Privacy

WHO IS YORK CYCLE CAMPAIGN?

York Cycle Campaign is an unincorporated association which provides an independent voice for cyclists and potential cyclists in and around York. York Cycle Campaign is referred to as ‘the Campaign’ in parts of the below text.

HOW IS MY PERSONAL DATA PROTECTED?

Personal data held by the Campaign is protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

York Cycle Campaign acts as the Data Controller for the personal data described in this policy.

WHY AND HOW DOES THE CAMPAIGN HOLD AND PROCESS PERSONAL DATA?

Membership
The Campaign processes membership data under the lawful basis of contract, as the information is required to provide the membership service. Additional communications such as newsletters are sent based on consent, which can be withdrawn at any time. Activities include:

  • maintaining a register of our current membership,
  • contacting members to inform them of General Meetings (Annual and Extraordinary),
  • keeping members updated with changes to the membership service,
  • giving notices of renewal or termination of membership,
  • where additional consent has been given, sending email updates on the Campaign’s activities and general news affecting cycling locally and nationally,
  • where additional consent has been given, admitting members to our closed Facebook group, which is offered as a platform of cross-communication between members, and moderating the Facebook group in accordance with Facebook’s terms of use and our own group rules,
  • where additional consent has been given, admitting members to our Google Groups forum for the Better Infrastructure Group sub-group of the Campaign, and moderating the forum in accordance with Google’s terms of use and our own forum rules.


Other Purposes

The Campaign also processes personal information for purposes other than maintaining its membership. The Campaign will only do this where it has a lawful basis to do so, for example where we have been given consent to contact non-members about our membership offer or events. We will also process information where we have a legitimate reason to do so, such as contacting persons who hold positions in public or private organisations that relate to our campaigning activities.

If you would like to know what personal data the Campaign holds about you, then you can request to be informed of this by contacting YorkCycleCampaign+Privacy@gmail.com.

Membership data may include information such as your name, email address, membership status and any other information necessary to administer your membership.

DOES THE CAMPAIGN PASS MY PERSONAL DATA ON TO ANYONE ELSE (THIRD PARTIES)?

The Campaign relies on services provided by third parties to store and manage the information it holds in order to carry out its activities in an efficient and secure manner. Those third party services are listed below. When selecting the services it uses, the Campaign exercises due diligence to ensure that the service supplier is reputable and has appropriate measures in place to protect the information we manage through them.

Gmail
The Campaign uses the email service Google Gmail for direct email communications. You can read Google’s privacy statement here.


PayPal
To allow it to take online payments for membership subscription, the Campaign uses PayPal. In using this service the Campaign does not process any of your bank account details, which are handled by PayPal. You can read PayPal’s privacy statement here.

Eventbrite
The Campaign regularly uses Eventbrite to allocate tickets to its events. In these situations Eventbrite processes the personal data you provide directly to them, and passes your details onto the Campaign to allow us to manage the event. If the tickets are being sold for a fee, the payment is also managed by Eventbrite and the Campaign does not receive your bank account details. You can read Eventbrite’s privacy statement here.

Social Media
Where the Campaign uses social media, such as Twitter, BlueSky and Facebook, the Campaign cannot access any personal data other than freely made public on that platform by the user. Other users of the social media platform may be able to view your activity relating to the Campaign depending on your privacy settings. To manage the Facebook Members Group, the Campaign will check the names on join requests against its membership register. The Campaign does not submit lists of its members to Facebook or directly invite people to become members.

If the Campaign wishes to provide your personal data to any other third parties, the Campaign will make this clear when the data is obtained or will contact you asking for consent prior to sharing the personal data.

Some of the third-party services used by the Campaign may store or process personal data outside the United Kingdom. Where this occurs, the Campaign ensures that appropriate safeguards are in place in accordance with UK GDPR to protect personal data.

Members who joined during the 2019 membership year
From 1st December 2019, the Campaign has adopted MyClubhouse as a membership management system to allow it to collect, store, and process information on the Campaign’s members and contact them with messages about the Campaign. 

For annual memberships that were started before 1st December 2019, records of the personal details are hosted using a combination of file hosting service Google Drive and email marketing service MailChimp. You can read Google’s privacy statement here and you can read MailChimp’s privacy statement here.

As part of the transfer to MyClubhouse those members who are entitled to an automatic rollover of membership into the 2020 will have personal details transferred into the MyClubhouse system by the Campaign. This will allow the campaign to process the information for the purpose of maintaining a record of its membership. All members affected will be contacted prior to the transfer and informed of the change.

In December 2025, the Campaign migrated from MyClubhouse to Cameo membership organiser for the membership platform. Cameo is hosted on Mythic Beasts; you can read their privacy statement here.

In December 2025, the Campaign migrated from MyClubhouse to Campaign Monitor for the newsletter platform. You can read Campaign Monitor’s privacy statement here.

HOW LONG WILL THE CAMPAIGN HOLD ONTO MY PERSONAL DATA?

The Campaign will hold and process the personal data of its current members during their membership period. It will erase this personal data if the member cancels their membership, or if the member fails to renew the membership one calendar month after the membership renewal is due.

Personal information held in order for the Campaign to carry out its activities will be held until the Campaign no longer has legitimate reason to hold it, or the individual withdraws their consent.

Should the Campaign cease to exist due to dissolution, all personal data held by the Campaign will be erased.

WHO TO CONTACT ABOUT MY PERSONAL DATA?

If you would like to know what personal data the Campaign holds about you, to remove consents, correct or erase the personal data we hold, or otherwise exercise your rights under the GDPR, please contact yorkcyclecampaign+privacy@gmail.com.

HOW DO I UNSUBSCRIBE FROM RECEIVING EMAIL UPDATES?

Members who would like to stop receiving general news email updates (newsletters, event notifications, campaign news) can change their preferences at any time without affecting their membership. This can be done by emailing your request to yorkcyclecampaign+privacy@gmail.com. You will still receive important messages related to your membership such as renewals and invitations to General Meetings.


WITHDRAWAL OF CONSENT

Members can unsubscribe using the link included in our emails, or by contacting us at yorkcyclecampaign+privacy@gmail.com. Some information is required in order for us to manage memberships. If required information is withdrawn, we may not be able to continue providing membership services. You can contact us to discuss how we use your information further at yorkcyclecampaign+privacy@gmail.com.

If you want to withdraw consent to us using any information not related to membership, for example in relation to our campaigning activities, please contact us at yorkcyclecampaign+privacy@gmail.com.

Where the Campaign relies on consent to process personal data (for example, sending newsletters or other optional communications), you may withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the consent was withdrawn.

COOKIES

The Campaign’s website is built using WordPress. WordPress may use cookies to ensure the website functions correctly and to understand how visitors use the site. You can find out more about WordPress’s use of cookies here, or find out more about cookies and how they can be controlled here.

EXTERNAL WEBSITES

The Campaign provides links to other external websites on its own website, social media streams and emails. The Campaign is not responsible for the content of these external websites.

ANONYMISATION

The Campaign will occasionally conduct research and surveys of both its membership and the general public. This research will be conducted in a way that means an individual will not be identifiable from the data collected. There is never an obligation to take part in or complete these surveys/research.

YOUR DATA PROTECTION RIGHTS

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (right to erasure)
  • Restrict processing
  • Object to processing
  • Request the transfer of your data to another organisation
  • Lodge a complaint with the UK Information Commissioner’s Office (ICO).

If you believe your data has been handled improperly, you can complain to the UK Information Commissioner’s Office (ICO). Further information is available at ico.org.uk.

WHERE CAN I FIND OUT MORE ABOUT MY DATA PROTECTION RIGHTS?

You can find out more about the General Data Protection Regulation by visiting the Information Commissioner’s Office’s website.

DATA PROTECTION CONTACT

You can contact the Campaign regarding data protection matters at yorkcyclecampaign+privacy@gmail.com.

CHANGES TO THIS POLICY

The Campaign will continue to review this privacy policy against current legislation, advice and the activities of the Campaign. Any revisions will be updated on this page.

Revision history

8th March 2026 – Updated to reflect migration from MyClubhouse to Cameo and Campaign Monitor
2nd December 2019 – Updated to include use of MyClubHouse for membership management
8th November 2018 – Historic references to the Data Protection Act (1998) removed
23rd March 2018 – Link to unsubscribe from update emails added
12th November 2017 – Privacy policy added to website