Cathedrals Cycle Route (CCR)

Privacy Notice

Last updated: 26 March 2026


Who we are

The Cathedrals Cycle Route (CCR) is a national cycling initiative connecting England's 42 Anglican cathedrals. Our mission is to promote wellbeing, heritage, community, and charitable giving through accessible cycling experiences.

We are currently in the process of registering as a Charitable Incorporated Organisation (CIO). Until registration is complete, CCR is operated by its founding team.


Contact details

If you have any questions about this privacy notice or how we use your data, please contact:

📧 hello@cathedralscycleroute.co.uk

What information we collect, use, and why

We collect and use personal information to safely organise rides, communicate with participants, and support our charitable aims.

Participation and event management

We may collect:

  • Name and contact details

  • Address

  • Date of birth

  • Emergency contact details

  • Photographs or video recordings

  • Health information (e.g. medical conditions, allergies, relevant history)

  • Lifestyle or interest information (where relevant to participation)

Why we collect this:

  • To organise and manage participation in CCR activities

  • To help ensure participant safety and wellbeing

  • To respond effectively in case of emergency


Nature of participation (self-guided route)

The Cathedrals Cycle Route (CCR) is a self-guided cycling route. Participation is undertaken independently by individuals or groups, who are responsible for their own planning, safety, and decision-making throughout their journey.

While CCR may provide information, guidance, and optional events to support participants, we do not provide guided tours, supervision, or direct control over participants during their ride.

We collect certain personal information, including health and emergency contact details, solely to:

  • Support participant safety where reasonably possible

  • Assist in emergency situations if required

  • Help us plan and improve CCR activities

Donations and fundraising

We may collect:

  • Name and contact details

  • Address

  • Payment or banking details

  • Donation history

Why we collect this:

  • To process donations and maintain accurate financial records

  • To support fundraising activity linked to CCR and partner charities


Communications and marketing

We may collect:

  • Name and contact details

  • Marketing preferences

  • Records of consent

  • Images or videos

Why we collect this:

  • To provide updates about CCR events and activities

  • To promote the route and its impact

  • To celebrate participants and community stories

Website use, analytics, and cookies

Analytics information we collect

This website collects personal information to power site analytics, including:

  • Information about your browser, network, and device

  • Web pages visited before arriving at this site

  • Your IP address

This may also include details about your use of this website, such as:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

We provide this information to Squarespace, our website hosting and analytics provider, to understand site traffic and improve user experience.


Cookies

This website uses cookies and similar technologies (small files stored on your device).

  • Necessary cookies are always used to allow Squarespace to securely operate the website

  • Analytics and performance cookies are used only when you acknowledge our cookie banner

These cookies help us understand how visitors use the site and improve performance.

You can control cookie settings through your browser.


Forms and data submissions

When you submit information via a webform, we collect the data requested to respond to your enquiry or request.

This information is processed by Squarespace, our website hosting provider, so that they can provide website services to us and help us manage our relationship with you. and may also be securely stored using integrated systems to help us manage communications.

You can read Squarespace’s Privacy Policy here.


Purchases and payments

If you make a purchase through this website, we may collect:

  • Name

  • Email address

  • Phone number

  • Billing and shipping address

  • Purchase details

This information is shared with Squarespace to fulfil your order.


Payment processing

Payments are processed via Squarespace Payments, which uses third-party providers including:

  • Stripe – payment processing

  • Sift – fraud monitoring and detection

These providers process your data in accordance with their own privacy policies.


Address autocomplete

During checkout, address information may be processed via the Google Places API to improve your experience.


Queries, incidents, and complaints

We may collect:

  • Contact details

  • Correspondence

  • Health and safety information (including incident reports)

Why we collect this:

  • To respond to enquiries or concerns

  • To manage incidents and ensure safety

  • To meet legal and safeguarding responsibilities

Special category data (health information)

Some of the information we may collect (such as health data) is considered special category data under UK GDPR.

We only collect and use this where necessary for:

  • Participant safety and wellbeing

  • Emergency response situations

  • Managing incidents or insurance claims

We process this data under:

  • Explicit consent

  • Vital interests (to protect life in an emergency)

  • Legal obligations relating to health and safety


Our lawful bases for using your data

We rely on the following lawful bases under UK GDPR:

Consent

  • For marketing communications, photography, and optional data collection

Legitimate interests

  • To operate, manage, and improve CCR and its website

Legal obligations

  • To comply with applicable laws

Vital interests

  • To protect life in emergency situations


Where we get personal information from

We collect information:

  • Directly from you

  • From family members or emergency contacts

  • From publicly available sources


Who we share information with

We only share personal data where necessary:

  • Cathedral partners and local organisers

  • Charities and voluntary organisations

  • Emergency services

  • Regulatory authorities

  • Service providers (including Squarespace and payment providers)

We do not sell your personal data.


Safeguarding

We are committed to safeguarding participants.

Information may be shared where necessary to protect individuals from harm.

How long we keep information

We retain data only as long as necessary:

  • Event records: up to 3 years

  • Health and safety records: up to 7 years

  • Financial/donation records: up to 7 years

  • Marketing data: until consent is withdrawn

Your data protection rights

You have rights including:

  • Access

  • Correction

  • Erasure

  • Restriction

  • Objection

  • Data portability

  • Withdrawal of consent

Contact: hello@cathedralscycleroute.co.uk

We respond within one month.

How to complain

If you have concerns, contact us first.

You can also contact the Information Commissioner's Office:

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

📞 0303 123 1113

🌐 www.ico.org.uk/make-a-complaint