Privacy & cookies
How the Cycling Without Age booking platform handles your information — in plain English.
Who is responsible for your data
CWA England operates this booking service and is the data controller — it decides what information is collected and why. AHG International builds and runs the software platform on its behalf as a data processor.
Questions about your data? Use the feedback form or email support@example.com.
What we hold
Volunteer records
Your name, contact details, emergency contact, roles at your hubs, and DBS / training status — the information you or your coordinator entered when you joined.
Passenger records
Names, contact details and any mobility or safeguarding notes coordinators record so pilots can run rides safely. These are visible only to the hub teams that need them.
Ride history
Rides you created, claimed or piloted, plus post-ride reports (passengers carried, distance, duration, how the ride went).
Messages and consent
Your email/SMS messaging preferences, an audited record of when you gave or withdrew consent, and a delivery log of messages the platform sent you.
Feedback
Anything you send through the feedback form.
Data is stored with our database and hosting providers (Supabase and Vercel). Emails are delivered via Resend and text messages via Twilio — each receives only what it needs to deliver a message. We never sell data or share it for advertising.
Cookies
This site sets strictly-necessary cookies only — the kind the service cannot work without. There are no analytics, tracking or advertising cookies, and no third-party cookies. That is why you see a short notice rather than a consent banner: UK law (PECR) does not require consent for essential cookies.
sb-… (sign-in session)
Keeps you signed in as you move between pages. Set by our authentication provider (Supabase) when you sign in; without it the app cannot know who you are.
Lifetime: Until you close your browser — or up to 90 days if you ticked “Keep me signed in”.
cwa-remember
Records that you asked to stay signed in on this device, so your sign-in survives closing the browser.
Lifetime: 90 days.
cwa-cookie-notice
Remembers that you dismissed the “essential cookies” notice, so it isn’t shown again.
Lifetime: About 12 months.
If that ever changes
Should this platform ever introduce analytics or any other non-essential cookie, we will ask for your consent with a real opt-in banner before any such cookie is set. This page will be updated first.
Your rights
Under data-protection law (in the UK, the UK GDPR) you can ask CWA England to:
- show you a copy of the information held about you (access);
- correct anything that is wrong (rectification);
- delete your information where there is no longer a reason to keep it (erasure);
- limit or object to how it is used (restriction and objection);
- receive your information in a portable format (portability).
You can change your messaging preferences yourself at any time from your account page. If you are unhappy with how a request is handled, you can complain to your national data-protection authority — in the UK, the Information Commissioner’s Office (ICO).