Royal Riders Nashik | Cycling Club & Long Distance Rides

Information We Collect

Name, address, contact number, email, and emergency contact details during registration.
Payment and transaction details (processed securely through our payment partners).
If you connect Strava (optional): athlete profile information returned by Strava during OAuth authorization (such as Strava athlete ID, username, name, sex, city/state/country, profile photo URLs, weight, premium status, follower/friend counts, and measurement preference), and activity data we sync from Strava for your rides (such as activity ID, name, type/sport, distance, elevation, speed, moving/elapsed time, start time, location fields, map summary polyline, calories/watts where provided, device/gear identifiers, and related activity metadata used for tracking).

To manage event participation and communication.
To send updates, ride information, and promotional messages (with your consent).
Strava-connected data (and Personal Data derived from it) is used only to sync your rides (including scheduled sync), calculate your own challenge progress and rider statistics, and maintain your own rider activity history in your Royal Riders account. Per the Strava API Policy (effective June 1, 2026), Strava Data related to you may be displayed or disclosed in our application only to you (the authenticated Strava user), not to other users.
We do not sell, trade, or rent your personal information to others.

Connecting Strava is optional and requires you to be logged in to your Royal Riders rider account.
You authorize Royal Riders through Strava’s OAuth consent screen. We request the Strava scope activity:read_all so we can read your activities for challenge tracking.
Data is collected from Strava only after you approve that authorization, via Strava’s OAuth token exchange and subsequent authenticated Strava API requests.
You can withdraw Strava access at any time from your rider dashboard using Disconnect Strava, or by revoking the app in your Strava account settings. On disconnection or revocation we attempt to revoke authorization with Strava, clear stored Strava access/refresh tokens, stop future sync, and delete applicable Strava Data and Personal Data derived from Strava Data as described under Data Retention (Strava).

Strava access and refresh tokens are stored in our database encrypted at rest (application-level encryption). Encryption keys are kept in server configuration and are not exposed in this policy or to end users.
Synced athlete and activity records are stored in our application database only while needed for the purposes described above and subject to the deletion rules below.
We follow industry standards to protect your data from unauthorized access. However, no online platform can guarantee 100% security.

While your Strava account remains connected, we retain synced athlete/activity data needed for your own daily tracking, challenges, statistics, and rider history.
Upon (a) your request, (b) your revocation or disconnection of Royal Riders’ authorization to your Strava account, or (c) deletion of your Strava account, we will promptly and permanently delete all Strava Data and all Personal Data derived from Strava Data relating to you from our application and from systems under our control. Deletion will be completed expeditiously and in any event within thirty (30) days, except where applicable law requires longer retention (in which case we retain only what that law requires and can provide the legal basis on request). We will certify deletion to Strava in writing on request, and will provide you written confirmation of successful deletion when you request it.
Non-Strava Royal Riders records (for example membership registration, event/challenger payment records, and other operational account data you provided directly to Royal Riders) may be retained only where legally or operationally required. Those records will not retain or display Strava Data or Personal Data derived from Strava Data after the deletion described above.

While connected, you can view your Strava connection status, your synced activities, and your own challenge progress in your Royal Riders rider account (for example, dashboard and activities areas). Strava Data is not shown to other users.
You can manage Strava authorization for this application in your Strava account as well.

Disconnecting or revoking Strava authorization triggers deletion of Strava Data and Personal Data derived from Strava Data relating to you, as required by the Strava API Policy (see Data Retention (Strava) above).
To request deletion of Strava-related data we hold about you, or other personal data, or to request written confirmation of deletion, email royalriders2911@gmail.com from the email associated with your rider account, and describe what you want deleted.
We will process verified requests and send written confirmation when deletion has been completed.

We use Strava as a third-party service to authenticate you and retrieve the athlete/activity data you authorize. Strava processes data under Strava’s own terms and privacy policy.
We do not sell Strava Data. We do not display or disclose your Strava Data, or Personal Data derived from Strava Data, to other Royal Riders users, participants, or public visitors.
This Privacy Policy does not modify or supersede the Strava Privacy Policy. If there is a conflict regarding Strava’s handling of data on Strava’s platform, Strava’s Privacy Policy controls for that data.
For developer/API rules applicable to our use of Strava’s API, see the Strava API Agreement and Strava API Policy (as published by Strava, including the policy effective June 1, 2026).

By using our website and registering, you consent to our Privacy Policy.
By connecting Strava, you additionally consent to the Strava-related collection and uses described in this policy, subject to Strava’s authorization screen and Strava’s policies.

For any privacy concerns, contact us at: royalriders2911@gmail.com