Privacy Policy

Last updated 2026

Choose the notice for Australia or the Philippines. The notice follows your region until you open a direct link.

Privacy notice — Australia

Who we are

Narra Solutions Pty Ltd (ABN 29 637 047 913), Truganina VIC 3029, Australia, operates Endyur in Australia and is responsible for Australian personal information.

For athletes and organisers using Endyur for events in Australia, we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Collection notice

Narra Solutions Pty Ltd (ABN 29 637 047 913), Truganina VIC 3029, is responsible for Australian personal information collected through Endyur. We collect your name, email address, date of birth, mobile number, address, emergency contact and the details of events you enter so we can create your account and operate those events. We share entry details with the organiser of the event you enter. If you do not provide this information we cannot complete your account or entry. We do not collect government ID numbers. For events in the Philippines you pay the organiser directly by GCash or bank transfer and upload proof of payment; Endyur does not hold that payment. Card payments through Stripe for Australian events are coming soon.

Personal information we collect

Account and profile: name, gender, date of birth, email address, mobile number and address.

Safety: emergency contact name, relationship and number, and any medical notes you choose to give us.

Security: account credentials, stored hashed, and multi-factor authentication settings.

Entry: the events and categories you enter, kit size, bib number, QR confirmation token, and waiver acceptance (version and time).

Payment: for a Philippine event, the proof of payment you upload, a reference number and the payment method. We do not collect government ID numbers, card numbers or banking credentials.

How we use it

To create and manage your account, process entries, issue bib numbers and QR confirmations, and record waiver acceptance.

To contact you about your entry, payment status and race-day information.

To let the organiser of an event manage the entries for that event, including checking payments and preparing a start list.

To produce aggregate reports and improve the service.

Who we share it with

Entry, contact and emergency-contact details for an event are shared with that event's organiser so they can run the event. Organisers are expected to use the information only for that purpose.

Service providers who host the platform, store files and send email process personal information for us. Because Endyur operates in Australia and the Philippines, personal information may be handled in either country.

We may disclose information where the law requires it. We do not sell personal information.

Payments

For events in the Philippines, participants pay the organiser directly by GCash or bank transfer and upload proof of payment. Endyur does not hold those payments.

Card payments through Stripe for Australian events are coming soon. We do not store card numbers.

Public results

Published results show the same public name to every visitor.

Events default to anonymous results. If you have not chosen how to appear, the public sees "Athlete" and your bib number.

Each entry has a "Show me as" setting with three choices: Full name, Short name (for example, Jamie R.) and Anonymous (Athlete and your bib number).

If you are under 18 on event day, public results do not show your full name or an age group. A Full name or Short name choice is shown as a short name. An Anonymous choice, including the anonymous default when you have not chosen, is shown as Athlete and your bib number.

Public results do not include your date of birth, email address or phone number.

Endyur admins and the event organiser can see your full name when they manage the event, and on the start list while they are signed in. The public results page shows the public name to everyone. The organiser's results preview uses that same public name.

Holding information and security

Entry and event records are kept for as long as needed to run the event and to meet legal, accounting and dispute-resolution requirements — generally up to five years after the event date. Account information is kept while your account is active and is deleted or de-identified on request, subject to those requirements.

We use password hashing, optional multi-factor authentication, encrypted transport and row-level access controls. Payment receipts are stored privately and can be viewed by you, the relevant organiser and authorised Endyur staff.

Access, correction and complaints

You can ask to access or correct your personal information by emailing support@endyur.com. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).

Cookies

We use only essential cookies and browser storage to keep you signed in and to remember basic preferences, including your AU or PH region. We do not use advertising or cross-site tracking cookies.

Children

Endyur accounts are intended for people aged 18 and over. A minor may be entered in an event by a parent or legal guardian, who accepts the event waiver for them where the organiser's rules require it.

On public results, an athlete under 18 is not shown with a full name or an age group. See Public results above.

Changes

We may update this notice from time to time. Material changes will be posted on this page with a revised date.

Contact

Narra Solutions Pty Ltd, ABN 29 637 047 913, Truganina VIC 3029, Australia. Email: support@endyur.com.

Privacy notice — Philippines

1. Introduction

Endyur, Gingoog City, Misamis Oriental, provides registration and race timing for endurance events in Australia and the Philippines. This is our notice for the Philippines. We handle personal data in line with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission.

2. Collection notice

Endyur, Gingoog City, Misamis Oriental, collects your name, email, mobile number, date of birth, address, emergency contact and entry details to create your account and process your registration. For events in the Philippines you pay the organizer directly by GCash or bank transfer and upload proof of payment. Endyur does not hold those payments. We do not collect government ID numbers. Card payments through Stripe for Australian events are coming soon. If you do not provide the details we ask for, we cannot complete your account or entry.

3. Information we collect

Account and profile data: name, gender, date of birth, email address, mobile number, and address details.

Safety data: emergency contact name, relationship and contact number, and any medical notes you choose to provide.

Security data: account credentials (stored hashed) and multi-factor authentication settings.

Registration data: events and categories entered, kit size selections, bib number, QR confirmation token, and waiver acceptance records including version and timestamp.

Payment data: for events in the Philippines, you pay the organizer directly by GCash or bank transfer and upload proof of payment. Endyur does not hold those payments. We keep the proof you upload, the reference number and the payment method. We do not collect or store card numbers or banking credentials. Card payments through Stripe for Australian events are coming soon.

We do not collect government ID numbers.

4. How we use your information

To create and manage your account, process event registrations, generate bib numbers and QR confirmations, and record waiver acceptance.

To communicate with you about your registrations, payment status and race-day information.

To enable Organizers to manage the registrants of their own events, including verifying payments and preparing start lists.

To produce aggregate platform reporting and improve the service.

5. Sharing your information

Registration, contact and emergency-contact details for a specific event are shared with that event's Organizer for the purpose of operating the event. Organizers are required to use this data only for that purpose.

We use service providers for hosting, database, storage and email delivery, who process data on our instructions. Because Endyur operates in Australia and the Philippines, personal data may be handled in either country.

We may disclose data where required by law or valid legal process. Endyur does not sell personal data to third parties.

6. Public results

Published results show the same public name to every visitor.

Events default to anonymous results. If you have not chosen how to appear, the public sees "Athlete" and your bib number.

Each entry has a "Show me as" setting with three choices: Full name, Short name (for example, Jamie R.) and Anonymous (Athlete and your bib number).

If you are under 18 on event day, public results do not show your full name or an age group. A Full name or Short name choice is shown as a short name. An Anonymous choice, including the anonymous default when you have not chosen, is shown as Athlete and your bib number.

Public results do not include your date of birth, email address or phone number.

Endyur admins and the event organizer can see your full name when they manage the event, and on the start list while they are signed in. The public results page shows the public name to everyone. The organizer's results preview uses that same public name.

7. Data retention

Registration and event records are retained for as long as needed to operate the event and to meet legal, accounting and dispute-resolution requirements — generally up to five (5) years after the event date. Account data is retained while your account is active and deleted or anonymised on request, subject to those retention obligations.

8. Security

We apply password hashing, optional multi-factor authentication, encrypted transport, row-level access controls in our database, and restricted access to uploaded documents such as payment receipts, which are stored privately and viewable only by you, the relevant Organizer, and authorised Endyur staff.

9. Your rights under RA 10173

You have the right to be informed, to access your personal data, to correct inaccurate data, to object to processing, to request erasure or blocking, to data portability, and to be indemnified for damages.

You may exercise these rights by contacting our Data Protection contact below. You also have the right to lodge a complaint with the National Privacy Commission.

10. Cookies and tracking

We use only essential cookies and browser storage needed to keep you signed in and to remember basic preferences, including your AU or PH region. We do not use advertising or cross-site tracking cookies.

11. Children's privacy

Endyur accounts are intended for users aged 18 and above. Minors may only be registered for an event by a parent or legal guardian, who must accept the event waiver on their behalf and where required by the Organizer's eligibility rules.

On public results, an athlete under 18 is not shown with a full name or an age group. See Public results above.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a revised effective date.

13. Contact

Data Protection contact, Endyur, Gingoog City, Misamis Oriental, Philippines. Email: support@endyur.com