Legal

Privacy Policy

How we collect, use, store, and protect your personal data. Last updated: 6 July 2026.

1. Who We Are

The Cycling Science Knowledge Base (“the KB”, “we”, “us”, “our”) is operated by Int Sports Consultancy Limited, a company registered in Scotland (Company No. SC443657), whose registered address is 49 Craigston Park, Dunfermline, KY12 0XZ.

Int Sports Consultancy Limited is the data controller responsible for your personal data for the purposes of UK data protection law.

If you have questions about this policy or how we handle your personal data, contact us at: richard@cycling-science.com

2. What This Policy Covers

This policy explains how we collect, use, store, and protect your personal data when you use the Cycling Science KB platform, including our website at cycling-science.com, our query interface, and any associated communications such as email digests.

It applies to all users, including free tier users, Pro subscribers, and organisational account holders.

3. Data We Collect

3.1 Account Data

When you register, we collect:

  • Your name
  • Email address
  • Professional role (e.g. coach, athlete, sports scientist) — if provided
  • British Cycling / BASES / Cycling UK licence or membership number — if provided for CPD tracking

3.2 Payment Data

For Pro and organisational subscriptions, payment is processed by our third-party payment provider, Stripe Payments Europe, Ltd. We do not store your card details. We retain records of subscription status, billing dates, and transaction amounts for accounting purposes.

3.3 Usage Data

When you use the KB query interface, we collect:

  • The queries you submit
  • The synthesis responses returned to you
  • Timestamps and domain categories of your queries
  • Your session and usage history (used for CPD tracking and query limit enforcement)

3.4 Technical Data

We automatically collect:

  • IP address
  • Browser type and version
  • Device type
  • Pages visited and time spent
  • Referring URL

3.5 Communications Data

If you contact us by email or through a contact form, we retain that correspondence.

4. How We Use Your Data

PurposeLegal Basis
Providing access to the KB and processing queriesPerformance of contract
Managing your subscription and billingPerformance of contract
Enforcing query limits on the free tierPerformance of contract
Generating your CPD usage recordPerformance of contract
Sending service communications (account notices, billing, policy changes)Performance of contract
Sending the weekly research digest (if subscribed)Consent
Improving the platform and query interfaceLegitimate interests
Complying with legal obligationsLegal obligation

5. What We Do NOT Do With Your Data

  • We do not use your queries or usage data to train, fine-tune, or improve any AI or machine learning model, whether operated by us or a third party.
  • We do not sell your personal data to any third party.
  • We do not use your data to serve you third-party advertising.
  • We do not use your professional or performance data for any marketing purpose without your explicit consent.

6. AI and Query Processing

The KB query interface is powered by an AI language model provided by Anthropic, PBC. When you submit a query:

  • Your query text is transmitted to the AI provider solely to generate a response.
  • The AI provider processes this data in accordance with their own data processing agreement with us.
  • Your queries are notused to train or improve the AI provider’s models under our agreement.
  • Query text and responses are stored by us for the purposes described in Section 4 (usage history, CPD tracking, service improvement).

We recommend you do not include personally identifiable information about yourself or third parties (such as athlete names or medical details) in your queries. The KB is designed to answer general evidence-based questions, not to process personal health or performance data.

7. Data Sharing

We share personal data only in the following circumstances:

  • Service providers: Companies that help us operate the platform (hosting, payment processing, email delivery, AI query processing). All are bound by data processing agreements requiring them to protect your data.
  • AI provider: As described in Section 6.
  • Legal compliance: Where required by law, court order, or regulatory authority.
  • Business transfer: If the KB is acquired or merged, your data may transfer to the new operator, who will be bound by equivalent privacy obligations.

We do not share data with third parties for their own marketing purposes.

8. Data Storage and Security

Your data is stored on servers located in the United Kingdom or European Economic Area (EEA).

We implement appropriate technical and organisational security measures including:

  • Encryption of data in transit (TLS) and at rest
  • Access controls limiting staff access to personal data
  • Regular security reviews

No method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the Information Commissioner’s Office (ICO) as required by UK GDPR.

9. Data Retention

Data TypeRetention Period
Account dataFor the duration of your account, plus 12 months after closure
Query and usage historyFor the duration of your account, plus 12 months after closure
CPD recordsFor the duration of your account; exportable by you at any time
Payment records7 years (legal requirement)
Technical/log data90 days

You may request deletion of your account and associated data at any time (see Section 10). Payment records are retained as required by law regardless of account closure.

10. Your Rights Under UK GDPR

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct inaccurate data.
  • Erasure: Ask us to delete your data (“right to be forgotten”), subject to legal retention requirements.
  • Restriction: Ask us to limit how we process your data in certain circumstances.
  • Portability: Receive your data in a machine-readable format.
  • Object: Object to processing based on legitimate interests.
  • Withdraw consent: Where processing is based on consent (e.g. marketing emails), withdraw at any time.

To exercise any of these rights, contact us at richard@cycling-science.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk / 0303 123 1113.

11. Cookies

We use only essential cookies — those required to keep you signed in and to operate the platform securely, such as the authentication session cookies set when you log in. We do not currently use analytics or advertising cookies.

If we introduce non-essential cookies in future, we will update this policy and ask for your consent where the law requires it. You can manage or delete cookies through your browser settings; blocking essential cookies may prevent parts of the platform (such as signing in) from working.

12. Third-Party Links

The KB may include links to third-party sources (e.g. journal articles, research papers). We are not responsible for the privacy practices of those websites.

13. Children

The KB is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or prominent notice on the platform at least 30 days before they take effect. Continued use of the KB after that date constitutes acceptance of the updated policy.

15. Contact

For any privacy-related queries:
Email: richard@cycling-science.com
Post: Int Sports Consultancy Limited, 49 Craigston Park, Dunfermline, KY12 0XZ

See also our Terms of Service and Acceptable Use Policy.

This policy was last updated: 6 July 2026