Privacy policy
Last updated: [DATE]
Summary in plain English. To size you we need your body measurements and, for a full session, video of you riding. That's personal data and some of it is sensitive. We collect the minimum we need, we keep it only as long as it's useful to you, we don't sell it, and you can ask us to delete it.
1. Who we are
[LEGAL ENTITY NAME], [COMPANY NUMBER], [ADDRESS], is the data controller. Contact: [email protected].
2. What we collect
Identity and contact: name, email, phone (optional), time zone, country.
Booking: chosen service, fitter, date and time, notes you provide, payment status. Card details go directly to Stripe; we never see them.
Intake and health context: riding history, current bicycle, goals, and any injuries, limitations or discomfort you choose to tell us about. Some of this may constitute health data — special category data under UK/EU data protection law. We collect it only because it materially affects a sizing recommendation, only what you volunteer, and we do not use it for any other purpose.
Body measurements: height, inseam, and derived or measured torso, arm and leg segment lengths.
Video and images: for a full session, video capture of you riding, and the position data derived from it.
Report and case record: your recommended position, the bikes considered, your fitter's notes and decisions.
Technical: IP address, browser and device information, and basic usage data from our website.
3. Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Deliver your session and report | Performance of a contract |
| Take payment | Performance of a contract |
| Send confirmations, reminders and your report | Performance of a contract |
| Handle health information you provide | Explicit consent — you may decline; it may limit what we can advise |
| Retain your case so you or a fitter can revisit it | Legitimate interests (continuity of service) |
| Improve and validate our sizing model | Legitimate interests, using anonymised or aggregated data only |
| Comply with tax and accounting obligations | Legal obligation |
| Marketing emails, if you opt in | Consent — withdraw at any time |
4. Video and images specifically
Video captured during your session is used to measure your position and proportions. It is stored as part of your sizing case, accessible to your fitter and to our technical staff where support requires it.
We do not use your video for marketing, publication, promotion or model training without your separate, explicit, written consent. Consent for that is always optional and never a condition of the service.
You may ask us to delete your video at any time, including immediately after your session. Deleting it does not affect your report.
5. Who we share it with
- Stripe — payment processing
- Google — video call hosting (Google Meet) and calendar scheduling
- [EMAIL PROVIDER] — transactional email delivery
- [HOSTING PROVIDER] — application and database hosting
- Your fitter — the qualified professional delivering your session, whether employed by us or an independent member of our network, in each case bound by contractual confidentiality and data protection obligations
We do not sell your data. We do not share it with bicycle manufacturers or retailers.
6. International transfers
Some providers process data outside the UK/EEA. Where they do, transfers are protected by appropriate safeguards, including the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
7. How long we keep it
| Data | Retention |
|---|---|
| Booking and contact details | [3] years from your session |
| Sizing case, measurements and report | [3] years, so you can request a copy or return for a follow-up |
| Video capture | [12] months, or sooner on request |
| Health information from your intake form | With your case, [3] years |
| Payment records | As required by tax law, typically [6–7] years |
| Website analytics | [14] months |
8. Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Email [email protected] and we will respond within one month.
You may also complain to your data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).
9. Security
Data is encrypted in transit and at rest. Access is restricted to your fitter and to staff who need it to support the service. Access to case records is logged.
10. Cookies
We use only what the site needs to function. This site sets no marketing or tracking cookies.
11. Children
This service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.
12. Changes
We will post material changes here and, where they significantly affect you, email you.