Who are we?
Ride On Cycling for All (Ride On) is a charity and social enterprise providing refurbished bikes and opportunities for more people to cycle more often, based in Devon. Ride On have a registered office at 9 St. Scholasticas, Teignmouth, TQ14 8FF and charity number of 1174055.
Ride On complies with the General Data Protection Regulation (GDPR). The security of your data is extremely important to Ride On and we guarantee to respect your privacy rights and conduct your data fairly and legally at all times.
What information do we collect?
- Information for safeguarding purposes
- Gender and age categories
- The type of cycling and amount of physical exercise that you do
- Phone Numbers
- Payment Information
- Website usage data
We retain records of your queries and correspondence any time you contact Ride On.
Why do we need to collect and store personal data?
In order for us to provide you with a service, we need to collect personal data for such reasons as, provision of courses, to be able to provide any contracted services, quotation, invoicing and accounts. In any event, we are committed to ensuring that the information we collect, and use is appropriate for this purpose, and does not constitute an invasion of your privacy.
In terms of being contacted for marketing purposes, Ride On would contact you for additional consent.
Where do we keep your data?
The security of our customer data is a significant concern to Ride On. Ride On has a legal obligation to keep your data safe and to handle it with care. Ride On stores your personal data securely, electronically in password protected applications or in locked repositories in the case of paper-based communications.
How do we use your information?
The GDPR says that Ride On can use and share your personal data only where Ride On has a proper reason for doing so.
The permitted Legal Bases for processing are set out in article 6 of the GDPR. Ride On applies to the following;
- Consent: you have given clear consent for Ride On to process your personal data for a specific purpose (for example, marketing)
- Contract: the processing is necessary for a contract Ride On has with you, or because you have asked Ride On to take specific steps before entering into a contract.
Who might we share your data with and why?
We may pass your personal data on to third-party service providers contracted to Ride On in the course of dealing with you. Any third parties that we may share your data with are obliged to keep your details securely, and to use them only to fulfil the service they provide to Ride On. When they no longer need your data to fulfil this service, they will dispose of the details in line with Ride On’s procedures. If we wish to pass your sensitive personal data onto a third party we will only do so once we have obtained your consent, unless we are legally required to do otherwise.
How long do we keep your personal data?
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
Under what circumstances will Ride On contact me?
Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject procedures to minimise the risk of unauthorised access or disclosure.
Can I find out the personal data that the Ride On holds about me?
Ride On at your request, can confirm what information we hold about you and how it is processed. If Ride On does hold personal data about you, you can request the following information:
- Identity and the contact details of the person or organisation that has determined how and why to process your data. In some cases, this will be a representative in the EU.
- Contact details of the data protection officer, where applicable.
- The purpose of the processing as well as the legal basis for processing.
- If the processing is based on the legitimate interests of Ride On or a third party, information about those interests.
- The categories of personal data collected, stored and processed.
- Recipient(s) or categories of recipients that the data is/will be disclosed to.
- If we intend to transfer the personal data to a third country or international organisation, information about how we ensure this is done securely. The EU has approved sending personal data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure there are specific measures in place to secure your information.
- How long the data will be stored.
- Details of your rights to correct, erase, restrict or object to such processing.
- Information about your right to withdraw consent at any time.
- How to lodge a complaint with the supervisory authority.
- Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
- The source of personal data if it wasn’t collected directly from you.
- Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.
What about blog comments?
We collect information about visitors who comment on our blog using Akismet anti-spam service. The information typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).
Google Analytics and cookies
Like most websites, this site uses Google Analytics (GA) to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website.
Although GA records data such as your geographical location, device, internet browser and operating system, none of this information personally identifies you to us. We send a partial record of your IP address to GA with the last few characters or “octet” removed, this reduces the ability for anyone to use this to identify an individual.
Disabling cookies on your internet browser will stop GA from tracking any part of your visit to pages within this website.
What are your rights?
You have the following rights under the GDPR:
- The right to be informed. Individuals have the right to be informed about the collection and use of their personal data. This privacy notice fulfils that requirement.
- The right of access. You can gain access to the information we hold by contacting us either email [email protected]. We will provide you with details of any information we hold on you.
- The right to rectification. If any of the details we hold for you are in error, we will make any appropriate changes required to ensure that they remain up to date.
- The right to erasure. In certain circumstances, you have the right to request that we delete personal data held on you. This does not apply if we have a legal reason for retaining it.
- The right to restrict processing. In certain circumstances, you have the right to ask us to ‘restrict processing of data’. This means we would need to secure your data but not otherwise use it. In practice, this would involve suspending your account and therefore your access to our services.
- The right to data portability. You have a right to obtain some of the personal data we hold on you in a ‘structured machine-readable’ format.
- The right to object. You have the right to opt-out of any marketing communications that we may wish to send you. You can change your marketing preferences at any time by emailing us or by using the ‘unsubscribe’ link contained in our marketing emails.
- Rights related to automated decision-making including profiling. Ride On does not apply any automated decision-making or profiling to any of your personal data.
If you have any questions about how Ride On uses your personal data that are not answered here, or if you want to exercise your rights regarding your personal data, please contact 07544314749
You have the right to lodge a complaint with the Information Commissioner’s Office. Further information, including contact details, is available at https://ico.org.uk
Changes to this privacy notice
We recognise that transparency is an ongoing commitment, so we will keep this privacy notice under regular review.