Julie’s Bicycle (“JB”, “we”, “our”), whose registered office is at Somerset House Strand, South Wing, London, United Kingdom, WC2R 1LA, is the controller of your personal data, which means that we are responsible for how your personal data is collected and used

This Privacy Notice (“Notice”) explains what personal data we collect, how and why we use it, who we share it with, and the rights you have under UK data protection law.

This privacy notice was last updated in August 2026.

TYPES OF DATA we collect

We collect certain personal data about you. “Personal data” are data that can be used to identify you or that we can otherwise link to you using information we may already hold.

The data we collect includes:

• contact details: including your name, contact phone number(s), e-mail;

• technical data: including IP address, browser type and version, time zone settings and location, device ID and other data regarding the devices you use to access our website; 

• usage data: including information about how you interact and use our website and services; 

• marketing and communications data: including your preferences in receiving marketing from us and third parties and your communication preferences; and 

• other data provided voluntarily: any other data you provide voluntarily when communicating with us.

We may also collect, use and share aggregated data, such as statistical or demographic data which is not personal data and does not directly (or indirectly) identify you (meaning this Notice does not cover such data). For example, we may aggregate usage data to calculate the percentage of users accessing a specific page or feature on our website in order to analyse general trends in how users are interacting with our website to help improve the website and our service offerings.

sources of personal data

We collect personal data in three main ways:

1. Personal data you provide to us:

• When you sign up for our newsletter
• When you register for events or programmes
• When you fill in a contact form, survey or feedback request
• When you choose to share personal data with a member of our team via email
• When you make a donation (and in the course of a direct debit, the frequency and date of which these will be taken)

2. Personal data we collect directly:  

• Website usage data such as IP address, device type and browser
• Cookie-based tracking that helps us improve how our website performs

3. Personal data from third parties:

• Go Cardless (for donations)
• Eventbrite (for event registration)
• Active Campaign (for newsletters and website analytics)
• Google Analytics (for website analytics)
• Stripe (for donations)

How and why we use your personal data

We collect and use personal data so we can:

• Communicate with you about events, programmes or news
• Understand how people use our website and improve user experience
• Deliver services you’ve requested
• Meet legal and regulatory obligations

We rely on different legal bases to process your data, including your consent, fulfilling a contract, and our legitimate interests in improving our services.

sharing your personal data

We only share your data securely and confidentially with trusted partners who help us deliver our services, including:

• Website hosting providers
• Email marketing platforms
• Event registration platforms
• Analytics services 
• Payment platforms

For events or funded projects, personal data may also be shared with named partner organisations if required. We will always inform you of this when you register or sign up. We will not, without your express consent, supply your personal data to any third party for the purpose of their or any other third party’s direct marketing.

We will share personal data with our payment services provider only to the extent necessary for the purposes of processing payments you make via our website, refunding such payments and dealing with complaints and queries relating to such payments and refunds.

international transfers

Your personal data may be transferred to, and processed in, countries outside of the UK. These countries may have data protection laws that are different to the laws of the UK.

We will only send your personal data outside the UK to:

• follow your instructions;
• comply with a legal duty;
• work with suppliers and service providers that are based outside the UK; or
• work with partners that are based outside the UK. 

If we transfer your personal data outside the UK, we will ensure that one of the following transfer mechanisms or safeguards applies:

Transfers to a non-EEA country that has been deemed to provide an adequate level of protection for personal information by the European Commission. For further details, see European Commission: Adequacy of the protection of personal information in non-EU countries. (The UK has published “adequacy regulations” in relation to countries within the EEA and some countries outside of the EEA, which means that these countries are considered under UK data protection law, to provide an adequate level of protection for personal information. (see the ICO’s guidance on international transfers for a list of countries deemed adequate.)

Put in place a contract with the recipient that requires them to protect your personal data in accordance with appropriate safeguards under UK data protection law, including the UK Information Commissioner’s International Data Transfer Agreement / Addendum, the UK Addendum to the EU Standard Contractual Clauses and any other appropriate safeguard in place from time to time. Where required, we will also assess whether the protection provided for your personal data is not materially lower than the protection it would receive under UK data protection law.

your rights

You have the following rights in relation to personal data:

• to be informed: you have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This notice is an example of this right;
• the right of access: you have the right to obtain a copy of personal information relating to you (and other information) from us where we are processing it. This is so you are aware and can check that we are using your information in accordance with data protection law;
• the right to rectification: you are entitled to have your information corrected if it is inaccurate or incomplete. It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us;
• the right to erasure: this enables you to request the deletion or removal of your personal information where there is no compelling reason for us to keep using it;
•  the right to restrict processing: you have the right to ‘block’ or suppress further use of your personal information that we process. This means that it can only be used for certain things, such as legal claims or to exercise legal rights. You can ask us to restrict the use of your personal information if it is not accurate; it has been used unlawfully but you don’t want us to delete it; it is not relevant any more, but you want us to keep it for use in legal claims; or you have already asked us to stop using your information but you are waiting for us to tell you if we are allowed to keep on using it. If we do restrict your information in this way, we will not use or share it in other ways while it is restricted;
• The right to object: under certain circumstances individuals have the right to stop or prevent the processing of their personal information by us. Individuals also have an absolute right to stop their information being used for direct marketing; 
• the right to data portability: you have the right to receive your personal information in a structured, commonly used and machine-readable format and to request that this information is transmitted to another party/controller where this is technically feasible. This right only applies to personal information you have directly provided to us (not any other information);
• the right to withdraw consent: where you have given your consent to us for the processing of any personal information, you have the right to withdraw your consent at any time (although this does not mean that any processing of personal information carried out by us with your consent up to that point is unlawful); and 
•  the right to lodge a complaint: you have the right to lodge a complaint about our handling or processing of your personal information to data protection regulators.

Please note that the limitation or deletion of your personal data, or the withdrawal of your consent, may mean we will be unable to provide the communications and invitations described above.

To exercise any of these rights, please contact us using the details below.

retention

We keep personal data only for as long as necessary to fulfil the purpose it was collected for. 

To determine the appropriate retention period for personal data, we consider:

•            the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data; 

•            the purposes for which we process your personal data and whether we can achieve those purposes through other means; 

•            if you have made a request to have your personal data deleted;

• guidelines issued by relevant data protection regulators; and 

• the applicable legal requirements.  

You can request that we delete your personal data as set out in the ‘Your Rights’ section.

CONTACT INFORMATION – FOR REQUESTS AND COMPLAINTS

If you would like to exercise your data protection related rights, have any questions or would like to make a data protection related complaint, please contact us at the following address:

Contact number: +44 20 8746 0400

Contact email: info@juliesbicycle.com

Postal address: Somerset House, South Wing, Strand, London, WC2R 1LA

When we receive a data protection complaint that we have not complied with the UK GDPR, we will: 

• acknowledge receipt no later than 30 days from receiving it;
• take appropriate steps to respond without undue delay, which will include:
• making enquiries into the subject matter of the complaint (to the extent appropriate); and 
• keeping you informed about our progress in handling the complaint; and
• inform you of the outcome without undue delay.

You can also complain to the ICO if you are unhappy with how we have used your personal data. The ICO’s contact details are:

• Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline number: 0303 123 1113
• ICO website:  https://www.ico.org.uk/make-a-complaint

COOKIes

We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our website. Cookies are small text files stored on your device that help us understand how you use our website. We use:

• Essential cookies: Required for basic site functionality
• Analytics cookies: Help us improve website performance
• Marketing cookies: Only used with your permission

You can manage your cookie preferences at any time here.

changes to this policy

We may change this policy from time to time by updating this page, and we will take appropriate measures to inform you, consistent with the significance of the changes we make. You should check our website page [https://juliesbicycle.org/] from time to time to ensure you are happy with any changes.