Privacy & cookies
How the Cycling Without Age booking platform handles your information — in plain English.
Who is responsible for your data
CWA England operates this booking service and is the data controller — it decides what information is collected and why. AHG International builds and runs the software platform on its behalf as a data processor.
Questions about your data? Use the feedback form or email support@example.com.
What we hold
Volunteer records
Your name, contact details, emergency contact, roles at your hubs, and DBS / training status — the information you or your coordinator entered when you joined.
Passenger records
Names, contact details and any mobility or safeguarding notes coordinators record so pilots can run rides safely. These are visible only to the hub teams that need them.
Ride history
Rides you created, claimed or piloted, plus post-ride reports (passengers carried, distance, duration, how the ride went).
Messages and consent
Your email/SMS messaging preferences, an audited record of when you gave or withdrew consent, and a delivery log of messages the platform sent you.
Feedback
Anything you send through the feedback form.
Data is stored with our database and hosting providers (Supabase and Vercel). Emails are delivered via Resend and text messages via Twilio — each receives only what it needs to deliver a message. We never sell data or share it for advertising.
Cookies
This site sets strictly-necessary cookies only — the kind the service cannot work without. There are no analytics, tracking or advertising cookies, and no third-party cookies. Anything optional would be set only with your opt-in consent, which is what the cookie banner asks for — and nothing optional exists today. Should that ever change, this page will list the new cookie first.
sb-… (sign-in session)
Keeps you signed in as you move between pages. Set by our authentication provider (Supabase) when you sign in; without it the app cannot know who you are.
Lifetime: Until you close your browser — or up to 90 days if you ticked “Keep me signed in”.
cwa-remember
Records that you asked to stay signed in on this device, so your sign-in survives closing the browser.
Lifetime: 90 days.
cwa-cookie-consent
Remembers your answer to the cookie banner — essential only, or optional cookies allowed — so it isn’t asked again.
Lifetime: About 12 months.
cwa-ops-hub
Coordinators only: remembers the hub you picked with Switch hub on the Operations Centre, so its counts and the sidebar’s show that hub. Set only when you pick one.
Lifetime: 12 months.
Your cookie choice
You haven’t made a choice yet — the banner at the bottom of the page is waiting for one. You can change your mind here at any time.
Your rights
Under data-protection law (in the UK, the UK GDPR) you can ask CWA England to:
- show you a copy of the information held about you (access);
- correct anything that is wrong (rectification);
- delete your information where there is no longer a reason to keep it (erasure);
- limit or object to how it is used (restriction and objection);
- receive your information in a portable format (portability).
You can change your messaging preferences yourself at any time from your account page. If you are unhappy with how a request is handled, you can complain to your national data-protection authority — in the UK, the Information Commissioner’s Office (ICO).