This privacy policy explains how Lopes Cycling Performance (“we”, “us”) collects, uses and looks after personal data when you use lopes-tad.com, book a session, send a message or buy from the shop. It is written to meet the UK GDPR and the Data Protection Act 2018 for visitors in the United Kingdom, and the EU GDPR for visitors in the EEA.
We operate a performance studio in Conceição de Tavira, Portugal. We do not currently publish a UK company number or a registered office separate from the studio address below. If you need those details for a formal request, email us and we will provide what we have.
Who is responsible
The data controller is Lopes - Treino & Avaliação Desportiva, trading as Lopes Cycling Performance. Studio and correspondence address: R. Nossa Sra. da Conceição, 8800-052 Conceição de Tavira, Faro (Algarve), Portugal. Email: info@lopes-tad.com. Telephone: +351 967 655 670.
What we collect
We only collect what we need to run the studio, the website, bookings and (when it is open) the shop.
- Identity and contact data — name, email address, telephone number, and any message you send through the contact form.
- Booking data — the service, date, time, coach, extras you choose, and notes you give us so we can run the session.
- Payment data — we do not store full card numbers. Payments go through Stripe. We keep the payment status, amount, and Stripe’s reference.
- Order data — products, size or variant, how you want to receive the order (collection in Tavira or shipping), and the delivery address if you ask us to send it.
- Technical data — IP address, browser type, device and pages viewed, only if you accept analytics cookies. We do not use Google Analytics.
- Consent data — your cookie choices and the date you made them.
We do not knowingly collect data from children under 16 through this website. If a parent or coach books for a young athlete, that adult is the person we correspond with.
Why we use it, and the lawful basis
| Purpose | Lawful basis |
|---|---|
| Answer a contact-form message or an email | Legitimate interests — to reply to you — and, where you tick the form box, consent |
| Take and run a booking, including deposits and reminders | Contract — to provide the session you asked for |
| Take payment and keep invoices | Contract, and legal obligation (tax and accounting) |
| Fulfil a shop order or studio collection | Contract |
| Keep the site secure and remember your basket or cookie choice | Legitimate interests (security and a working site); consent for non-essential cookies |
| Understand how the public site is used (Dotwall analytics) | Consent — analytics cookies, off until you accept |
| Send marketing we have not already agreed with you | Consent — we do not run marketing pixels or email lists today |
Cookies
Necessary cookies keep the site working (your cookie choice, the shop basket, a shop-preview unlock, and the staff admin session). Analytics cookies load the Dotwall usage tracker only after you accept. We have no marketing cookies at the moment. See the Cookie Policy for the list and how to change your mind.
Who we share data with
We do not sell your data. We use a short list of processors who only handle what they need to provide their service to us:
- Stripe — card payments for bookings and shop orders.
- Resend — sending the emails you trigger (booking confirmation, contact acknowledgement, receipts).
- Netlify — hosting the website.
- Dotwall — first-party usage analytics, only if you accept analytics cookies. This is not Google Analytics.
- TrainingPeaks — only if you are a coached athlete and we already work with you there. The public website does not send visitors to TrainingPeaks automatically.
OpenStreetMap tiles on the location section do not set cookies and do not go through us as a processor beyond loading public map images.
International transfers
The studio is in Portugal. Some processors (for example Stripe, Resend or Netlify) may handle data outside the UK or EEA. Where that happens they rely on an adequacy decision or standard contractual clauses. Ask us if you want the current detail for a specific provider.
How long we keep it
- Contact-form messages — long enough to reply, then deleted unless they become part of a booking.
- Bookings and invoices — for as long as tax and accounting law requires. In Portugal that is typically up to ten years for invoices.
- Shop orders — the same accounting period, plus any shorter period needed to handle a collection or shipment.
- Cookie consent — six months, then we ask again.
- Basket cookie — only while you are shopping; it is not a profile.
- Analytics — aggregated usage data held by Dotwall under their retention; we do not use it to identify you.
Your rights
Under the UK GDPR (and the EU GDPR, if it applies to you) you can ask us to:
- access the personal data we hold about you
- correct it if it is wrong
- erase it, where we do not have a legal reason to keep it
- restrict or object to how we use it
- receive a copy in a portable format (data portability), where the basis is consent or contract and the processing is automated
- withdraw consent, where consent is the basis — this does not undo processing already done
Email info@lopes-tad.com and we will respond within one month. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or, because we are established in Portugal, to the Comissão Nacional de Proteção de Dados (cnpd.pt). We would rather fix the problem with you first.
Changes
If we change how we use data in a way that affects you, we will update this page and the “last updated” date. Material changes may also be flagged on the site.
Contact
Privacy questions: info@lopes-tad.com, +351 967 655 670, or write to the studio address above.