Privacy

Last updated: November 2025

Cyclo Holidays (“we,” “our,” “us”) is committed to protecting your personal information and maintaining your trust. This Privacy Policy outlines how we collect, use, store, and safeguard your data when you interact with www.cycloholidays.co.uk, communicate with us, or use any of our services, including bookings, memberships, or marketing communications.

 

1. Who We Are

Cyclo Holidays is a division of Bicycle Lane Ltd, a registered company in the United Kingdom.

Registered Address: 415 Wick Lane, London E3 2JG
Email: info@cycloholidays.co.uk
Telephone: +44 203 417 3635

Cyclo Holidays acts as the data controller for all personal information collected through our website and associated services.

 

2. Scope of This Policy

This Privacy Policy applies to all data collected through our website, booking forms, newsletters, social media interactions, and partner integrations. By using our website, you agree to the collection and use of information in accordance with this policy.

 

3. Information We Collect

We collect personal and non-personal data depending on how you interact with us.

Information you provide directly:
· Name, email address, phone number, and postal address when you make an enquiry or booking.
· Payment details processed securely via approved third-party payment gateways (we never store full card numbers).
· Travel preferences, medical or dietary information required to manage your trip safely and appropriately.
· Account or login information if you create a member profile.

Information collected automatically:
· IP address, browser type, and device identifiers.
· Pages visited, duration on site, and referral sources (via analytics tools).
· Cookie data, tracking pixels, and session information used to improve site functionality.

Information from third parties:
· Social media or affiliate platforms when you engage with our ads or content.
· Booking partners and payment providers, where necessary to complete a transaction.

 

4. Purpose and Legal Basis for Processing

We process personal data only where we have a valid legal basis under the UK GDPR and Data Protection Act 2018.

a. Contractual necessity:
To manage bookings, process payments, deliver travel services, and communicate trip details.

b. Legitimate interests:
To enhance website experience, improve service quality, and maintain accurate records.

c. Consent:
For newsletters, marketing updates, and promotional communications (you may withdraw consent at any time).

d. Legal obligations:
To meet tax, accounting, or regulatory requirements.

 

5. How We Use Your Information

· To confirm and manage bookings or service requests.
· To provide customer support and respond to enquiries.
· To send pre-trip information, updates, and service confirmations.
· To personalise website experience and marketing offers.
· To conduct performance analysis and business reporting.
· To ensure compliance with applicable laws and security standards.

 

6. Data Storage, Security, and Retention

We use secure, GDPR-compliant hosting within the UK and EEA. All systems are protected by encryption, firewalls, and access restrictions.

· Booking and payment data are retained for up to 7 years to meet legal and accounting obligations.
· Marketing data is retained until you unsubscribe or request deletion.
· Sensitive health information is deleted immediately after trip completion unless required for incident reporting.

Regular security reviews and backups ensure data integrity and prevent unauthorized access or loss.

 

7. Data Sharing and Third Parties

We share personal data only when necessary to deliver our services or comply with legal requirements.

Trusted third parties include:
· Accommodation partners, local guides, and logistics providers.
· Payment processors (Stripe, PayPal, etc.).
· IT and cloud hosting providers under confidentiality agreements.
· Government or regulatory authorities when required by law.

All partners are required to comply with data protection laws and process information securely and only for the purpose intended.

 

8. International Data Transfers

In cases where data is transferred outside the UK or EEA (for example, to service providers based overseas), we ensure adequate protection through legally approved safeguards such as Standard Contractual Clauses or equivalent frameworks.

 

9. Your Rights

Under the UK GDPR, you have the right to:
· Access a copy of the personal data we hold about you.
· Request correction of inaccurate information.
· Request deletion (“right to be forgotten”) where applicable.
· Restrict or object to certain processing activities.
· Withdraw consent for marketing communications at any time.
· Request data portability.

To exercise these rights, email info@cycloholidays.co.uk with proof of identity. We will respond within one calendar month.

 

10. Cookies and Tracking

We use cookies and similar technologies to ensure website functionality and improve performance. For full details, refer to our Cookies Policy.

 

11. Email Marketing and Communications

If you opt in to receive updates, we may send occasional news, offers, or travel insights. You can unsubscribe anytime using the link at the bottom of our emails or by contacting us directly.

 

12. Children’s Data

Our services are not directed toward children under 16. We do not knowingly collect data from minors. If such data is discovered, it will be deleted immediately.

 

13. Links to Other Websites

Our website may include links to third-party sites. We are not responsible for the privacy practices or content of external websites.

 

14. Policy Updates

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. The revised version will be posted on our website with the updated date.

 

15. Contact Us

For any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact:

Cyclo Holidays
415 Wick Lane, London E3 2JG
info@cycloholidays.co.uk
+44 203 417 3635