never a condition of voting;
• Not retain your information without a valid reason.

To honour these commitments we use encrypted connections (HTTPS/TLS), access restricted to authorised administrators, and ballots that are never readable from the public website. No system is infallible, but we take reasonable technical and organisational steps to protect your personal information.

1. About this policy

The purpose of this policy is to inform you of:

• The types of information we collect about you;
• The reasons why we use and share your information;
• The rights attached to your information and how you can exercise them.

This policy is separate from our Terms of Use and our Voting Rules. It reflects our data collection and handling practices and may be amended over time to adapt to regulatory and technical developments — the “Last updated” date on this page shows the most recent change.

2. What information do we collect about you, and how?

You can browse the Site without telling us who you are (APP 2). You cannot vote anonymously: identifying you is reasonably necessary so that we can enforce one ballot per person and keep the result honest. We collect the minimum that supports that, and nothing more.

The information we handle falls into three categories:

2.1. Information you provide to us directly

Collected when you cast your vote or contact us:

• First name and last name — to attribute your ballot and, if needed, to contact you about it;
• Email address — to enforce one ballot per person and to contact you about your ballot;
• Confirmation that you are an Australian resident — to enforce the eligibility rules of the Vote;
• Your three ranked driver picks — to count your ballot and calculate the result;
• Confirmation that you are 18 or over — to enforce the minimum age in the Voting Rules;
• Email updates opt-in (optional, unticked) — if you tick the box, your email is used to send occasional updates about Casque d’Or and the Grand Épreuve series. We keep a record of the fact, date and method of your consent.

2.2. Technical information we collect automatically

The Site uses only cookies and local storage that are strictly necessary to display the page, hold your pre-launch access session and record your ballot. We do not use advertising cookies and we do not build behavioural profiles of visitors. Technical information includes:

• A one-way hash of your IP address and the submission timestamp — for security, fraud detection and abuse prevention;
• Basic browser and device settings needed to render the page correctly.

2.3. Information collected when you buy merchandise

If you buy the Casque d’Or cap, checkout is operated by Shopify on our behalf. We receive your name, email, delivery address, phone number (if given), order details and order history so we can fulfil your order, provide customer service, handle returns and meet tax and accounting obligations. Payments are processed by Shopify and its payment providers; we do not receive full card details. We do not use your order details for marketing unless you separately opt in, and we do not use behavioural advertising pixels.

2.4. Information we do not collect

We do not collect sensitive information (such as health data, political opinions or beliefs), we never see or store your card details (payments are processed by Shopify and its payment providers), and we do not buy or receive marketing lists from third parties. We do not knowingly collect information from anyone under 18.

3. What purposes do we pursue, and for how long?

We use your personal information only for the purpose it was collected, a directly related purpose you would reasonably expect, or where you have consented (APP 6). The table below explains each purpose, its basis and its retention period.

Purpose	Retention period	Basis
Run the Vote — record your ballot, enforce one vote per person, calculate and audit the result	Identifiable ballot records (names and emails) are retained until 90 days after publication of the final result, then deleted. Only anonymised aggregate results are retained thereafter.	Performance of the Voting Rules you accepted
Publish aggregate results — anonymised statistics (points, ballot totals)	Kept indefinitely — these cannot identify you	Legitimate editorial interest
Send email updates — occasional Casque d’Or and Grand Épreuve news	Until you unsubscribe	Your consent
Fulfil merchandise orders — delivery, customer service, returns, tax records	For the statutory and business retention period	Performance of your purchase contract and legal obligation
Security and fraud prevention — hashed IP, timestamps, abuse detection	Maximum 12 months, if genuinely required	Legitimate interest in keeping the Vote honest
Respond to privacy requests and complaints	Only as long as reasonably necessary	Legal obligation

Retention periods are subject to applicable additional legal obligations.

4. Who has access to your information?

We disclose personal information only to the service providers who operate the Site on our behalf:

Category of recipient	Reason for sharing
Hosting and database provider	Stores the Site, ballots and images on our behalf.
MakeForms (ballot form provider)	Operates the ballot details form and processes and stores ballot submissions on our behalf, in the European Union.
Shopify and its payment providers	Operate merchandise checkout, payment processing and order management.
Delivery and fulfilment partners	Deliver merchandise orders to you.
Email delivery provider	Sends ballot-related messages and, with your consent, campaign updates.
Competent authorities and professional advisers (lawyers, accountants)	To comply with our legal obligations and defend our rights and interests, where required.

We do not sell your personal information. We do not disclose it to broadcasters, sponsors or any other third party for their own marketing without your explicit, informed, prior consent. If that ever changes, we will name the recipient in the consent request at the moment we ask for it — we will never rely on consent given to an unnamed future recipient, and we will never apply a new sharing arrangement to consent already collected.

5. Is your information processed outside Australia?

Yes. Some of our service providers store or process personal information outside Australia: MakeForms, our ballot form provider, processes and stores ballot submissions in the European Union; Shopify processes order and payment information in Canada, the United States and other countries; our hosting and email delivery providers may process information in the United States and the European Union.

Before disclosing personal information to an overseas recipient we take reasonable steps to ensure they handle it consistently with the APPs (APP 8), and we remain accountable for their handling of it.

6. What are your rights, and how can you exercise them?

Under the Privacy Act you have the following rights. To exercise any of them, contact us at info@grandepreuve.com — you will not have to pay a fee.

• Right to be informed — to know what information we hold about you and for what purposes we handle it;
• Right of access (APP 12) — to access the personal information we hold about you and obtain a copy of it;
• Right to correction (APP 13) — to ask us to correct information that is wrong, out of date or incomplete;
• Right to erasure — to ask us to delete information concerning you, limited by our legal obligations. Please note that erasing your ballot before the count closes removes your vote from the tally;
• Right to withdraw consent — to withdraw your consent to marketing at any time, without giving a reason;
• Right to complain — to complain to us, and then to the Office of the Australian Information Commissioner (details below).

We will respond to access, correction and erasure requests within 30 days. If we refuse access or correction we will tell you why in writing and how to complain. To protect your information, requests must be sent from the email address used to cast your ballot, and we may carry out additional checks if a request arrives by post, from a different address, or from someone acting on your behalf.

Objecting to direct marketing (APP 7 and the Spam Act 2003): you will only receive marketing email if you ticked the optional box — it is never pre-ticked, never bundled into accepting the terms, and never a condition of voting. Every marketing email identifies us as the sender, gives our current contact details, and carries a one-click unsubscribe link that works without logging in or providing any further personal information. Unsubscribe requests are actioned within five working days, and unsubscribe links stay live for at least 30 days after the message is sent. You can also unsubscribe at any time by emailing info@grandepreuve.com.

Complaints: if you think we have mishandled your personal information, complain to us first — email info@grandepreuve.com with “Privacy complaint” in the subject line. We will acknowledge within 5 working days and respond substantively within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992. Visitors in the EEA or the UK may instead complain to their local supervisory authority.

7. Data breaches

We maintain a data breach response plan. If we suspect an eligible data breach we will assess it within 30 days and, where serious harm is likely, notify the Office of the Australian Information Commissioner (OAIC) and the individuals affected, as required by the Notifiable Data Breaches scheme.

8. Note for persons under 18 years of age

Our services are not intended for persons under the age of 18 and we do not knowingly collect personal information from them.

If you are under 18, please do not complete our forms.

If a person under 18 has provided us with personal information, the parent or guardian must contact us immediately at info@grandepreuve.com so that we can delete the information in question and remove the ballot.