Privacy policy.
Last updated: 4 October 2026.
This page sets out what we collect, why, how long we keep it and what you can require of us. It is written to be read, not to hide behind wording.
Who is responsible
HRML SRL, Grand'Place 36, 7330 Saint-Ghislain, VAT BE 1027.523.374, is the data controller. For any question or request: contact@sevenclub.io.
What we collect
Only what you give us, through the join form, an event booking form or by writing to us. We buy no data and collect nothing without your knowledge.
Join form
- Required: first name, last name, email address, phone number and age
- Optional: the town you come from, your running level, the route you plan to take, and anything you write in the message box
- The option you picked, and your consent
Three of those deserve an explanation, because we ask for them and you are entitled to know why.
- Your phone number is required because the club runs on a WhatsApp group and that group is joined by number. It is not used for anything else, and never for marketing by text.
- Your age is required for two reasons: the runs have a minimum age, and we tell partners the age range of the club. What we share with them is a range, never a list, and never anything that identifies you.
- The town you come from is optional. It tells us how far the club reaches, which is useful when we ask a council or a partner for support. Leaving it blank changes nothing for you.
Event booking (Run & Brunch)
- Required: first name, last name, email address, phone number and choice of dish
- Optional: anything you write in the message box
- Your agreement to receive the event’s practical and payment details by email
This data serves one purpose, running the event: saving you a seat, planning your dish, sending you the meeting point and payment details. It does not sign you up to the club and is never used for marketing.
Partnership enquiries
There is no longer a partnership form: the sponsors page opens your mail client. We then hold whatever you chose to put in that email, and nothing more.
Why, and on what basis
| Purpose | Legal basis |
|---|---|
| Answering you and welcoming you on a Sunday run | Pre-contractual steps taken at your request |
| Managing a membership and its renewal | Performance of a contract |
| Managing your event booking: seat, meal, payment | Pre-contractual steps, then performance of a contract |
| Sending you club news by email | Your consent, withdrawable at any time |
| Issuing and keeping accounting records | Legal obligation |
| Discussing a possible partnership | Our legitimate interest in growing the club |
How long we keep it
| Data | Retention period |
|---|---|
| Join request with no follow-up | 12 months |
| Member record | Duration of the membership, then 3 years |
| Event booking | 1 year after the event |
| Accounting records tied to a membership fee or a paid booking | 7 years, Belgian legal requirement |
| Partnership enquiry, by email | 3 years after the last exchange |
| Email consent | Until withdrawn, reviewed every 3 years |
Once those periods end, the data is deleted.
Who has access
The Seven team members who need it, and the following providers, acting on our instructions:
- Google (Firebase Firestore), the database where requests are stored. The service is provided by Google Ireland Limited; its parent company, Google LLC, is established in the United States.
- Google (Gmail, Google Workspace), through which we receive a summary email for each sign-up or booking.
- Vercel, website hosting, United States. Server logs briefly contain your IP address.
- Adobe Fonts, the display typeface is loaded from Adobe's servers, which passes them your IP address. Adobe's licence does not allow us to host that font ourselves.
- Google Fonts, the body typeface is loaded from Google’s servers, which passes them your IP address.
We do not sell or rent your data. It is never passed to advertisers.
Transfers to the United States rely on the European Commission's standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.
Cookies
This site sets no cookies at all. No analytics, no advertising pixel, no tracker. That is why you see no banner: there is nothing to accept.
Your rights
You may at any time ask for access to your data, its correction, its deletion or the restriction of its processing; object to processing based on our legitimate interest; ask for your data to be ported; and withdraw your consent to emails. Every email carries an unsubscribe link.
Write to contact@sevenclub.io and we will answer within one month.
If our answer does not satisfy you, you may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels. autoriteprotectiondonnees.be.
Security
The site is served over HTTPS. The database only accepts writes from the forms: no one can read the sign-ups or bookings from the website, not even by inspecting its code. We read them through a separate, restricted account.
Minors
The runs are open to everyone, but signing up online is for people aged 16 and over. That is why the form asks for an age and will not accept one below 16. Younger runners are just as welcome on a Sunday: a parent should write to us instead.