PRIVACY AND COOKIES POLICY
1. Introduction to Privacy Policy
1.1 Scope
RYDE (LEEDS) Limited (together “RYDE”, “we” or “us” or “our”) are committed to protecting the privacy and security of your personal information. Like most businesses, we hold and process a wide range of information, some of which relates to current customers, potential new customers inquiring about joining Soul and or our merchandise, visitors and users to our website, www.rydestudios.com and App (collectively the “Services”). This Privacy Policy explains the type of information we process, why we are processing it and how that processing may affect you.
Your use of our Services, and any dispute over privacy, is subject to this Policy and to our Terms & Conditions, including its applicable limitations on damages and the resolution of disputes. The RYDE Terms and Conditions are incorporated by reference into this Policy.
We take children’s privacy very seriously, our Services are not targeted at or for children, we will not collect personal information from any users who we know to be under 13 years old, unless we first obtain verifiable parental consent, as required by the Children’s Online Privacy Protection Act Rule (COPPA) in the United States and legal requirements in the UK for UK users.
1.1 In brief, this Privacy Policy explains:
What personal information we hold and why we process it.
Where the information comes from and who gets to see it.
How long we keep it.
How we protect your information.
Our use of Cookies.
Optout from promotional emails.
Grounds for processing: UK.
How to access your personal information and other rights UK.
Where data is processed.
How to access your personal information and other rights US.
Children’s personal information.
2. Personal information – what we hold and why we process it
We process data for the purposes of our business including management, administrative and legal purposes. This section summarises the main ways we use your personal information, but please read the full Policy to understand our privacy practices in more detail.
Contact and payment detail
Name, home contact details (email, phone numbers, home/shipping address), emergency contact details for you and your next of kin and payment information (credit/debit card details and purchase history) used to process your orders, send you alerts of account issues and upcoming ride reservations and payments and to contact relatives or friends in the unlikely event of an emergency.
Ride and merchandise order and management
Name and contact details and information on the dates, times and locations of rides booked and used, and of merchandise purchased, so we can provide the service and deliver the merchandise, operate our loyalty programmes and provide targeted offers to riders.
Rider and user support
Name and contact details and information on rides booked, merchandise ordered and feedback on their experience of RYDE so we can provide support, answer questions and improve the RYDE offering.
Studio Workout Preferences
Bike size and settings as well as shoe size preferences. Optional for you to provide and used to have the bike ready to go when you arrive at the studio.
Social Media
We may also collect any information that you publicly share via social media, through your social media engagement with our fan-pages and feeds. This will relate to sites such as Facebook, Twitter and Instagram and will relate to personal information about you as detailed above, including images you post and share, your likes, your favourites, and your engagement with our content.
Direct marketing
Name, contact details (which can include email address and phone number), so we can promote our services and merchandise including by email, text and refer-a-friend incentives, subject to the preferences expressed by recipients.
Our Services
Website:
- Domain name
- Your browser type and operating system
- Web pages you view; links you click; your IP address
- The length of time you visit our web page and or use our Services
- The referring URL or the webpage that led you to site
App:
- Mobile device ID; device name and model; operating system type, name and version
- Language information
- Activities within the App; and the length of time that you are logged into our App
- Location information. With your permission, we will collect location information from your mobile device to help you locate the nearest Soul location and to send you push notifications, such as promotional notices when you are near a studio. You may turn off this feature through the location settings on your mobile device
- Calendar. With your permission, we may access your mobile device’s calendar to help you keep track of your upcoming classes
- Contact list. With your permission, we may access your contacts to allow you to identify your emergency contact and upload their contact information
We use the above information to understand how users interact with our Services and to improve them, and to personalise the content which our users see to their preferences and prior interaction with us.
CCTV
CCTV footage from cameras at our studios for the safety of our riders, staff and visitors.
Analytics
Analysing data on rider purchases, address locations, use of the Services financial performance of studios, instructors and discount rider offers to support our business decisions in opening new locations and improving the Services and the rider experience.
3. Where the data comes from and who gets to see it
3.1
Some of the personal information that we process about you comes from you. For example, you tell us your contact and banking details. When you make payments through the Site using a credit or debit card, you will need to provide personal information to our payment gateway provider, currently Tom. You will be providing credit or debit card information directly to Tom. Information which you supply to Tom is not within our control and is subject to Tom’s own privacy policy which is available here.
3.2
We may also obtain your personal information from third parties such as Facebook and Instagram, from companies that may have arranged for you to attend an organised ride at one of our studios, for instance for their staff or as client entertainment and from other organisations where we arrange special RYDE offers or promotional campaigns with them.
3.3
We may also collect additional personal information when you interact with our Services, browsing our social media feeds and fan-pages.
3.4
Your personal information will be seen by our studio attendants, other employees and partners. We may also pass your data outside of RYDE, who are contracted on our behalf to manage our merchandise orders or support our Services and IT systems, including data centre providers, e-commerce management platforms, online feedback platforms, enterprise resource planning providers, support management platforms, data analytics providers and others.
3.5
We may also share your personal information with our partners and third parties for the purpose of direct marketing or in connection with co-branded services, selling or distributing products or services or engaging in joint marketing activities or promotions.
3.6 Refer-a-friend
Registered users may choose to send their family and friends by text or email a referral link generated by us. If the family member or friend chooses to click on the link, they will land on our website and may register with us if they want to. We do not collect the name, contact details or any information about the family member or friend unless and until they click on the link and voluntarily provide their details to us. If they do register and book classes, the referring rider or customer may be eligible for perks or other incentives as explained, and subject to the restrictions set out, on our site from time to time.
Please make sure that the family member or friend has consented before sending the referral link on.
3.7 RYDE Challenges
By participating on a team during any RYDE challenges, your teammates may see your name, riding goal and riding progress. Not all members of a team are invited and some individuals may join a team through a random coding process. The creator of a RYDE team may remove any teammate from his/her team at any time at his/her sole discretion.
4. How long do we keep your personal information?
4.1
We retain personal information for the duration your account is open with us, once your account is closed it will be reviewed for deletion 10 years from the date of closure. This is to ensure we meet legal and regulatory requirements, comply with fraud prevention and or to enforce our Terms and Conditions.
4.2
We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from aggregate information retained or used for these purposes.
5. How we protect your data
5.1
We have implemented appropriate technical and organisational measures to protect the personal information we process from loss, misuse unauthorised access, disclosure, alternation and destruction. Despite these measures we cannot guarantee security.
5.2
Third parties will only process your personal information on our instructions and where they have agreed to treat the information confidentially and to keep it secure.
5.3
We limit access to your personal information to those employees, partners, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
5.4
We have put in place procedures to deal with any suspected data security incident and will notify you and any applicable regulator of a suspected breach where we are legally required or it is appropriate to do so.
6. Our Use of Cookies and Other Tracking Mechanisms
We and our third party service providers use cookies and other tracking mechanisms to track information about your use of our Services. These typically involve pieces of information or code that a website transfers to or accesses from your computer hard drive or mobile device to store and sometimes track information about you. We may combine this information with other personal information we collect from you (and our third party service providers may do so on our behalf).
Strictly necessary
Enabling you to navigate our website, log into specific areas and or add items to the shopping cart.
Functional
These are used to recognise you when you return to our Website. This enables us, subject to your choices and preferences, to personalise our content, greet you by name and remember your preferences (for example, your choice of language or region).
Analytical
Allowing us to measure and analyse how our customers use our website, to improve the functionality and your shopping experience. Our website uses Google Analytics, You can prevent the storage of data relating to your use of the Website and created via the cookie by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. We also allow other analytics providers, New Relic, Amplitude and Segment.com, to serve cookies to improve our understanding of how users interact with the Website – more information can be found at https://docs.newrelic.com/docs/browser/new-relic-browser/page-load-timing-resources/new-relic-cookies-used-browser https://amplitude.com/privacy, and https://segment.com/docs/legal/privacy/ , respectively.
We use Branch, a service provided by Branch Metrics, Inc to enable users to deep link into the Soul app, or to redirect them to the relevant appstore if they do not have the app yet, and to track and provide attribution and analytics data on how users use those links, so we can understand how links are being used and improve how people access the Soul app. Branch’s privacy policy is here https://branch.io/policies/#privacy.
We also use MParticle, which uses a cookie to collect information on how users use and interact with our Services (including pages accessed, orders made and communications responses to, so we can understand better who are users are and how they interact with us. We may share this information with our digital advertising partners to help us show Souls ads to you on other websites.
We use Taplytics to test new elements of our Services. Taplytics collects information on how users interact with new functionality (including their IP address and device IDs for mobile device users) through cookies and other technologies, and we use the information Taplytics provides to assess and improve those new elements of the Services, You can find out more here: https://taplytics.com/privacy-policy/.
Targeted / Advertising
These cookies record your visit to our Website, the pages you have visited and the links you have followed. We will use this information show you advertising on social media platforms and third party websites and relevant to your interests. We also share this information with third parties for this purpose.
We may also work with advertising networks that gather information about the content on our Website or App you visit and on information on other websites and services you visit. This may result in you seeing advertisements on or through our Website or App. or our advertisements when you visit other websites and services of third parties . For instance, Facebook Custom Audience uses a pixel (a small piece of software on the Website) which enables us to show personalised ads on Facebook. For more details about how Facebook collects and uses your personal data, and what you can do to protect your information, please refer to Facebook’s privacy policy available at https://www.facebook.com/about/privacy/.
We also use DoubleClick Ad Exchange, which uses so-called ‘web beacons’ (small invisible images) for collecting information on your use of the Website. The information is usually transmitted to a Google server in the United States and used to help the DoubleClick Ad Exchange show you advertisements relevant to your interests as you surf the Internet and to monitor progress and performance of ad campaigns. GA Audiences serves a cookie which is used by Google to personalise online ads based on your online activity and tracks users across devices and marketing channels.
In addition to DoubleClick, we use Google Dynamic Marketing to serve advertisements to users who have visited our Services. Cookies are stored in your browser for this purpose, through which Google records and evaluates your usage behaviour when you visit various websites.
We use Google Adwords Conversion tracker which uses cookies to help us determine how many people who clicked on our Google search ads end up contacting us through the website. the cookie is set on your browser only when you click on a Google search ad.
More information on Google’s cookies and related data use is provided here: https://www.google.com/intl/en/policies/technologies/cookies/
Customer Matching: We use third-parties to serve advertisements targeted to reach people (or people similar to people) who have visited our Services or are identified in one or more of our databases (“Matched Ads”). To opt-out of us using your data for Matched Ads, please contact us as at privacy@soul-cycle.com and specify that you wish to opt-out of Matched Ads. We are not responsible for such third-party’s failure to comply with our or your opt-out instructions.
Twitter: We use this to provide a Twitter button on our Website. Twitter will be collecting additional data. View their Privacy Policy for more details:https://twitter.com/privacy?lang=en and here: https://help.twitter.com/en/rules-and-policies/twitter-cookies#
Facebook Connect: We may allow you to sign up and log in to the Website using your Facebook account. You can control the information that we receive from Facebook using the privacy settings in your Facebook account.
AdRoll Soul works with AdRoll retargeting, which uses technology including web beacons and cookies to collect data about your website usage and to show you Soul ads as you browse other websites and use other apps. You can learn more about AdRoll and how it collects and uses your information here: https://www.adrollgroup.com/privacy and you can opt-out of AdRoll and their partners by visiting: https://app.adroll.com/optout/
Disabling Cookies
If you want to disable cookies on our site, you need to change your website browser settings to reject cookies. How you can do this will depend on the browser you use. Further details on how to disable cookies for the most popular browsers are set out below:
For Microsoft Internet Explorer:
- Choose the menu “tools” then “Internet Options”
- Click on the “privacy” tab
- Select the setting the appropriate setting
For Google Chrome:
- Choose Settings > Advanced
- Under “Privacy and security,“ click “Content settings”.
- Click “Cookies”
For Safari:
- Choose Preferences > Privacy
- Click on the “privacy” tab
- Click on “Remove all Website Data”
For Mozilla firefox:
- Choose the menu “tools” then “Options”
- Click on the icon “privacy”
- Find the menu “cookie” and select the relevant options
For Opera 6.0 and further:
- Choose the ”menu Files” > “Preferences”
- Privacy
- Find the menu “cookie” and select the relevant options
Where you have not set your permissions, we may also separately prompt you regarding our use of cookies on the Site.
Disabling and or blocking certain cookies may prevent features within our Services from functioning.
Cross Device Use
We may use the information that we collect about you (whether directly from you from our Site, App, or in-store purchase activities, through your device(s), or from a third party) to help us and our third-party service providers identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.). We, and our third party service providers, also may use the cross-device tracking and other information we learn about you to serve targeted advertising on your devices, to send you push notifications, and to send you emails.
Do-Not-Track
There is no industry do-not-track standard; Soul has processes in place that are designed to recognize web browser ”do-not-track” signals. The Help portion of the toolbar on most browsers will tell you how to use your web browser’s do-not-track feature.
Users in the United States may opt out of many third-party ad networks, including those we work with on our Services. For example, you may go to the Digital Advertising Alliance (”DAA”) Consumer Choice Page for information about opting out of interest-based advertising and their choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (”NAI”) Consumer Opt-Out Page for information about opting out of interest-based advertising and their choices regarding having information used by NAI members.
Additional information is available on the DAA’s website at www.aboutads.info or the NAI’s website at www.networkadvertising.org.
Users in UK/Europe can visit https://www.youronlinechoices.eu/.
Promotional Emails Opt-out
We may send periodic promotional emails to you. You may opt-out of our promotional communications by following the opt-out instructions contained in the email or by emailing us at privacy@soul-cycle.com. It may take up to 10 business days to process opt-out requests. We may still send you emails necessary regarding your account and or to fulfil a contractual obligation.
Upon completion of a SoulCycle challenge, SoulCycle will send one email to challenge participants, including those who have unsubscribed from general marketing messages, with his/her rewards details. Challenge participants can unsubscribe from receiving the rewards notification at any time by emailing privacy@soul-cycle.com.
7. Privacy & GDPR for our UK users
7.1 What are the grounds for processing?
Under UK and European data protection law, there are various grounds on which we can rely when processing your personal information. In some contexts more than one ground applies. We have summarised these grounds as Contract, Legal Obligation, Legitimate Interests and Consent and outline what those terms mean below.
Contract
- Processing necessary for performance of a contract with you or to take steps at your request to enter a contract.
- This covers carrying out our contractual duties and exercising our contractual rights, for instance we process your name and contact details and (through our payment processor, currently Adyen) your payment details so we can provide the rides and deliver the merchandise you order from us.
Legal Obligation
- Processing necessary for our or a third party’s legitimate interests.
- Ensuring we perform our legal and regulatory obligations, for instance in keeping records of transactions where required by tax legislation.
Legitimate Interests
- Processing necessary for our or a third party’s legitimate interests.
- We or a third party have legitimate interests in carrying on, managing and administering our respective businesses effectively and properly and in connection with those interests processing your data. Your data will not be processed on this basis if our or a third party’s interests are overridden by your own interests, rights and freedoms. We use your information in our legitimate interests for instance for many of our direct marketing and promotional activities to promote and grow our business (and subject to the rights and controls you have under this Policy), to prevent and detect fraud in connection with our Services, in using records of rides booked and other business records to provide better rider offers and products, select new studio locations and improve our services.
Consent
- You have given specific consent to processing your data.
- Where your specific consent is sought, provided and or withdrawn relating to specific direct marketing activities where consent is required by law.
7.2 What rights do I have over my personal information and how you use it?
- You may ask us for a copy, to rectify or erase your personal information.
- We may have to ask you to verify who you are, we may require you to provide information from which we can satisfy ourselves as to your identity.
- If we have relied on consent as a ground for processing, you may withdraw consent at any time – though if you do so that will not affect the lawfulness of what we have done before you withdraw consent.
- Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law. If we have another legitimate basis for processing information in law, we may still process the same data and we will not require your consent to do so.
UK users can also exercise the rights listed above at any time by contacting us at or details listed above in this privacy policy or by emailing us at: leeds@rydestudios.com
If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority. The Information Commissioner –https://www.ico.org.uk is the supervisory authority in the UK and can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data.
8. Your obligations
8.1
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your time with us.
9. Children
9.1 Parental Consent
Our Services are not targeted at children, and we do not knowingly collect any personal information from a child through them without first obtaining parental consent.
Once a parent signs their child under 13 up for RYDE classes in one of our studios, the child (now an “Authorised Child”) may, with the parent’s permission, use the Services to view, pay for and reserve classes, to review their class history, and to otherwise manage reservations (among other things), provided the parent consents to our collection, use, or disclosure of personal information about the Authorised Child through our Services. To provide consent, parents must sign a written consent statement in one of our studios when they sign up their Authorised Child to attend classes.
If a parent registers an Authorised Child to take classes, but does not consent to our collection of personal information from the child via the Services, the child will not be permitted to use the Online Services and make online reservations and payments, but may still be able to make reservations and payments in a studio.
Since our Services are not targeted to children, we do not age screen users who register for an account online, but have not created a studio account and completed the required registrations and consents to be eligible to take classes. Until a user completes a studio registration (which can only happen if they attend one of our studios in person), they are not eligible to take classes. In such cases, we would not know if a user was under 13, and their information would be subject to the RYDE Privacy Policy in the normal away. If we discover that we have collected personal information online from a child without parental consent, we will delete that information.
When a parent gives permission for their Authorised Child to use the Services, we collect the Authorised Child’s name and email address; the Authorised Child is then able to create and/or link an online account with their studio account. We also collect information from children when they contact us, register for an online account, reserve and pay for classes online, or otherwise interact with our Services, including name, email address, password, contact info, emergency contact details and payment information. We also may collect information about a child’s workout preferences, such as the child’s bike size and settings, and shoe size preferences, as well as other relevant profile information they provide us.
Parents have a right to review the information we have collected about their children, to delete it, and to tell us to stop using it. To exercise these rights, you may contact us at info@rydestudios.com You will be required to authenticate yourself as the Authorised Child’s parent to receive information about that Authorised Child. Please note that copies of information may remain in cached or archived form on our systems after you request us to delete it.
The personal information of children who are 13 or over but under 17 are treated as set out in this privacy policy, in the same way and subject to the same protections and controls as the personal information of our adult users.
10.2
If you believe that we have collected personal information from a child under 13 without parental consent, you may report this to us at info@rydestudios.com.
11. Contact details
11.1
1.1 RYDE (LEEDS) Limited’s registered office is at 16-17 east parade leeds ls1 2bh. Email info@rydestudios.com.
12. Status and version of this Privacy Policy
This Policy is current as of the Effective Date set out below, please be sure to check back periodically for any changes/updates.
EFFECTIVE DATE: 1 Jan 2022
