Privacy Policy

We understand that privacy and the security of your personal information is extremely important. This policy sets out what we do with your information and what we do to keep it secure. It also explains where and how we collect your personal information, as well as your rights over any personal information we hold about you. This Policy explains how we do this and tells you about your privacy rights and how the law protects you.

‍

Last updated: 12/1/2026

Njinga Cycling Limited (“we”, “us”, “our”) is committed to protecting your privacy and personal data.

This Privacy Policy explains how we collect, use, store, and protect your personal data, your rights under UK data protection law, and how the law protects you.

This policy applies to all interactions with Njinga Cycling, including our website, Perform, Accelerate, Elevate, Trips, events, communications, and marketing.

1. Who We Are (Data Controller)

Njinga Cycling Limited
1 Park Road, Hampton Wick, KT1 4AS
‍Email: info@njingacycling.com
‍Telephone: 0753 385 6647

For the purposes of UK GDPR, we are the data controller.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

a) Identity & Contact Data

Name
Email address
Telephone number
Billing and delivery address

b) Transaction & Payment Data

Purchase history
Transaction references
Payment status
We do not store full card details.

Payments are processed securely by Stripe, which provides us with limited transaction data such as confirmation of payment, transaction ID, date, amount, and partial card information (e.g. last four digits).

c) Account & User Data

Login credentials
Course progress and engagement
Survey responses
Content you upload or submit

d) Technical Data

IP address
Browser type and version
Device and operating system
Usage data via cookies and analytics

e) Marketing & Communications Data

Marketing preferences
Email engagement
Communication preferences

f) Event & Trip Data (Where Applicable)

Emergency contact name and phone number
Participation records
Dietary or logistical information you voluntarily provide

Emergency contact data is used only for safety purposes and deleted after the event unless legally required to retain it.

3. How We Collect Your Data

We collect personal data when you:

Register an account
Purchase or book a service
Join a coaching programme or Trip
Subscribe to emails or updates
Contact us by email, phone, forms, or social media
Use our website (via cookies and analytics)

4. Third-Party Platforms We Use (Transparency)

We use trusted third-party service providers to operate our business, including:

Zenler – online course hosting and account management
Stripe – payment processing
Vimeo – video hosting
Zoom – live coaching sessions and workshops
Mailchimp / Email service providers – email communications
Google Analytics – website analytics
Meta (Facebook/Instagram) – advertising and remarketing

Each provider processes data only under our instructions and in accordance with data protection law.

5. Lawful Bases for Processing

We process your personal data only where permitted by law, relying on:

Contract - to deliver services you purchase
‍Legitimate interests – to operate, improve, and grow our business
‍Legal obligation – accounting, tax, and regulatory compliance
‍Consent – marketing communications where required

You may withdraw consent at any time.

6. How We Use Your Personal Data

We use your data to:

Deliver coaching, digital content, and Trips
Process payments and bookings
Communicate with you
Provide customer support
Improve our website and services
Send marketing communications (where permitted)
Meet legal and regulatory obligations

We do not sell your personal data.

7. Automated Decision-Making & Profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
Any decisions affecting your participation or access are made by humans.

8. Marketing Communications

We may send marketing communications where:

You have given consent, or
You are an existing customer and the marketing relates to similar services (in line with PECR)

You can opt out at any time by:

Clicking “unsubscribe” in emails
Updating your account preferences
Emailing info@njingacycling.com

Opting out does not affect service-related communications.

9. Photography & Video at Events and Trips

We may take photographs or video recordings during coaching sessions, Trips, or events for marketing and promotional purposes.
Images may be used on our website, social media, or marketing materials.
Media is retained only as long as necessary for legitimate business purposes.
You may opt out by notifying us before or during the event

We will respect reasonable opt-out requests wherever practicable

10. Data Sharing & Disclosure

We may have to share your personal data with:

Course and coaching platforms
Payment processors
Email and communication providers
Video hosting and conferencing providers
IT and system administrators
Professional advisers (lawyers, accountants, insurers)

Regulatory authorities where legally required

All third parties must keep your data secure and confidential.

11. International Data Transfers

Some service providers are based outside the UK.

Where data is transferred internationally, we ensure appropriate safeguards are in place, including:

UK adequacy regulations
International Data Transfer Agreements (IDTAs)
UK-approved contractual safeguards

You may request further details by emailing info@njingacycling.com

‍12. Data Security & Breach Notification

We use appropriate technical and organisational measures to protect your data.

In the event of a personal data breach:

We will notify the ICO within 72 hours where required
We will notify affected individuals without undue delay where there is a high risk to rights and freedoms

13. Data Retention

We retain personal data only as long as necessary:

Customer and transaction data: 6 years (legal/tax purposes)
‍Marketing data: until you opt out
‍Emergency contact data: deleted after the relevant event
‍Anonymised data: may be retained indefinitely

‍14. Your Legal Rights

Under UK GDPR, you have the right to:

Access your data
Correct inaccuracies
Request erasure
Object to processing
Restrict processing
Data portability
Withdraw consent

Requests can be made to info@njingacycling.com You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We respond within 30 days.

15. Cookies

We use cookies to improve functionality, analyse traffic, and support marketing.
You can manage cookies through your browser settings.
See our Cookie Policy for details.

16. Third-Party Links

Our website may include links to third-party sites.
We are not responsible for their privacy practices.

17. Children’s Data

Our services are intended for adults.
We do not knowingly collect data from anyone under 18 years of age.

18. Complaints

If you are unhappy with how we handle your data, please contact us first.
You may also complain to the Information Commissioner’s Office (ICO):

https://www.ico.org.uk

19. Contact Us

Njinga Cycling Limited

Email: info@njingacycling.com