Cycling UK Privacy Policy
Cycling UK
Privacy Notice for users of the Cycle Share Fund
This privacy notice (Notice) explains how Cycling UK and The Delivery Partner (we, our, us) collects, uses and shares your personal data in respect to the Cycle Share Fund (scheme), and your rights in relation to the personal data we hold.
Updating the Notice
We may modify this Notice at any time. We will endeavour to update you to any significant changes to this Notice. This Notice was last updated in January 2024.
Data controllers and contact details
Gailes Golf & Leisure
Simpsinns
Marine Drive
Irvine
KA11 5AE
And
The Cyclists Touring Club (trading as Cycling UK with company number 25185 and registered as a charity in England and Wales with charity number 1147607 and in Scotland with charity number SC042541)
are the data controllers of your personal data.
If you have any questions about this Notice, or if you would like to exercise any of your legal rights in respect of your personal data, please contact our Data Protection Officer using the following details:
- Simpsinns Email: reception@gailesgolfleisure.com
- Simpsinns Post: Gailes Golf & Leisure, Marine Drive, Irvine, KA11 5AE
- Cycling UK Email: dpo@cyclinguk.org
- Cycling UK Post: FAO Data Protection Officer, Parklands, Railton Road, Guildford, Surrey GU2 9JX
Cycling UK and personal data collected through Scheme surveys
Please note that Cycling UK (and not The Delivery Partner) is the data controller for personal data collected in respect to any surveys you complete in connection to the Scheme.
For details on Cycling UK’s other data processing please see our privacy policy https://www.cyclinguk.org/privacy-policy
If you have any questions in respect to Cycling UK’s processing, please contact Cycling UK.
How we collect your information
We may collect your personal information:
- from the information you provide to us when you fill in the form on our e-booking system
- when you correspond with us by phone; email, or by other means in respect to the Scheme
- from third parties, if they provide information to us about your participation in the Scheme (for example, details of misuse, non-compliance with our terms, accidents or unlawful activity)
The types of information we collect and our legal basis for using your information
We may collect and process the following personal information about you:
- when you book a bicycle loan with us, we collect: your name, postcode, contact details (address, email address and phone number) and details concerning your hire. We will process this information because it is necessary for the performance of our bicycle hire agreement with you or to take steps at your request prior to entering into the hire agreement with you, and – in the case of access requirements freely given to us – to establish and comply with our legal duty of care.
- We also use your email address and details of your hire to send out surveys for statistical purposes carried out in the public interest.
Who we share your information with
Information processed in respect to the Scheme is shared with:
- Our insurers where this is required (for example, we may need to share your information in the case of an accident) to comply with our legal obligations or to exercise or defend a legal claim
Legal obligations
We process your personal data for our compliance with our legal obligations including for charity regulatory reporting requirements, to report crimes and serious incidents, and to comply with our legal duty of care. In this respect and only if required, we will share your data with the Charity Commission, the police and other competent authorities.
Direct marketing and consent
We also process your personal data where we have your specific consent to do so (for example, where we have sought and obtained your consent to send you direct marketing by email). If you have given your consent and you wish to withdraw it, please contact us using the contact details set out above or click the “unsubscribe” link in the emails we send.
How long your information is kept
We will retain your personal data for as long as is required for legal purposes and our legitimate business purposes after the termination of our agreement with you. In particular:
in relation to personal data relating to your use of the Scheme, we will retain that data for a period of seven years after the bicycle hire agreement has concluded in case any legal claims arise out of your use of the Scheme
In relation to data for the purpose of monitoring and evaluating (surveys) the Scheme we will retain that data for a period of 12 month after the bicycle hire agreement.
we will retain your details on our marketing database until you inform us that you no longer wish to receive our marketing communications. However, where you do unsubscribe from our marketing communications we will keep your details on a suppression list to ensure that we do not send you information you have asked not to receive
Your rights
Under UK data protection law you have the following rights in relation to our processing of your personal data:
- to obtain access to, and copies of, the personal data that we hold about you
- to require us to correct the personal data we hold about you if it is incorrect
- to require us to erase your personal data in certain circumstances
- to require us to restrict our data processing activities in certain circumstances (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal)
- to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for transmitting that personal data to another data controller
- to object, on grounds relating to your situation, to any of our processing activities where you feel this has a disproportionate impact on your rights
- to complain about the processing of your data to the Information Commissioner’s Office (ICO), although the ICO recommends that you first try and resolve the complaint with us
Please note that the above rights are not absolute, and we may be entitled to refuse your requests where exceptions apply.