Joyride Indoor Cycling Book a ride

Your data, plainly

Privacy notice

What Joyride collects, why we need it, how long we keep it, and the choices you have.

Controller
Joyride
Marketing
Your choice
Updated

The essentials

Who we are

Joyride Indoor Cycling is the controller of the personal information described in this notice. This means we decide why and how it is used. You can contact us using our website form, phone number or postal address.

Our promise

We do not sell your personal information. We use it to run the studio, manage bookings, keep people safe, meet legal duties and, only when you choose, send Joyride news.

01

Information we collect

  • Booking details: your name, email address, phone number, chosen classes, number of bikes, booking reference and booking status.
  • Studio records: attendance, cancellations, payment status, correspondence and notes needed to manage a booking.
  • Your choices: whether you accepted the booking terms and whether you opted into or out of email or text marketing, with the date and wording shown.
  • Messages: your name, email address, optional phone number, enquiry topic and anything you include when you use our contact form, call, write, reply to an email or speak with us.
  • Technical data: basic server and security logs such as IP address, browser type, requested page, date and time, plus records that booking or confirmation messages were sent. Our first-party site statistics may also record the page path without its query, referring website domain, campaign labels, broad device and browser family, session timing and engagement.

Most information comes directly from you. We may also receive booking details from a member of your group, a studio administrator, a booking partner such as ClassPass, or a previous Joyride booking system where records are lawfully migrated.

Health information

The optional booking note is not intended for detailed medical history. If you tell us about an injury, pregnancy or health need, we use only what is needed to help manage your safety. We normally rely on your explicit choice to share it and, in an emergency, may use it to protect your vital interests. Speak to the instructor if you would rather not put this information online.

02

How and why we use it

What we doWhy the law allows it
Take, confirm, change and cancel bookings; contact you about your class; take payment at the studio.Contract. We need the information to provide the class you reserved and take steps you request before the contract.
Manage capacity, attendance, customer service and reliable studio records.Contract and our legitimate interests in running a safe, efficient studio and resolving questions or claims.
Receive and answer questions sent through our contact form and keep a short record of the reply.Steps you ask us to take before a booking or our legitimate interests in answering enquiries and providing customer service.
Keep financial, consent and compliance records and respond to lawful requests.Legal obligation and our legitimate interests in showing that we have acted properly.
Protect the website, prevent misuse and diagnose faults.Our legitimate interests in keeping the service secure and available.
Produce limited, aggregate site statistics so we can understand which pages work and improve the service.Our legitimate interests in improving the website. We use privacy-minimised, first-party measurement and apply the rules for storage and access technologies described below.
Send optional news, timetable updates and offers by email or text.Consent. You can say no when booking and withdraw at any time.
Use limited health information to support safe participation or respond to an emergency.Explicit consent and, where necessary in an emergency, vital interests.

You have the right to object to uses based on our legitimate interests. You can also stop direct marketing at any time. See “Your rights” below.

You do not have to give us booking details, but without your name and contact information we may not be able to reserve a bike or tell you about a class change. Marketing is always optional and does not affect your booking.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

03

Your contact choices

We keep messages needed to manage your booking separate from optional marketing.

  • Booking messages: we may email, text or call you to confirm a booking, answer a question, or tell you about a change or cancellation that affects your class. These are service messages, not marketing.
  • Email marketing: we send Joyride news, offers and promotional class updates by email only when you actively choose the separate email option.
  • Text marketing: we send promotional text messages only when you actively choose the separate text option. Agreeing to email does not also agree to texts.

The marketing boxes are optional and are not pre-selected. Your booking is treated in the same way if you leave them unticked. We record the channel, your choice, when and where it was made, and the wording shown so we can respect it and show what you agreed to.

You can withdraw a marketing choice at any time by using the unsubscribe option in a message or contacting Joyride. Withdrawal applies to future marketing and does not affect earlier lawful use. We may still contact you about an active booking or respond to a message you send us.

No assumed consent

A booking, an old customer record, a phone enquiry or a booking made for you by someone else does not by itself give Joyride permission to send marketing.

04

Who we share information with

We share only what is needed with service providers that help us run Joyride, such as website hosting, WordPress support, email delivery, backup and security providers. They act under our instructions and must protect the information.

We may also share information with professional advisers, insurers, payment or accounting providers, emergency services, regulators, courts or law enforcement when needed to protect someone, deal with a claim, or comply with the law. If Joyride changes ownership, relevant records may pass to the new operator under suitable safeguards.

Booking through an independent partner such as ClassPass also involves that partner using your information under its own privacy notice.

Information outside the UK

Some technology providers may process information outside the UK. Where this happens, we require a lawful transfer method, such as UK adequacy regulations or approved contractual safeguards, and suitable security. Contact us if you want more information about safeguards relevant to your data.

05

How long we keep information

We keep information only while we need it for the purposes above, including legal, tax, safety and dispute requirements. Our normal guide is:

  • booking, attendance, contact enquiries and routine customer records: up to three years after your last class or contact, unless a longer period is needed for a complaint, incident or legal claim;
  • financial records that tax or accounting law requires: normally six years after the relevant accounting period;
  • optional health information in a booking note: normally removed within 30 days after the class, unless it forms part of a safety incident or claim;
  • marketing contact details: until you withdraw consent or after two years without meaningful contact, whichever comes first;
  • a minimal do-not-contact record: as long as needed to respect an opt-out;
  • individual site-statistics events: normally up to 90 days, after which we delete them; aggregate daily totals may be kept for longer because they are not intended to identify a person;
  • technical and security logs: for a short period suited to security and fault investigation, or longer where an incident requires it.

We securely delete or anonymise information when the retention period ends.

06

Your rights

Depending on the circumstances, UK data protection law gives you the right to:

  • ask for a copy of your personal information;
  • correct information that is wrong or incomplete;
  • ask us to delete or restrict the use of information;
  • object to processing based on legitimate interests and object at any time to direct marketing;
  • receive certain information in a portable format;
  • withdraw consent at any time, without affecting earlier lawful use.

These rights are not absolute. We may need to keep some information where the law requires it or where there is a valid legal reason. Contact us to make a request. We may ask for enough information to confirm your identity and normally respond within one month.

If you have opted into marketing, use the unsubscribe option in a message or contact us. Service messages about a booking are not marketing and may still be sent while the booking is active.

You can complain

Please contact us first so we can try to resolve the issue. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

07

Cookies and browser storage

The public site does not use advertising cookies. WordPress may use strictly necessary cookies for security, site administration and services you ask for. Logged-in administrators receive additional WordPress account and preference cookies.

Joyride uses DevMuse Site Stats, a first-party, cookieless analytics tool. It places a random identifier in session storage so page views from one browser session can be counted together. Session storage is cleared when that browser session ends. We do not use it to recognise you across visits. The server stores only a salted hash of the identifier.

Site Stats does not store your raw IP address, full user-agent string, full referring URL, URL query data, name, email address or a device fingerprint in its analytics tables. An IP address may be used briefly in memory to limit abusive collection requests, but it is not written to those tables.

You can stop Site Stats on this browser at any time. Your choice is saved locally as a simple on or off preference. It is not sent to Joyride and does not identify you. Clearing this browser’s site data will also clear the preference.

Analytics choice on this browser

Checking your current choice…

Links to Instagram, maps, ClassPass and other websites take you to services we do not control. Those services have their own privacy and cookie notices.

08

Security and changes

We use proportionate technical and organisational measures to protect personal information, including access controls, secure hosting, updates and backups. No online service can promise absolute security.

We may update this notice when the service, providers or law changes. We will post the new version here and highlight a material change where appropriate.