Privacy Policy

João's Organization · Last updated: 16 September 2026

This policy explains how we collect and use your personal data when you browse or book with us, in line with UK GDPR and the Data Protection Act 2018.

1. Who we are

We (João's Organization) are the data controller for your booking — we decide what happens with your details as our customer.

2. What we collect

  • Booking details: your name, email, phone number, and any message content you submit when making an enquiry or booking.
  • Payment data: handled directly by Stripe — we never see or store your card or bank details.
  • If we ask you to complete a waiver or safety form before your activity, the details you provide there are used solely to run that activity safely.
  • Usage data: pages you visit and actions you take on this site, collected via cookies once you accept them in the cookie banner — see our Cookie Policy.

3. How we use it

To process your booking and payment, send you transactional emails (confirmations, reminders, status updates), provide customer support, meet our legal and tax obligations, and — only with your consent — to understand how our site is used so we can improve it. We never sell your data.

4. Who we share it with

We use a small number of trusted service providers to run our booking site and process your data on our behalf:

  • RideLoop — the booking and payments software this site runs on. RideLoop processes your data solely on our instructions, as our data processor, and isn’t a party to your booking with us.
  • Stripe — processes card payments.
  • Resend — sends our transactional emails.
  • Clerk — handles sign-in if you use the guest booking portal to look up an existing booking.

5. Data retention

We keep booking and financial records indefinitely, to meet UK tax and accounting record-keeping obligations.

  • Support chat conversations (including message content) are automatically deleted after 24 months with no new message.
  • Your personal details (name and phone number) on a booking, quote, or chat thread with no new activity for 12 months are automatically anonymised — the underlying record is kept for accounting purposes, only the identifying fields are removed.

This is enforced automatically on a schedule, not left to a manual review.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, or export your personal data, and to object to certain processing. Contact us directly (see our contact details) to exercise these rights.

7. Cookies

See our Cookie Policy for details on the cookies this site uses and how to change your choice at any time.

8. Changes to this policy

We may change this policy at any time, without prior notice, by publishing the updated version on this page.

This page is a template provided by RideLoop, our booking software provider, and has not been reviewed by a solicitor — treat it as a starting point, not final legal advice for our business.