Skip to content
Goldilocks Grvl Goldilocks Grvl
Join the Club

Privacy Policy

Last updated: 2026-03-30

This Privacy Policy explains how Goldilocks GRVL Cycling Club (“Goldilocks GRVL,” “GGCC,” “we,” “us”) collects, uses, and shares information when you visit goldilocksgrvl.cc (the “Site”), sign up for our emails, RSVP for events, or otherwise interact with us online.

1) Who we are

Goldilocks GRVL Cycling Club

Bend, Oregon, United States

Primary contact for privacy questions: Please use our Contact page.

2) What information we collect

We may collect the following categories of information:

  • Information you provide to us
    • Contact information (such as name, email address, and phone number) when you sign up for our email list, RSVP for an event, fill out a form, or contact us.
    • Waiver and ride participation information you submit through our waiver forms.
    • Any information you include in messages you send us.
  • Information collected automatically when you use the Site
    • Device and usage information such as IP address, browser type, pages viewed, referring/exit pages, and timestamps.
    • Cookies and similar technologies. We (and our service providers) may use cookies, pixels, and similar technologies to operate the Site and understand usage.
  • Information from third parties
    • If you interact with our social media accounts, event platforms, or email services, we may receive information from those services consistent with their settings and policies.

3) How we use information

We use information we collect to:

  • Provide and operate the Site.
  • Communicate with you (for example, send ride updates, newsletters, event information, or respond to inquiries).
  • Process RSVPs and administer events.
  • Maintain safety and community standards (for example, to address conduct or safety concerns).
  • Monitor and improve the Site and our communications.
  • Protect our rights, prevent fraud, and maintain security.
  • Comply with legal obligations.

4) Legal bases (for visitors in the EEA/UK)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process personal data only when we have a valid legal basis, including:

  • Consent (for example, when you opt in to receive marketing emails).
  • Contract/performance of a service you request (for example, event RSVP administration).
  • Legitimate interests (for example, operating and securing the Site, and communicating with the community), where those interests are not overridden by your rights.
  • Compliance with legal obligations.

5) How we share information

We do not sell your personal information.

We may share information in the following situations:

  • Service providers We may share information with vendors who help us operate the Site and our communications. Examples include:
    • Email communications: Kit (kit.com) (for email list signups and email delivery)
    • Analytics: Fathom Analytics (privacy-focused website analytics)
    • Forms: Gravity Forms (for collecting contact information, ride waivers, and related submissions)
    These providers process information on our behalf and under our instructions.
  • Legal and safety reasons We may disclose information if we believe in good faith that disclosure is necessary to:
    • comply with law or legal process,
    • protect the rights, property, or safety of GGCC, our members, or others, or
    • investigate suspected fraud, security issues, or violations of our policies.
  • Business changes If we reorganize, merge, or transfer assets, information may be transferred as part of that transaction.

6) Cookies and analytics

We use analytics to understand how the Site is used and to improve it.

  • Analytics provider: Fathom Analytics Fathom is designed to be privacy-focused and does not use advertising cookies to track you across websites.

We may also use essential cookies or similar technologies needed to operate the Site (for example, security and basic functionality). You can control cookies through your browser settings, but some parts of the Site may not function properly if you disable them.

7) Email communications

If you join our email list, we will send emails consistent with what you signed up for (for example, ride updates and event information). We use Kit (kit.com) to manage our email list and send emails.

You can opt out of marketing emails at any time by using the unsubscribe link in the email.

If you contact us directly, we may retain your message and our response.

8) Data retention

We keep personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to comply with legal obligations, resolve disputes, enforce agreements, and maintain our records.

9) Children’s privacy

The Site is not intended for children under 13, and we do not knowingly collect personal information from children.

10) Security

We use reasonable administrative, technical, and organizational measures to protect information. However, no method of transmission or storage is 100% secure.

11) Your privacy rights

Depending on where you live, you may have rights regarding your personal information.

  • U.S. state privacy rights (where applicable) Residents of certain U.S. states may have rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of certain processing.
  • EEA/UK rights (where applicable) You may have the right to request access to, correction of, deletion of, or restriction of processing of personal data, and to object to processing or request data portability.

To make a request, please contact us via our Contact page. We may need to verify your identity before responding.

12) International transfers

If you access the Site from outside the United States, your information may be processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your jurisdiction.

13) Third-party links

The Site may link to third-party websites or services (for example, RSVP platforms or social media). We are not responsible for the privacy practices of third parties. Their privacy policies govern your use of their services.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when it was last revised. Your continued use of the Site after changes means you accept the updated Privacy Policy.

15) Contact us

Questions or concerns about this Privacy Policy:

Please reach out via our Contact page.

Mailing address:

1001 SW Disk Dr.
Suite #250
Bend, OR 97702