Privacy Policy
How we collect, use, store, and protect your personal data. Last updated: 6 July 2026.
1. Who We Are
The Cycling Science Knowledge Base (“the KB”, “we”, “us”, “our”) is operated by Int Sports Consultancy Limited, a company registered in Scotland (Company No. SC443657), whose registered address is 49 Craigston Park, Dunfermline, KY12 0XZ.
Int Sports Consultancy Limited is the data controller responsible for your personal data for the purposes of UK data protection law.
If you have questions about this policy or how we handle your personal data, contact us at: richard@cycling-science.com
2. What This Policy Covers
This policy explains how we collect, use, store, and protect your personal data when you use the Cycling Science KB platform, including our website at cycling-science.com, our query interface, and any associated communications such as email digests.
It applies to all users, including free tier users, Pro subscribers, and organisational account holders.
3. Data We Collect
3.1 Account Data
When you register, we collect:
- Your name
- Email address
- Professional role (e.g. coach, athlete, sports scientist) — if provided
- British Cycling / BASES / Cycling UK licence or membership number — if provided for CPD tracking
3.2 Payment Data
For Pro and organisational subscriptions, payment is processed by our third-party payment provider, Stripe Payments Europe, Ltd. We do not store your card details. We retain records of subscription status, billing dates, and transaction amounts for accounting purposes.
3.3 Usage Data
When you use the KB query interface, we collect:
- The queries you submit
- The synthesis responses returned to you
- Timestamps and domain categories of your queries
- Your session and usage history (used for CPD tracking and query limit enforcement)
3.4 Technical Data
We automatically collect:
- IP address
- Browser type and version
- Device type
- Pages visited and time spent
- Referring URL
3.5 Communications Data
If you contact us by email or through a contact form, we retain that correspondence.
4. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Providing access to the KB and processing queries | Performance of contract |
| Managing your subscription and billing | Performance of contract |
| Enforcing query limits on the free tier | Performance of contract |
| Generating your CPD usage record | Performance of contract |
| Sending service communications (account notices, billing, policy changes) | Performance of contract |
| Sending the weekly research digest (if subscribed) | Consent |
| Improving the platform and query interface | Legitimate interests |
| Complying with legal obligations | Legal obligation |
5. What We Do NOT Do With Your Data
- We do not use your queries or usage data to train, fine-tune, or improve any AI or machine learning model, whether operated by us or a third party.
- We do not sell your personal data to any third party.
- We do not use your data to serve you third-party advertising.
- We do not use your professional or performance data for any marketing purpose without your explicit consent.
6. AI and Query Processing
The KB query interface is powered by an AI language model provided by Anthropic, PBC. When you submit a query:
- Your query text is transmitted to the AI provider solely to generate a response.
- The AI provider processes this data in accordance with their own data processing agreement with us.
- Your queries are notused to train or improve the AI provider’s models under our agreement.
- Query text and responses are stored by us for the purposes described in Section 4 (usage history, CPD tracking, service improvement).
We recommend you do not include personally identifiable information about yourself or third parties (such as athlete names or medical details) in your queries. The KB is designed to answer general evidence-based questions, not to process personal health or performance data.
7. Data Sharing
We share personal data only in the following circumstances:
- Service providers: Companies that help us operate the platform (hosting, payment processing, email delivery, AI query processing). All are bound by data processing agreements requiring them to protect your data.
- AI provider: As described in Section 6.
- Legal compliance: Where required by law, court order, or regulatory authority.
- Business transfer: If the KB is acquired or merged, your data may transfer to the new operator, who will be bound by equivalent privacy obligations.
We do not share data with third parties for their own marketing purposes.
8. Data Storage and Security
Your data is stored on servers located in the United Kingdom or European Economic Area (EEA).
We implement appropriate technical and organisational security measures including:
- Encryption of data in transit (TLS) and at rest
- Access controls limiting staff access to personal data
- Regular security reviews
No method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the Information Commissioner’s Office (ICO) as required by UK GDPR.
9. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | For the duration of your account, plus 12 months after closure |
| Query and usage history | For the duration of your account, plus 12 months after closure |
| CPD records | For the duration of your account; exportable by you at any time |
| Payment records | 7 years (legal requirement) |
| Technical/log data | 90 days |
You may request deletion of your account and associated data at any time (see Section 10). Payment records are retained as required by law regardless of account closure.
10. Your Rights Under UK GDPR
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate data.
- Erasure: Ask us to delete your data (“right to be forgotten”), subject to legal retention requirements.
- Restriction: Ask us to limit how we process your data in certain circumstances.
- Portability: Receive your data in a machine-readable format.
- Object: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent (e.g. marketing emails), withdraw at any time.
To exercise any of these rights, contact us at richard@cycling-science.com. We will respond within 30 days.
If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk / 0303 123 1113.
11. Cookies
We use only essential cookies — those required to keep you signed in and to operate the platform securely, such as the authentication session cookies set when you log in. We do not currently use analytics or advertising cookies.
If we introduce non-essential cookies in future, we will update this policy and ask for your consent where the law requires it. You can manage or delete cookies through your browser settings; blocking essential cookies may prevent parts of the platform (such as signing in) from working.
12. Third-Party Links
The KB may include links to third-party sources (e.g. journal articles, research papers). We are not responsible for the privacy practices of those websites.
13. Children
The KB is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or prominent notice on the platform at least 30 days before they take effect. Continued use of the KB after that date constitutes acceptance of the updated policy.
15. Contact
For any privacy-related queries:
Email: richard@cycling-science.com
Post: Int Sports Consultancy Limited, 49 Craigston Park, Dunfermline, KY12 0XZ
See also our Terms of Service and Acceptable Use Policy.
This policy was last updated: 6 July 2026
