Privacy policy

What are your rights in respect of your personal data?

1. The right of access.
2. The right to rectification.
3. The right to erasure or right to be forgotten.
4. The right to restriction of processing.
5. The right to be informed.
6. The right to data portability.
7. The right to object.
8. The right not to be subject to a decision based solely on automated processing.

Under the Act and UK GDPR, you may ask for a copy of the information we hold about you and you may request changes be made to this information if it is inaccurate or not up to date. Please write to The Data Protection Officer (DPO), or email [email protected] in these circumstances.

Information we may collect from you:

• We may collect personal information from you in the following ways:
• When you make a phone call or send an e-mail to seek information about our services;
• Recruitment and employment, including agents, suppliers and contractors;
• When you have donated to us via any method whether directly or indirectly;
• Through our use of the Cookies on our website (please see the Cookies section below);
• Through your request for publications and other marketing materials;
• Through your request for information about our services and related topics and events;
• Through your registration for events, projects and activities;
• Through your contacting us with enquiries and comments;
• Through tickets purchasing;
• Through volunteering and event attendance;

If you are a next of kin of our staff or service users, we may have your data given to us in that capacity. If you take one the steps mentioned above, we may collect and process personal information about you such as:

• Your name, address, email address and other contact information;
• Records of your correspondence with us, if you have contacted us;
• Health data;
• Protected characteristics;
• Disclosure and Barring Service clearance data
• Donation history;
• Financial information;
• Details of your visit to the website;
• Multimedia files such as photographs and video footages;

Membership, Events, Projects and Activities:

We provide services to individuals as well as organisations. The exact data held will depend on the services to be provided.

Where we engage with individuals, we may collect and process personal data in order to satisfy a contractual or operational obligation. We request that individuals only provide the personal data that is required for us to fulfil our contractual or operational obligation.

Why do we process data?

Where data is collected for membership and/or events, projects and activities, it is used for a number of purposes, as follows;

Providing services to you. Data is processed in accordance with the purpose which we have collected it and may sometimes be further clarified in written documentation supplied before any data processing may occur. We provide a range of membership benefits and cycling events and projects, the different reason why we may process your data includes;

In order to manage and administer our business and services, we may collect and process personal data. This may include (but is not limited to) maintaining internal business records, managing client relationships, hosting events, reporting to funders, administering client facing applications, processing donations, fundraising including sending you information about Cycling UK and its work and how you can support us, and maintaining internal operating processes.

Cycling UK may make use of profiling and screening methods to ascertain who may be able to support us with a larger gift and to provide a better experience for our members and supporters. Profiling can help target our resources more effectively through gaining an insight into the background of our members and supporters and helping us to build relationships that are appropriate to their interests and capacity to give. We use it to tailor our communication and to invite potential supporters to get involved with us in new ways.

We may combine the existing information provided by members, supporters and participants with information from publicly available sources. These may include charity websites and annual reviews, corporate websites, public social media accounts, the electoral register and Companies House. We only use reputable sources, where someone would expect their information may be read by the public. We undertake this research in house and may also engage third parties (see Sharing personal data).

This approach allows us to be more efficient and cost-effective with our resources, and also reduces the risk of someone receiving information that they might find irrelevant, intrusive or even distressing.

We’re committed to putting you in control of your data and you’re free at any time to opt out of this activity. Please contact our Data Protection Office by emailing them at  [email protected] or write to DPO, Cycling UK, Parklands, Railton Road, Guildford, Surrey, GU2 9JX

How long do we hold data for:

We retain the personal data processed by us for as long as is considered necessary for the purpose(s) for which it was collected, there may also be occasions which will require data to be kept for longer, however this will typically be for legal purposes.

People who use our website:

When people visit our website, personal data is collected both through automated tracking and interacting with various forms on the website or apps (collectively referred to as the websites).

Personal data may be collected when individuals fill in forms on our websites or by corresponding with us by phone, e-mail, completing a survey or otherwise. This includes information provided when an individual register’s to use our websites, subscribe to our service, make an enquiry.

For more information, please visit our Cookie Policy.

Sharing personal data:

We will never sell your information to third parties or share your information with another organisation for its own marketing purposes. However, in some cases, we may need to pass your information on to third-party service providers who are contracted by Cycling UK, in order to fulfil the purposes of the charity.

We only work with third parties who treat data securely.

We undertake wealth research in-house and may also engage third parties such as Factary, Experian or Milestone Research to help us identify people who may be able to support Cycling UK with a larger gift. Other than the third-party service providers who are contracted to us, you can be assured your information will not be disclosed to outside organisations unless we are required to do so by law, for example if you choose to Gift Aid a donation then we are required to

We will only share personal data with others when we are legally permitted to do so. When we share data with others, we put contractual arrangements and security mechanisms in place to protect the data and to comply with our data protection, confidentiality, and security standards.

Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation.

To do this we may use additional external sources of data, like telephone look up through external and carefully selected agencies. This would be to increase and enhance the information we hold about you and make sure Cycling UK are working with the most up to date contact details. This may include obtaining details of changes of address, date of birth, telephone numbers and other contact details, information related to your wealth, and consumption and demographic data generated through the MOSAIC geodemographic tool. It may also include information from public registers and other publicly available sources such as Companies House, newspapers and magazines.

For mailing and telephone based direct marketing campaigns, we may contact current and lapsed members by telephone and mailing campaigns under legitimate interest. We will not contact you if you are registered with the Telephone Preference Service (TPS) or Mail Preference Service (MPS) unless you have given us opt in consent that you are happy to receive calls or mailings from us.

You may still receive other types of telephone calls or mailings from us if you are on the Telephone Preference Service (TPS) or Mail Preference Service (MPS) as long as they are not for marketing purposes and are admin based, such as checking your direct debit mandate or Gift Aid status, welcome calls and thank you calls or mailings.

We do outsource some of the telephone calling we carry out as well as mailing programs, but we will only ever use carefully selected organisations which operate in a sympathetic manner to Cycling UK.

Where we store your personal data:

The data that we collect from you will be processed at our servers in the UK. It may also be processed by organisations operating in the EEA that Cycling UK has instructed.

If Personal Data is transferred outside the UK or EEA to a country without a designated adequacy rating Cycling UK will request the data subject's consent before processing the data. Consent will not be sought where the Processor's Binding Corporate Rules stipulate that the data will be processed in accordance with UK GDPR (E.g. Survey Monkey: Privacy Notice | SurveyMonkey)

Third party sites:

Our Site may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Complaints:

For further information on your rights and how to complain to the ICO, please refer to the ICO website https://ico.org.uk/concerns

Contact details:

Information Commissioner's Office Wycliffe House
Water Lane Wilmslow Cheshire SK9 5AF
Tel: 0303 123 1113 (local rate)

Changes to our privacy statement:

Updates to this privacy statement will appear on the website. This privacy statement was last updated on 11th March 2024