Privacy notice

Last Updated: 10 March 2025

Red Fox Cycling Limited (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data when you interact with our services, visit our website, or provide us with your personal information.

This Privacy Notice applies to all personal data that we process in connection with our business operations, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Red Fox Cycling Limited is an event management business based in the UK. Our registered address is 22 Malta Road, Cambridge, CB1 3PZ.

We are the "data controller" for the purposes of UK data protection law, which means that we are responsible for deciding how and why your personal data is processed.

2. What Information We Collect

We collect and process the following personal data:

Identification data: Name, email address, phone number, address.
Technical data: IP address, browser type and version, device type, browsing history, and other technical information collected through cookies.
Transactional data: Payment information and order details.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

To provide and manage our services to you.
To communicate with you regarding your orders, requests, and general inquiries.
To process payments and manage your transactions.
To implement safety processes and procedures which help keep you safe on the road and prevent injury and illness.
To comply with legal obligations, such as regulatory requirements and tax filings.

4. Lawful Bases for Processing Your Data

We process your personal data based on the following lawful bases under the UK GDPR:

Consent: Where you have given us explicit consent to use your personal data for specific purposes.
Contractual necessity: Where it is necessary for the performance of a contract with you (e.g. providing services you have requested).
Legal obligations: Where we are required to process your data to comply with legal or regulatory obligations.
Legitimate interests: Where we have a legitimate interest in processing your data, provided this does not override your rights and freedoms.

5. Sharing Your Personal Data

We may share your personal data with third parties for the following purposes:

Service providers: We may share your data with third-party service providers (e.g. caterers, bicycle hire companies, providers of accommodation) to help us deliver our services to you.
Legal compliance: We may disclose your personal data if required by law, regulation, or legal process (e.g., to comply with tax requirements or court orders).

We ensure that any third parties we share your personal data with are compliant with data protection regulations and use appropriate safeguards to protect your information.

6. International Data Transfers

If we transfer your personal data outside of the UK, we will ensure that the transfer is subject to appropriate safeguards to protect your data. This may include the use of standard contractual clauses approved by the UK Information Commissioner’s Office (ICO) or other lawful mechanisms for cross-border data transfers.

7. Your Rights Under the UK GDPR

As a data subject, you have the following rights regarding your personal data:

Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: You can request that we correct any inaccuracies in your personal data.
Right to erasure: You can request that we delete your personal data, subject to certain conditions.
Right to restrict processing: You can request that we limit the processing of your personal data in certain situations.
Right to object: You can object to the processing of your personal data on grounds relating to your particular situation, including direct marketing.
Right to data portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format, and request that we transfer this data to another data controller.

To exercise any of these rights, please contact us using the contact details provided below.

8. How We Protect Your Data

We use appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or disclosure. These measures include encryption, secure servers, and regular security audits. However, no method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

9. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Notice or as required by law. When we no longer need your data, we will securely delete or anonymize it.

10. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated Privacy Notice on our website. Please check this page regularly for any updates.

11. Contact Us

If you have any questions or concerns about how we handle your personal data or would like to exercise your rights under the UK GDPR, please contact us at:

RED FOX CYCLING LIMITED
Email: richard@redfoxcycling.co.uk
Address: 22 Malta Road, Cambridge, CB1 3PZ

For more information about your rights and how to file a complaint, you can contact the Information Commissioner’s Office (ICO), the UK’s data protection authority, at www.ico.org.uk.