Privacy Policy

Women Cycling Race Data Hub ("we", "us", "our") respects your privacy. This page explains what information we collect when you visit womencyclingracedata.com and how we use it.

Information we collect

• Contact form: when you send us a message, we collect the name, email address and message you submit so we can reply.
• Visitor log: for every page you open, we record the full IP address, country (when provided by our network), the page path, the referring URL, the browser user-agent string and the timestamp. See the dedicated section below for details.
• Technical data: our hosting and analytics providers may log additional standard request information used to operate the site and detect abuse.
• Cookies: we use a minimal set of cookies needed to run the site. See our Cookie Policy.

How we use your information

• To respond to enquiries sent through the contact form.
• To operate, maintain, secure and improve the website.
• To understand how visitors use the site and detect abuse or fraud.
• To comply with legal obligations.

Visitor tracking and IP addresses

Purpose. We log each pageview together with the visitor's full IP address in order to: (a) measure audience and understand which races and pages are popular, (b) protect the site against abuse, scraping, brute-force attempts and other security incidents, (c) diagnose technical issues, and (d) keep a long-term historical record of site usage across cycling seasons.

Legal basis (GDPR Article 6). We rely on our legitimate interests (Article 6(1)(f) GDPR) to keep the site secure, to prevent abuse and to analyse usage of a public, non-commercial information hub. We have weighed those interests against your rights and freedoms: the data is accessed only by the site administrator, is never sold, never shared with advertising networks, and is not combined with other datasets to profile you. Where required, we also rely on Article 6(1)(c) GDPR to comply with legal obligations (for example responding to a lawful request from a competent authority).

Full IP address. We store the complete IP address (not truncated or hashed). An IP address is considered personal data under the GDPR.

Retention — no deletion. Visitor log entries (including the full IP address) are kept indefinitely and are not automatically deleted. You can ask us to erase or restrict the records linked to your IP address by contacting us (see "Your rights" below); we will honour valid requests unless an overriding legal obligation requires us to retain the data.

Recipients. Visitor logs are stored on our managed backend (Supabase, EU region) and are accessible only to the site administrator. They are not shared with third parties except where required by law.

Sharing

We do not sell personal data. We share information only with service providers that help us run the site (hosting, email delivery) under appropriate confidentiality obligations, or where required by law.

Your rights (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete or restrict processing of your personal data, to object to processing based on legitimate interests (including the visitor log described above), to data portability, and to lodge a complaint with your supervisory authority. To exercise these rights, contact info@womencyclingracedata.com — please include the approximate date(s) of your visit and, if known, the IP address you were using, so we can locate the relevant records.

Retention

Contact form submissions are kept as long as needed to handle your request and our records. Visitor log entries are kept indefinitely and are not subject to an automatic deletion schedule. Other server logs maintained by our hosting provider are kept for a limited period for security and diagnostic purposes.

Changes

We may update this policy from time to time. Material changes will be reflected here with a new "last updated" date.

Contact

Questions about this policy? Email info@womencyclingracedata.com.