Why and how we use the personal information we obtain from you or others, who we share it with, and the rights you have in connection with the information we use.
Bicycle (“we”, “us”, or “our”) are a Data Controller under the meaning of the General Data Protection Regulation 2016. Bicycle is also a Data Processor regarding the services that we offer to our clients. We gather and use your personal information in accordance with this Privacy Policy, the General Data Protection Regulation (GDPR), the United Kingdom GDPR, the California Consumer Privacy Act, and any other related national or international data protection laws.
Bicycle is committed to protecting and respecting your privacy, and we take your data protection rights seriously. This Privacy Policy explains why and how we will use the personal information that we have obtained from you or others (including our clients), with whom we share it and the rights you have in connection with the information we use.
This Policy describes the way we handle and use the personal information that we obtain from all the different interactions you may have with us as a business, including when you visit our website https://bicycle.ai/.
Bicycle is the controller in relation to the processing activities described below. This means that Bicycle decides why and how your personal information is processed. Please see the section at the end of this Policy for our contact and legal information.
We receive personal information about you through the form on our website. We only collect personal information which we need and that is relevant for the purposes for which we intend to use it. As part of our provision of services to our clients, your personal information may be collected, used, and processed by Bicycle. This information includes;
When you visit our Site, we and our analytics providers may also automatically collect certain technical and usage information, such as your IP address, browser type and version, device type, operating system, referring URL, pages viewed, approximate location (derived from IP address), and interactions with the Site. This information is collected through cookies and similar technologies as described in Section 03 below.
When you visit bicycle.ai, we use cookies and similar technologies to understand how visitors use our Site, improve performance and content, and diagnose technical issues. Unless you accept cookies through our consent banner, we do not load analytics or session-replay tools that set non-essential cookies on your device.
Our cookie banner adapts to where you are visiting from, consistent with applicable law. If you are visiting from the European Economic Area or the United Kingdom (or if we cannot reliably determine your location), we show a cookie consent banner with Accept and Decline options and do not enable the analytics and session-replay tools described below until you click Accept. If you are visiting from the United States or most other regions, where applicable law permits collection by default, those tools are enabled automatically and we show a brief notice explaining this with an Opt out option. In either case, your choice (or, in opt-out regions, our default) is stored in your browser (local storage) so we do not ask again on subsequent visits, and you can change your mind at any time using the control in the notice or banner, or by clearing site data for bicycle.ai in your browser settings, which will cause the banner to appear again on your next visit. We also honor the Global Privacy Control browser signal, where enabled, by treating it as an opt-out request regardless of region.
We estimate your region from your IP address at the time your request reaches our servers, using MaxMind's GeoLite2 database (see the attribution note at the end of this section); we do not otherwise store your IP address for this purpose.
We use Google Analytics, delivered through Google Tag Manager (GTM), to measure Site traffic and understand how visitors navigate and engage with our pages (for example, which pages are viewed and how users move through the Site). Google may process information such as pages visited, referral source, device and browser characteristics, and approximate geographic location. Google Analytics is only activated after you accept cookies on bicycle.ai.
Google acts as a service provider (processor) on our behalf. Data may be processed in the United States and other countries. Google’s privacy practices are described at policies.google.com/privacy. You can learn more about Google Analytics and opt out of Google Analytics across websites at tools.google.com/dlpage/gaoptout.
We use FullStory to record and replay how visitors interact with our Site (for example, clicks, scrolling, and page navigation) so we can identify usability issues and improve the visitor experience. FullStory may collect information such as pages visited, mouse movements, clicks, device and browser type, screen size, and general interaction data. FullStory does not intentionally collect passwords or payment card details entered into form fields; we configure our Site to limit sensitive data capture where possible. FullStory is only loaded after you accept cookies on bicycle.ai.
FullStory acts as a service provider on our behalf. Data may be processed in the United States and other countries. FullStory’s privacy policy is available at fullstory.com/legal/privacy-policy. You can request exclusion from FullStory recording on our Site by declining cookies or contacting us at dpo@bicycle.ai.
Most web browsers allow you to block or delete cookies through their settings. Blocking all cookies may affect how the Site functions. For questions about our use of cookies or analytics tools, contact dpo@bicycle.ai.
This product includes GeoLite2 data created by MaxMind, available from maxmind.com.
We collect and use your personal information for the following purposes;
We rely on different legal grounds to process your personal information, depending on the purposes of our use and the risks to your privacy. We use your personal information in the following ways:
We will use your personal information to comply with our legal obligations:
We may use and process your personal information where it is necessary for us to pursue our legitimate interests as a business for the following purposes:
If we have requested your consent and you give your consent, we may use your personal information to contact you by email or online to notify you of special offers, promotions, competitions or new products and services. We try to adapt any marketing material that we send to you for example by notifying you of special offers or promotions that will be of relevance to you, apply to your interests and in your location (we do this by monitoring your browsing and online shopping habits and providing information on products you have viewed and related products).
If you do not wish to receive communications from us, please inform us by using the unsubscribe link inside the email.
If you opt-out of receiving marketing communications from us, we keep your email address on our suppression list to ensure that we comply with your wishes.
Where required by applicable law (including in the European Economic Area and United Kingdom, or where we cannot reliably determine your location), we rely on your consent to set non-essential cookies and to load Google Analytics and FullStory on bicycle.ai, and those tools remain off until you click Accept. Where consent is not required (for example, most visitors in the United States), we may rely on our legitimate interests in understanding Site usage and improving our services, balanced against your privacy rights, and those tools are on by default. In either case, you may withdraw consent or opt out at any time using the Decline / Opt out control in our cookie banner or notice, by clearing site data for bicycle.ai and choosing Decline when the banner reappears, or via the Global Privacy Control browser signal, which we honor as an opt-out request regardless of region.
We only disclose your personal information outside our business in limited circumstances. If we do, we will put in place a contract that requires recipients to protect your personal information, unless we are legally required to share that information. Any contractors or recipients that work for us will be obliged to follow our instructions. We do not sell your personal information to third parties.
We may disclose your information to our third-party service providers, agents and subcontractors (Suppliers) for the purposes of providing services to us or directly to you on our behalf, including the operation and maintenance of our Site, and social media pages. This includes analytics and session-replay providers such as Google (Google Analytics / Google Tag Manager) and FullStory, as described in Section 03, when you have accepted cookies on bicycle.ai.
When we use Suppliers, we only disclose to them any personal information that is necessary for them to provide their services and only where we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions.
As we are a Company based in the United States, we may process personal data of EU citizens in the performance of contracts with our clients. The necessary safeguards as required under the GDPR, such as Transfer Impact Assessments/Transfer Risk Assessments, Standard Contractual Clauses (SCCs) and the UK Addendum, will be implemented to ensure that a similar standard of protection is applied to the data.
We take the security of your personal information seriously and use a variety of measures based on good industry practice to keep it secure. However, when accessing links to other websites, their privacy policies, not ours, will apply to your personal information.
We employ security measures to protect the personal information you provide to us, to prevent access by unauthorized persons and unlawful processing, accidental loss, destruction and damage.
Our Site, and social media pages may contain links to other websites run by other organizations which we do not control. This Policy does not apply to those other websites, so we encourage you to read their privacy policies. We specifically disclaim responsibility for their content, privacy practices and terms of use, and we make no endorsements, representations or promises about their accuracy, content or thoroughness. Your disclosure of personal information to third party websites is at your own risk.
We are obliged to retain certain information to ensure data accuracy, to help maintain quality of service and for legal, regulatory, fraud prevention and legitimate business purposes.
We retain personal information for no longer than is necessary for the purpose for which it was obtained by us or as required or permitted for legal, regulatory, fraud prevention and legitimate business purposes.
You have certain rights in respect of your personal data and we have processes to enable you to exercise these rights.
This is known as a Subject Access Request or a SAR in short. If you want to know if we are processing personal data relating to you and to have access to any such personal data you can contact dpo@bicycle.ai. In order to furnish you with a copy of your personal data that we hold we will need to verify your identity.
You have the right to access any personal information that Bicycle processes about you and to request information about:
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to do so as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
If you believe that we hold inaccurate personal data about you, contact dpo@bicycle.ai. Depending on the type of personal data you believe is inaccurate, we may ask you for further proof to ensure that the personal data is being corrected properly. If we are satisfied that the personal data is inaccurate, we will make the necessary changes.
You have a right to ask for your personal data to be erased in certain circumstances. However, this right does not apply where we have to comply with a legal obligation or where we need personal data for the establishment, exercise, or defense of legal claims. In addition, if you opt out of marketing communications or have previously opted out of marketing communications, we have to keep a record of such opt out to ensure that we don’t contact you in the future.
You have a right to request that processing of personal data is restricted in certain circumstances. However, we shall continue to process the personal data for storage purposes, for the establishment, exercise, or defense of legal claims or with your consent.
Where we are relying on legitimate interests as a legal basis to process your data, you have a right to object to such processing on grounds relating to your particular situation.
You have the right to lodge a complaint with the Data Protection Supervisory Authority of your choice.
For more information or to exercise your data protection rights, please contact us dpo@bicycle.ai.
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.
Please check this page regularly for changes to this Policy.
If you have any queries on how your data is collected, used, shared, or retained as part of our services, or to exercise any of your rights, please contact us at dpo@bicycle.ai.