Privacy Policy


Last Modified: May 20, 2018


Thank you for visiting World Bicycle Relief. We value your support and interest. We respect your privacy and are committed to protecting it through our compliance with this policy. This Privacy Policy, part of our overall Terms of Use, applies to (the “Website”), owned and operated by World Bicycle Relief, a nonprofit organization and to all the organisations represented on the Website (see Section “Our Details”) and the staff working at them  (“WBR”, “we”, “our”, “us”).


You may have received  a copy of this Privacy Policy in connection with an offline donation or other offline interaction you have had with WBR. Your receipt of the Privacy Policy is taken as acceptance of it and this Privacy Policy also applies to you.


We take your privacy seriously. We will not sell, lease, or exchange your personal data to, or otherwise share your personal data with, third parties in ways other than described in this policy. Please read this policy carefully to understand how we will treat your information.  By accessing or using this Website, you agree to this Privacy Policy and to our overall Terms of Use.If you do not agree this Privacy Policy then you should not use our Website.


To facilitate our global operations, we may transfer and access personal information from around the world, including the United States. This Privacy Policy shall apply even if we transfer personal information to other countries.


This policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Information We Collect and How it is Used

We may collect the following information: .

1.Personal data. This may include information including your name, email address, mailing or billing address, country, phone number, gender, date of birth, marital status, title or employer. The source of the personal data is you, your employer or is what is publicly available. The account data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases, processing transactions, promoting fundraising campaigns and communicating with you. The legal basis for this processing is consent.

  1. Fundraising Data. This may include information on a fundraising page that you set up. The fundraising data may include your name, address, telephone number, email address, profile pictures, gender, date of birth, salutation, relationships, interests and hobbies, educational details and employment details. The fundraising data may be processed for the purposes of enabling and monitoring your use of our website and services, processing transactions, serving ads and communicating with you. The legal basis for this processing is consent.
  2. Usage Data. We may process data about your use of our website and services. The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, interest categories, age range, gender, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of operating our website, serving ads, analyzing the use of the website and giving trends and providing our services. The legal basis for this processing is consent. To see more on Google’s privacy policy, please go to
  3. Correspondence Data. We may process information contained in any inquiry or communication you submit to us, including internal staff members regarding our programs, organization, donations and/or goods and services and could include the communication content and metadata associated with the communication. The communication data may be processed for the purposes of answering questions, providing transparency, improving performance and internal efficiency, and record-keeping and offering, marketing and selling relevant goods and/or services to you. The legal basis for this processing is consent.
  4. Transaction Data. We may process information relating to transactions, including donations and purchases of goods, that you enter into with us and/or through our website. The transaction data may include your contact details {name, email, address, telephone number}, your credit card or banking details and the transaction details. The transaction data may be processed for the purpose of making tax-deductible donations or supplying the purchased goods and keeping proper records of those transactions and for analyzing giving trends. The legal basis for this processing is consent or the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
  5. Notification Data. We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters. The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is consent.
  6. Email Data. We may process information contained in or relating to email communication from and to the organization. The email data may include personal data including name, email, email preferences, location, gender, employer, interests or persona and/or service data including emails delivered, clicked or opened, browser language, list or workflow membership, referral source, page views, and form submissions. The source of the usage data is Hubspot. The email data may be processed for the purposes of operating our website, communicating with you more effectively, to identify more qualified leads, to provide more relevant content or reporting and increase transparency and for record-keeping. The legal basis for this processing is consent. To see more on Hubspot’s privacy policy, please go to

Please do not disclose any other person’s data to us unless we prompt you to do so.

Providing your personal data to others

  1. We may disclose your personal data to professional consulting firms or partners with the purpose of more effective communication with our supporters or for other internal marketing related studies or promotions.
  2. Fundraising data including supporter names, comments and the gift amount is displayed with consent on fundraising pages. If a supporter requests their information to be Anonymous, it is displayed as such and never with their personal details.
  3. Financial transactions relating to our website and services are handled by our payment service providers, iATS, Altruja, JustGiving, Virgin Money Giving, Stripe, Paypal, Braintree, Shopify, Facebook or Betterplace. We will share transaction data with our payment service providers only to the extent necessary for the purposes of processing your payments, refunding payments and managing complaints or queries relating to such payments and refunds. You can find information about the payment service providers’ privacy policies and practices at:
    1. iATS -
    2. Altruja -
    3. JustGiving -
    4. Virgin Money Giving -
    5. Stripe -
    6. Paypal -
    7. Braintree -
    8. Shopify -
    9. Facebook -
    10. Betterplace -
  4. We may provide links to our partners’ website or other websites on our Website for purposes of providing information and services to you. Those websites may collect information from you. You might submit information to those websites. We do not endorse or control any websites linked on our Website and we are not familiar with their information collection and protection procedures. If you have any questions about the privacy policies or data security with respect to other websites, you should refer to those websites directly.
  5. In addition to the specific disclosures of personal data set out, we may disclose your personal data where such disclosure is necessary by law or regulation.

Retaining and deleting personal data

  1. Personal data that we process for any purpose shall not be kept for longer than is necessary for that purpose.
  2. We will anonymize your personal data after seven years after inactivity.


Your Rights

  1. In this Section, we have summarized the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summaries.You should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
  2. Your principal rights under data protection law are:
    1. The right to access;
    2. The right to rectification;
    3. The right to erasure;
    4. The right to restrict processing;
    5. The right to object to processing;
    6. The right to data portability;
    7. The right to complain to a supervisory authority; and
    8. The right to withdraw consent
  3. You have the right to confirmation as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. You can access your personal data by visiting this form and logging a ticket.
  4. You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed..
  5. In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defense of legal claims.
  6. In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defense of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defense of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
  7. You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
  8. You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose. You can update your consent for marketing purposes by following the instructions within the email footer.
  9. We require you to provide us with proof of your identity and of your address to ensure we are releasing data to the right individual. Please supply us with a photocopy or scanned image of one Or both of the following:
    1. Proof of Identity: Passport, photo driving license, national or state identity card
    2. Proof of Address: Utility bill, bank statement, credit card statement (none of which are more than 3 months old); current driver license; local authority tax bill; HMRC tax document (not more than 1 year old)

If we are not satisfied you are who you claim to be, we reserve the right to refuse to grant your request.

  1. To the extent that the legal basis for our processing of your personal data is:
    1. Consent; or
    2. that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
  2. If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
  3. To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
  4. You may exercise your rights of access, rectification, erasure or transfer in relation to your personal data or to object to the processing of your data or to restrict processing of your personal data by request to us here:

Cookies – About

  1. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
  2. Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
  3. Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.


Cookies that we use

  1. Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
  2. Flash Cookies. Certain features of our Website may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Website. Flash cookies are not managed by the same browser settings as are used for browser cookies.
  3. Web Beacons. Pages of our Website and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or [opened an email] and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
  4. The purpose of these cookies is to collect details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website and Information about your computer and internet connection, including your IP address, operating system, and browser type.

Cookies from service providers

  1. Our service providers use cookies and those cookies may be stored on your computer when you visit our website.
  2. We use Google Analytics to analyze the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google's privacy policy is available at:  

Managing Cookies

  1. Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version.
  2. Blocking all cookies will have a negative impact upon the usability of many websites.
  3. If you block cookies, you will not be able to use all the features on our website.    

Data Security

When we collect your information directly from you, we follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. We maintain administrative, physical and technical and safeguards such as encryption, password protected access and firewalls. We update and test our security technology on an ongoing basis.


The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website (for example, by creating a user profile), you are responsible for keeping this password confidential. We ask you not to share your password with anyone.


Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.


Children Under the Age of 13

Our Website is not intended for children under 13 years of age without parental consent and supervision. We do not target our offerings toward, and do not knowingly collect, any personal information from users under 13 years of age, unless a parent has consented in writing to the child’s use of our Website and to our collection of certain information from the child. We will not require a child under the age of 13 to provide more information than is reasonably necessary to participate in our activities. Parents may review their child’s personal information, ask to have it deleted and refuse to allow any further collection or use of their child’s information. A parent wishing to do so should contact us as indicated in the “Our Details” section below.


Public Areas of our Website

Our Website offers publicly accessible blogs, social networking access and community forums (“Community Areas”). You should be aware that any information you provide in the Community Areas may be read, collected and used by others, including members of the public who access those postings. You are responsible for maintaining the security of the personal information you post in the Community Areas. We have no obligation to monitor the Community Areas.


We may review materials posted to a Community Area and to remove any materials at our sole discretion. We may also refuse to edit or remove materials at our sole discretion. We may terminate your access to any or all of the Community Areas at any time without notice for any reason whatsoever.


California Privacy Rights

California Civil Code Section § 1798.83 permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us as by submitting the following form


Our Details

  1. This website is owned and operated by World Bicycle Relief NFP.
  2. We are registered in and have principal contacts below:
    1. United Kingdom under registration number 1141613 at: PO Box 1336, Cambridge, CB1 0BQ; Contact: Allison Dufosee at email
    2. Germany under Finanzamt Schweinfurt St Nr 249 /142 /70088 at: Romstraße 1, 97424 Schweinfurt; Contact: Kristina Jasiunaite at email
    3. United States under Tax ID 20-5080679 and at: 1000 W Fulton Market, 4th Fl, Chicago, IL 60607; Contact: Teresa Walter at email
    4. Canada under registration number 804964500RR0001 and at: 255 Courtneypark Drive West, Mississauga, ON L5W 0A5; Contact: Teresa Walter at email
    5. Australia under ABN registration number 85 610 648 612 at: PO Box 3098, Marrickville Metro, NSW 2204; Contact: Teresa Walter at email


Data Protection Officer

  1. Our data protection officer is Jeff Bosken and can be contacted at

*This document was created using a template from SEQ Legal (

Have more questions? Submit a request


Please sign in to leave a comment.