Privacy policy
Tata Ultra Marathon virtual run · Last updated 25 September 2026
This page explains what information we collect when you take part in the Tata Ultra Marathon virtual run on tumvirtualrun.com, why we need it, who it is shared with, and the choices you have. It is written with India’s Digital Personal Data Protection Act, 2023 in mind.
What we collect
| When | What |
|---|---|
| You register | Name and mobile number (required). City, age range, gender and running club if you choose to give them. |
| You log a run | The screenshot you upload from your running app or watch, and what we read from it: distance, the date of the run and the type of activity. |
| You use the site | Your IP address, used to estimate the city and state you registered from and to stop duplicate or automated entries. Basic technical details such as your browser type. |
| You arrive from a link | The campaign tags in the link you used to reach us (for example utm_source, or a partner’s click reference), so we know which channel or partner brought you. |
Why we use it
- To register you for the run and send your personal dashboard link by SMS and WhatsApp.
- To check that each run is real and add verified kilometres to your total.
- To show leaderboards and pick daily and weekly winners.
- To contact winners about prizes.
- To prevent fraud, such as the same screenshot being used twice or several entries from one person.
- To count how many people each channel or partner brought in. Partners only ever see totals and their own click references, never your name or number.
We use your information only for the run. We don’t sell it.
How runs are checked
Screenshots are read automatically by an AI service that extracts the distance, date and activity type. Runs that look unusual are flagged, and a member of our team may look at the screenshot before deciding. If a run is rejected in error, you can contact us (see below).
What other people can see
The public leaderboard shows your name, the city you entered, your rank and your verified kilometres. Your mobile number, screenshots and other details are never shown publicly.
Who we share it with
We share only what each service needs to do its job:
- Hosting and storage: DigitalOcean. Servers and the database are in Bengaluru, India. Run screenshots are stored in Singapore.
- Screenshot reading: Google’s Gemini AI service, which receives the screenshot to read the run details.
- Messages: our SMS and WhatsApp providers, which receive your name, mobile number and dashboard link to deliver messages.
- Approximate location: an IP location service, which receives your IP address.
- Analytics and advertising, only if you accept: Google (Google Analytics) and Meta (Meta Pixel), which receive how you use the site but not your name, number or dashboard link.
- Anyone we are required to share it with by law.
Cookies and browser storage
The site itself remembers one thing in your browser: whether you chose Accept or Decline on the privacy banner, for 180 days.
If you choose Accept, we also use Google Analytics and the Meta (Facebook) Pixel. They set their own cookies and tell us how people find and use the site, for example which ad or post brought them and whether they registered or logged a run. They never receive your name, mobile number or your personal dashboard link. If you choose Decline, neither of them loads. You can change your choice at any time with .
How long we keep it
We keep registration details and run records for 24 months, so we can finalise results, hand out prizes and answer any queries. After that we delete screenshots and personal details, and keep only anonymous totals.
Your choices and rights
- Ask to see the personal information we hold about you.
- Ask us to correct it.
- Ask us to delete it. If you do this during the campaign, your entry and kilometres are removed from the run.
- Withdraw your consent at any time.
- Nominate someone to act for you.
Email tataultra@tata.com from any address, and include the mobile number you registered with. We will reply within 30 days. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.
Children
If you are under 18, please register only with the permission of a parent or guardian.
Changes to this policy
If we change how we use your information, we will update this page and the date at the top.