This page explains what UTV Offroad Adventures collects when you use this website, why we hold it, and how to ask us to delete it. It covers this website only; the sponsors and affiliates we link to run their own sites under their own terms.
Last reviewed: August 2026.
What we collect when you register for an event
The registration form asks for:
- the driver's first and last name;
- contact details — email address, telephone number, and postal address, city, state and ZIP code;
- an emergency contact: their name and telephone number;
- vehicle details — make and model, whether it carries a current OHV sticker, and whether it is street licensed;
- each participant travelling with you: name, age, meal choice and shirt size, so that we can run the check-in list, cater correctly and know who is on the trail;
- the options you choose — day or days attending, lodging or camping, poker run, raffle, extra shirts;
- how you heard about us, which is optional.
We also record the IP address the registration was submitted from, and the date and time. That is kept for security: it is what lets us investigate fraudulent submissions and rate-limit abuse.
Ages are collected for participants including minors, because insurance and trail rules depend on them. Please do not enter any medical information into the form — tell the ride leader in person instead.
Card details
We never receive your card number. The payment fields on the registration and gift-certificate forms are handled by Authorize.net's Accept.js, which sends the card number, expiry date and security code from your browser directly to Authorize.net and returns a one-time token to us. The card number, the expiry date and the security code do not pass through this website and are not stored in our database or in any log file.
What we do keep from a payment is:
- the last four digits of the card and the card type, so a receipt is recognisable;
- Authorize.net's transaction reference and authorisation code, so a payment can be reconciled or refunded.
If you pay a deposit and leave a balance to be collected later, we ask Authorize.net to hold your card in their own vault and we store only the reference numbers they give us for it. That reference cannot be used anywhere but our merchant account, and it is not a card number.
Contact and private-tour enquiries
The contact and private-tour forms record the name, email address, telephone number and message you send, plus the submitting IP address. Enquiries are stored so that a mail outage cannot lose one.
Cookies
This site sets one cookie of its own: a session cookie that keeps your
place in the registration flow while you move between steps. It holds a random
identifier and nothing else — no name, no email address, no card
data. It is marked HttpOnly and SameSite=Lax,
and Secure whenever the page is served over HTTPS, and it
expires when you close the browser.
There are no advertising cookies, no analytics cookies, no social-media pixels and no third-party trackers on this site. We do not use Google Analytics.
Two things on the site do load from other companies, and both are worth knowing about. Sponsor and affiliate logos are served from those companies' own web hosts, so displaying them tells those hosts your IP address. Videos on our video pages show a still image until you press play; nothing is requested from YouTube's player, and no YouTube cookie is set, unless you choose to start a video.
Who else sees your details
Authorize.net processes payments and therefore receives the payment details described above. Our email provider carries confirmation messages. Ride leaders and event volunteers see the check-in list for the event they are running: names, emergency contact, vehicle and meal choices.
We do not sell your details, rent them, or pass them to anyone for marketing. We disclose them otherwise only where the law requires it.
How long we keep it
- Registrations. Kept after the event, because they are our record of who rode with us, what was paid and what was refunded. We need them for accounting, insurance and to resolve any later dispute about a charge.
- Payment records. The transaction reference, the authorisation code and the last four digits are kept with the registration for the same reasons.
- Enquiries. Contact and tour submissions are kept until they are dealt with, and then as reference for repeat enquiries.
- Gift certificates. Kept while the certificate is live. Certificates expire 365 days after purchase.
- Server logs. Error, security and payment logs are held outside the public web root and rotate as they grow; only the current file and the one before it are retained. They contain IP addresses and request references, never card numbers.
Asking to see or delete your details
Email contact@utvoffroadadventures.com and say what you would like: a copy of what we hold about you, a correction, or deletion. Please write from the email address you registered with, or give us enough detail to find the registration, so we are not handing someone's records to the wrong person.
When you ask us to delete your data, we remove everything that identifies you: names, email address, telephone numbers, street address, emergency contact, enquiry messages and the payment-profile references that would let a card be charged again. What remains is anonymized statistics — that an unnamed rider of a certain age attended a certain event, what was paid and which options were chosen — which we keep for accounting and to report aggregate attendance figures. Those leftover records cannot be traced back to you.
Two things we may also have to keep: the financial record of a payment (amount, date, transaction reference and last four digits), which we are required to retain for accounting, and any record we need for an open dispute or insurance claim. We will tell you if that applies to you.
If you are registered for an event that has not happened yet, deleting your details means cancelling your place, and the refund policy applies.
Security
The site is served over HTTPS only. Card data is tokenised in your browser and never reaches our server. Administrative access requires a named account and is logged. If you believe you have found a security problem with this site, please email contact@utvoffroadadventures.com and give us a chance to fix it.
Changes
If we change what we collect or how we use it, we will update this page and the review date at the top of it.