Privacy policies

This page includes the following policies:

• Privacy Notice
• Cookie Notice
• Web Accessibility Statement

PRIVACY NOTICE

Last updated: 26 May 2026

This Privacy Notice explains how Emma Handley trading as Pedal Teesdale ("we", "us", "our") collects, uses and looks after personal data when you visit our website, get in touch, make an enquiry, book a Ride, take part in a Ride, appear in photos or video, or interact with us through social media.

1. Who we are

1.1 Controller: Emma Handley trading as Pedal Teesdale.

1.2 Correspondence address: East Briscoe Cottages, Baldersdale, DL12 9UL.

1.3 Email: hello@pedalteesdale.co.uk. Website: https://www.pedalteesdale.co.uk.

1.4 If you have any questions about this notice or want to exercise your data protection rights, please contact us using the details above.

2. Who this notice applies to

·     people who visit our website or Bókun booking pages;

·     people who contact us by email, phone, message, social media or web form;

·     customers, prospective customers and ride participants;

·     people named as emergency contacts;

·     people who subscribe to marketing emails or updates;

·     people who appear in photos or video connected with Pedal Teesdale; and

·     people involved in incidents, complaints, claims or insurance matters.

3. The personal data we collect

Depending on how you interact with us, we may collect:

·     identity and contact details, such as name, email address, telephone number, postal address and emergency contact details;

·     booking details, such as ride date, ride type, route chosen, booking reference, participant numbers, payment status and booking history;

·     rider information, such as age confirmation, bike type, age of bike, last service or safety check, riding experience, terrain experience, confidence level and preferences;

·     health, medical, disability, access, support, allergy, medication or injury information you choose or need to share for safe participation and emergency planning;

·       rider information form responses collected through online forms, including Google Forms, such as contact details, emergency contact details, cycling experience, bike information, health/access/support information and photo/media consent preferences;

·     communications, such as emails, messages, enquiries, feedback, complaint correspondence and social media messages;

·     payment and transaction information, such as payment status, amount, date, refund status and limited payment details made available to us by Stripe or Bókun. We do not store full card details;

·     technical information, such as IP address, browser type, device information, pages viewed, referring source, cookie identifiers and cookie consent/preferences recorded through Termly;

·     photos, video and social media content where applicable; and

·     incident information, such as accident details, witness details, photographs, insurance correspondence and claim information.

4. How we collect personal data

·     directly from you when you make an enquiry, book, complete a rider form, attend a Ride, contact us or give feedback;

·       through online rider information forms, including Google Forms, issued separately from the website where appropriate;

·     from the person making a group booking, where they provide participant information;

·     from Bókun, where it supports website hosting, booking, customer communications or booking administration;

·     from Stripe, where it processes payments, refunds, fraud checks, disputes or transaction information;

·     from Termly, where it supports cookie banner, cookie preference centre and cookie consent record-keeping;

·     from emergency contacts, witnesses, insurers, advisers or authorities where relevant to an incident, complaint or claim; and

·     automatically through our website, booking pages, cookies, similar technologies and cookie preference tools where applicable.

5. How we use personal data and lawful bases -   We use personal data for the following purposes:

Responding to enquiries and booking requests
We use your information to respond when you contact us or ask about a ride. Our lawful basis is taking steps before entering into a contract and/or our legitimate interests in responding to enquiries and running the business.

Creating, managing, confirming, amending or cancelling bookings
We use your information to manage your booking and provide the ride you have booked. Our lawful basis is contract.

Sending ride details, safety information and customer service messages
We use your information to send booking confirmations, meeting details, safety information, changes to rides and other customer service messages. Our lawful basis is contract and/or our legitimate interests.

Taking payments, processing refunds and dealing with payment disputes
We use payment and transaction information to take payments, process refunds and deal with payment queries or disputes. Our lawful bases are contract, legitimate interests and legal obligation.

Assessing ride suitability information and planning safe participation
We use rider information, such as cycling experience, bike information and relevant support needs, to help plan and run rides safely. Our lawful bases are contract and legitimate interests. Where health information is involved, we also rely on an appropriate special category condition.

Managing incidents, emergencies, overdue riders, complaints, insurance matters or legal claims
We use information where necessary to deal with accidents, incidents, emergencies, complaints, insurance issues or legal claims. Our lawful bases may include legitimate interests, vital interests, legal obligation and legal claims.

Keeping accounting, tax, insurance and business records
We keep records where needed for accounting, tax, insurance, audit and business administration. Our lawful bases are legal obligation and legitimate interests.

Operating the website, cookie banner and cookie preference centre
We use technical and cookie preference information to operate the website, remember privacy choices and manage cookie consent. Our lawful basis is legitimate interests for essential operations, and consent for non-essential cookies.

Using analytics, performance, customisation, advertising or embedded-content cookies where active
Where these tools are active, we use them to understand website use, improve performance and support marketing or embedded content. Our lawful basis is consent where required.

Sending marketing communications
We may use your contact details to send marketing communications about rides, offers, news and updates. Our lawful basis is consent or, where lawful, legitimate interests/soft opt-in for similar services with an unsubscribe option.

Using identifiable photos or video for marketing
We may use identifiable photos or video for marketing, social media, website, press, partner, funder or promotional purposes where you have consented, unless another lawful basis clearly applies in the circumstances.

Using non-identifiable route, landscape or group atmosphere images
We may use images where individuals are not reasonably identifiable or are incidental. Our lawful basis is legitimate interests where appropriate.

Collecting and managing rider information through online forms, including Google Forms
We may use online forms to collect rider information before a ride. Our lawful bases are contract and legitimate interests. Where health, access or support information is collected, we also rely on an appropriate special category condition.

 

6. Health information and other special category data

6.1 Health information is special category data and receives extra protection under UK data protection law.

6.2 We only ask for or keep health, disability, access or support information that is reasonably necessary for safe participation, inclusion, emergency planning, incident management, insurance or legal reasons.

6.3 Where we process health information, we will identify both a lawful basis under UK GDPR and an additional condition for processing special category data. Depending on the circumstances, this may include explicit consent, vital interests, reasons of substantial public interest, or establishing, exercising or defending legal claims.

6.4 Where we collect health, medical, disability, access or support information through a rider information form, including a Google Form, we do so only for safety, inclusion, emergency planning, incident management, insurance and legal purposes. Access to this information will be restricted to those who reasonably need it for those purposes.

7. Photos, video and social media

7.1 We may take and use photos and/or video as explained in clause 20 of the Terms.

7.2 Where you have consented to identifiable marketing images, we may use them on our website, social media channels, printed materials, newsletters, advertising, press features, partner promotions and grant or funder reports.

7.3 We aim to use social media respectfully and proportionately, and not in a way that misrepresents riders or causes avoidable harm, embarrassment or distress.

7.4 You can withdraw consent for future use of identifiable marketing images by contacting us. Some materials may be difficult or impossible to remove once published, printed, shared by others or archived by platforms.

7.5 If you tag us, message us or interact with us on social media, the relevant social media platform will also process your personal data under its own privacy terms.

8. Who we share personal data with

We only share personal data where reasonably necessary, including with:

·     Bókun, our website hosting and booking platform provider;

·     Stripe, our payment processor;

·     Termly, our cookie consent management and preference centre provider;

·       Google, where we use Google Forms, Google Drive, Gmail or related Google services to collect, store, manage or communicate rider and booking information;

·     Duda or other website platform providers where they host or support our website;

·     analytics, performance, embedded media or advertising providers where those tools are active and the required consent has been obtained;

·     our email, website, form, file storage, IT and customer communication providers;

·     our accountant, bookkeeper, bank, professional advisers, insurer, broker or claims handlers;

·     emergency services, healthcare professionals, emergency contacts or our designated late-back/emergency support contact where relevant;

·     venues, guides, subcontractors or delivery partners where necessary to run a Ride or manage a booking;

·     regulators, courts, law enforcement, public authorities or other third parties where the law requires it or where necessary to establish, exercise or defend legal claims; and

·     social media platforms where you interact with our content or where we publish content with your consent.

9. Bókun, Stripe, Termly and Google

9.1 Our website and/or booking pages are hosted or supported by Bókun. Bókun may process booking, customer, communication, technical and cookie-related information to provide booking and website services.

9.2 Payments are processed by Stripe. Stripe may process transaction data such as name, email, contact details, billing information, payment method information, merchant details, payment amount, payment status, refunds, disputes, fraud prevention and authentication information.

9.3 We use Termly to provide a cookie banner, cookie preference centre and related cookie consent management. Termly may process technical information and cookie preference information so that website visitors can accept, reject or manage non-essential cookies.

9.4 We may use Google Forms, Google Drive, Gmail or related Google services to collect, store, manage or communicate rider and booking information separately from the website. This may include contact details, emergency contact details, cycling experience, bike information, health/access/support information and photo/media consent preferences.

9.5 Bókun, Stripe, Termly, Google and other technology providers may act as our processors for some activities and as independent controllers for others, depending on the processing activity and their own legal obligations. Their own privacy and cookie information should also be made available to customers where relevant.

10. International transfers

10.1 Some service providers may store or process personal data outside the UK. Where that happens, we will take reasonable steps to ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, UK international data transfer agreements/addenda, or other lawful transfer mechanisms.

11. Marketing

11.1 If you actively opt in to marketing, we may send occasional emails about ride dates, offers, news and business updates.

11.2 Where the law allows, we may also contact existing customers about our own similar services. In those cases, we will make sure you had a clear chance to opt out when your details were collected and in every later message.

11.3 You can unsubscribe at any time by using the unsubscribe link in the email, changing your preferences where available, or contacting us.

12. Cookies and similar technologies

12.1 We use cookies and similar technologies on our website and booking pages. Some are strictly necessary for the website, booking process, security, fraud prevention, payment processing or remembering privacy choices. Others, such as analytics, customisation, performance, functionality, embedded media, marketing or advertising cookies, will only be used where the required consent has been obtained.

12.2 We use Termly to provide a cookie banner and cookie preference centre. Please see our Cookie Notice below for more detail.

13. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, safety, insurance and evidential requirements. Our usual retention periods are:

Enquiries not resulting in a booking
Usually kept for up to 12 months after last contact, unless there is an ongoing issue.

Booking and payment records
Usually kept for 6 years after the end of the relevant financial year, or longer where needed for tax, insurance, dispute or claims handling.

Rider forms and participation records
Usually kept with the booking record for up to 6 years, unless a shorter period is appropriate and there is no incident, complaint or claim.

Emergency contact details
Usually kept with the booking record for the same period, unless a shorter period is appropriate.

Health, medical, disability or support notes
Deleted or minimised as soon as reasonably practicable after the ride unless needed for an incident, complaint, insurance, legal, safeguarding or accessibility reason.

Incident, accident, near miss, complaint and insurance records
Kept for as long as reasonably needed for insurance, legal, safety and evidential purposes. Personal injury limitation periods may be relevant.

Marketing records
Kept until you unsubscribe, withdraw consent, object, or we decide the record is no longer needed. We may keep a suppression record so we know not to contact you again.

Photos and video
Kept until no longer needed for the purpose collected, or sooner where applicable rights are exercised and removal is reasonably practicable.

Termly cookie consent and preference records
Kept for the period required by Termly and legal compliance needs, then refreshed or deleted as appropriate.

Cookie and website analytics records
Kept in accordance with the cookie duration shown in the cookie table or preference centre, unless a shorter period is required.

Google Forms / online rider information form responses
Kept with the booking/rider record for up to 6 years unless a shorter period is appropriate and there is no incident, complaint, insurance or legal reason to keep it. Health, access and support information should be deleted or minimised as soon as reasonably practicable after the ride unless needed for an incident, complaint, insurance, safeguarding, accessibility or legal reason.

 

14. Security

14.1 We take reasonable steps to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, password protection, secure storage, limiting access to those who need it, and using reputable service providers.

14.2 No website, email system or online service can be guaranteed completely secure. Please take care when sending sensitive information by email or online forms.

14.3 Where we use Google Forms or related Google services, we will take reasonable steps to restrict access to rider responses, use appropriate account security, limit downloads and sharing, and delete or minimise information when it is no longer needed.

15. Your rights

Under UK data protection law, you may have rights to:

·     ask for access to your personal data;

·     ask us to correct inaccurate personal data;

·     ask us to delete personal data in some circumstances;

·     ask us to restrict processing in some circumstances;

·     object to processing based on legitimate interests;

·     withdraw consent where we rely on consent;

·     request data portability where applicable; and

·     complain to the Information Commissioner’s Office (ICO).

15.1 To exercise your rights, please contact hello@pedalteesdale.co.uk. We may need to verify your identity before responding.

15.2 If you are unhappy with how we handle personal data, we would appreciate the chance to resolve it first. You can also complain to the ICO at https://ico.org.uk/make-a-complaint/.

16. Links to other websites

16.1 Our website, booking pages, payment pages, emails or social media posts may link to third-party websites or platforms. We are not responsible for the privacy practices of those third parties. You should read their privacy and cookie information.

17. Changes to this notice

17.1 We may update this Privacy Notice from time to time. The latest version will be published on our website with the most recent revision date. Where changes are significant, we will take reasonable steps to bring them to your attention.

COOKIE NOTICE

Last updated: 26 May 2026

This Cookie Notice explains how cookies and similar technologies are used on https://www.pedalteesdale.co.uk and any Bókun-hosted or Bókun-powered booking pages used for Pedal Teesdale. It should be read alongside our Privacy Notice.

1. What cookies are

1.1 Cookies are small text files placed on your device when you visit a website. Similar technologies, such as pixels, tags, SDKs, local storage or device identifiers, may also store or access information on your device.

2. How we use cookies

We may use the following types of cookies or similar technologies:

·     Strictly necessary cookies: these help the website, booking pages and payment process work properly. They may be used for security, fraud prevention, session management, checkout, load balancing or remembering privacy choices.

·     Performance and functionality cookies: these help enhance website functionality, embedded content or performance. For example, embedded videos may rely on local storage or similar technologies.

·     Analytics and customisation cookies: these help us understand how the website and booking pages are used, measure how users reach the platform, understand site behaviour and improve performance or customer journeys.

·     Marketing or advertising cookies: these may be used to measure campaigns, understand referrals, show relevant advertising or connect activity with social media and advertising platforms if those tools are activated.

·     Third-party booking and payment technologies: Bókun and Stripe may use cookies or similar technologies as part of booking functionality, payment processing, fraud prevention, security, customer communications and platform analytics.

3. Consent and controls

3.1 We use Termly to provide a cookie banner and cookie preference centre. You can use the banner or preference centre to accept, reject or manage non-essential cookies.

3.2 Strictly necessary cookies may be used without consent where they are required for the website, booking process, payment process, security, fraud prevention, session management or to remember your privacy choices.

3.3 Non-essential cookies, including analytics, customisation, performance, functionality, embedded video, marketing, advertising or social media cookies, will only be used where the required consent has been obtained.

3.4 You can change your cookie preferences using the cookie settings link or preference centre on our website. You can also control cookies through your browser settings, although blocking all cookies may affect how the website, booking pages or checkout work.

4. Third-party services

4.1 Our website and booking process may use third-party services including Duda or another website platform provider, Bókun for website/booking functionality, Stripe for payment processing, Termly for cookie consent management, and embedded content or analytics providers where active.

4.2 If these or other third-party tools are embedded on the website or used during booking or checkout, they may place their own cookies or use similar technologies. Those third parties have their own privacy and cookie notices.

4.3 We may link to a separate Google Form to collect rider information. If you open or submit a Google-hosted form, Google may use its own cookies or similar technologies under Google’s own privacy and cookie information. Our Termly cookie banner controls cookies on our website; it does not control cookies set directly by Google on a Google-hosted page.

5. Cookie information currently relevant to this site

The Termly scan screenshots supplied for this review show the following categories and examples of cookies/local storage/pixel trackers. The exact cookies in use may change if website settings, Bókun, Stripe, embedded videos, analytics or marketing tools are changed.

dm_this_page_view
Provider/service: www.pedalteesdale.co.uk / Duda.
Purpose/category: strictly necessary. Used by the platform to know when the page was first viewed and to personalise the website experience in a non-personalised way.
Type/duration: HTTP cookie / 11 months 30 days.

dm_last_page_view
Provider/service: www.pedalteesdale.co.uk / Duda.
Purpose/category: strictly necessary. Used by the platform to know what last page was viewed and to personalise the website experience in a non-personalised way.
Type/duration: HTTP cookie / 11 months 30 days.

dm_total_visits
Provider/service: www.pedalteesdale.co.uk / Duda.
Purpose/category: strictly necessary. Used by the platform to support website operation or non-personalised platform functionality.
Type/duration: HTTP cookie / 11 months 30 days.

JSESSIONID
Provider/service: www.pedalteesdale.co.uk / JavaServer Pages Technologies.
Purpose/category: strictly necessary. Maintains an anonymous user session by the server.
Type/duration: HTTP cookie / session.

dm_last_visit
Provider/service: www.pedalteesdale.co.uk / Duda.
Purpose/category: strictly necessary. Used by the platform to know when the site was last visited.
Type/duration: HTTP cookie / 11 months 30 days.

dm_timezone_offset
Provider/service: www.pedalteesdale.co.uk / Duda.
Purpose/category: strictly necessary. Used by the platform to know what timezone the website relies on.
Type/duration: HTTP cookie / 15 days.

NRBA_SESSION
Provider/service: pedal-teesdale.bokun.io / YouTube.
Purpose/category: performance and functionality. Tracks the user’s session for YouTube embedded videos.
Type/duration: HTML local storage / persistent.

mp_#_mixpanel
Provider/service: pedal-teesdale.bokun.io / Mixpanel.
Purpose/category: analytics and customisation. Set by Mixpanel for analysing traffic and how users reached the platform.
Type/duration: HTML local storage / persistent.

i
Provider/service: d32hvilfiv2gyn.cloudfront.net / Yandex Metrica.
Purpose/category: analytics and customisation. Identifies site users.
Type/duration: pixel tracker / session.

s7
Provider/service: pedal-teesdale.bokun.io / Adobe Analytics.
Purpose/category: analytics and customisation. Gathers data about site usage and user behaviour.
Type/duration: server cookie / session.

snowplowOutQueue_snowplow_cf
Provider/service: www.pedalteesdale.co.uk / Snowplow-style queue.
Purpose/category: analytics and customisation. Local storage technology associated with site analytics or event collection.
Type/duration: HTML local storage / persistent.

s7
Provider/service: www.pedalteesdale.co.uk / Adobe Analytics.
Purpose/category: analytics and customisation. Gathers data about site usage and user behaviour.
Type/duration: HTML local storage / persistent.

d93e1d23c8
Provider/service: bam.nr-data.net / New Relic-type endpoint.
Purpose/category: analytics/performance. Pixel tracking technology identified by the Termly scan.
Type/duration: pixel tracker / session.

__cohortId
Provider/service: www.pedalteesdale.co.uk / Web Vitals Performance Analytics.
Purpose/category: analytics and performance. Helps the website track Core Web Vitals and send data to optimise performance.
Type/duration: HTML session storage / session.

6. Bókun, Stripe and checkout cookies

6.1 The website currently uses, or may use, Bókun for online bookings and Stripe for payment processing. If these tools are embedded on the site or used during checkout, they may place cookies or use similar technologies for booking functionality, payment processing, security, fraud prevention, analytics, remembering choices and platform operation.

6.2 Cookies or similar technologies used by Bókun, Stripe or other third-party checkout tools may change depending on the configuration of the booking and payment flow.

7. Updates to this Cookie Notice

7.1 We may update this Cookie Notice from time to time, including when our website, Bókun configuration, Stripe checkout, Termly settings, embedded content, analytics tools or marketing tools change.

Web Accessibility Statement

Last updated: 28 March 2026

This Accessibility Statement applies to https://www.pedalteesdale.co.uk and any pages operated by Pedal Teesdale on that domain.

1. Our commitment

We want our website to be as clear, inclusive and usable as reasonably possible for all visitors.

We aim to make information easy to find, easy to read and easy to use on mobile, desktop and assistive technology where reasonably practicable.

2. Accessibility standards

We aim to work towards good practice based on the Web Content Accessibility Guidelines (WCAG) 2.1 level AA, although not every part of the site may yet fully meet that standard.

3. Known limitations

Some third-party tools, including embedded booking widgets or maps, may have accessibility limitations outside our direct control.

Some images, PDFs or embedded content may not yet be fully optimised for screen readers or keyboard use.

4. Alternative access

If you have difficulty using the website or booking online, please contact us and we will try to provide the information in another format or help you complete a booking another way.

• Email: hello@pedalteesdale.co.uk

5. Reporting accessibility issues

Please tell us if you find an accessibility problem. It helps if you include the page address, what you were trying to do, and any device or assistive technology involved.

6. Legal context

We review accessibility as part of improving our website and customer service.