Privacy policy
Effective date: October 13, 2026
This policy explains what Women’s Bikepacking collects when you visit womensbikepacking.com or join our newsletter, why, who helps us handle it, and the choices you have. We kept it short and plain on purpose.
Who we are
Women’s Bikepacking (womensbikepacking.com) is a newsletter and website for women who bikepack, connected to the Women’s Bikepacking & Bike Touring community on Facebook. We are the "controller" of the personal data described here. You can reach us at kera87@gmail.com.
What we collect
When you join the newsletter: your email address, plus where you came from (for example, a link from our Facebook group). We save the campaign tags in the link you clicked (called UTM parameters) as your sign-up source.
If you fill out the optional form after joining: anything you choose to share, which may include your first name, a short bio, your riding level or stage, what you’d like help with, a link to a photo, a caption, your story or trip, whether you’d like to be interviewed, and your social media handles (Instagram, Facebook, TikTok, or others). Every field is optional.
Automatically, when you browse: pages you visit, clicks, scrolls, and mouse movement; device, browser, and approximate location (from your IP address); and the page that referred you. See "Cookies and analytics" below.
We don’t ask for payment details, and we don’t knowingly collect sensitive data (like health information). Please don’t include it in your story.
How we use it
- To send you the newsletter and the welcome email.
- To keep a simple contact record with tags (for example, your sign-up source and riding stage) so we send you relevant content.
- To read your story and photo, and, only with your consent, feature them (with your first name or handle) in the newsletter or on the site, or contact you about an interview.
- To understand which pages and links work, fix problems, and improve the site.
- To keep the sign-up form safe from spam and abuse, and to get alerted when a sign-up fails.
Legal bases (for visitors in the EU/UK)
- Consent: joining the newsletter, sharing your story or photo and having it featured, and interview contact. You can withdraw consent at any time.
- Legitimate interests: basic site analytics, security, and fixing problems. Where local law requires consent for analytics cookies, we rely on consent (see below).
- Legal obligation: keeping records when the law requires it.
Who we share it with
We don’t sell your personal data, and we don’t share it for cross-context behavioral advertising. We share it only with service providers ("processors") who run parts of the site for us:
| Provider | What it does |
|---|---|
| Beehiiv | Sends our newsletter (from our own womensbikepacking.com sending address) and stores your email, sign-up source, and newsletter activity. |
| GoHighLevel (GHL) | Our contact list (CRM): stores your email, tags, and anything you share in the optional form. |
| Google Analytics 4 (Google) | Measures site visits and traffic sources. |
| Microsoft Clarity (Microsoft) | Heatmaps and session replay: records clicks, scrolls, and mouse movement so we can see how pages are used. |
| Cloudflare (Cloudflare Pages) | Hosts the site and processes sign-up requests. |
| Resend | Sends us internal alerts if a sign-up fails; these may include the email address involved. |
We may also share information if the law requires it, to protect people’s safety, or as part of a sale or transfer of the newsletter (you’d be told). If we feature your story with your consent, what we publish is public.
Cookies and analytics
The site uses:
- Google Analytics 4 cookies (such as
_ga) to count visits and see where visitors come from. - Microsoft Clarity cookies (such as
_clckand_clsk) for heatmaps and session replay. wwb_utm: our own short-lived cookie (30 minutes) plus browser session storage, which remembers which link brought you here so a sign-up is credited to the right source.
Cookie choice. When you first visit, a small banner asks whether you accept analytics cookies. Google Analytics and Microsoft Clarity load only after you choose Accept, and the site honors that choice: it is saved in your browser so we don’t ask on every page. If you choose Decline, or your browser sends a Global Privacy Control signal, they don’t load. The wwb_utm cookie is functional (it only credits a sign-up to the link you came from), so it is set whatever you choose. To change your choice, clear this site’s data in your browser and the banner will ask again.
How to opt out: - Google Analytics: install the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). - Clarity and all other cookies: block or delete cookies in your browser settings, or use a private window or a tracker blocker. - Global Privacy Control (GPC): we honor it and treat it as Decline. - Newsletter tracking: use the unsubscribe link in any email.
How long we keep it
- Newsletter and contact data: while you’re subscribed. If you’d like it deleted, email kera87@gmail.com and we’ll delete it within a reasonable time, except a minimal record so we don’t email you again.
- Stories and photos: until you ask us to remove them. Anything already sent in a newsletter can’t be unsent.
- Analytics: Google Analytics keeps data for the retention period set in Google Analytics; Clarity keeps recordings for about 30 days and heatmap data for up to about 13 months.
Your rights
Everyone can ask us to see, correct, or delete their data, and can unsubscribe at any time.
EU/UK (GDPR / UK GDPR): you have the right to access, correct, delete, restrict, or object to processing; data portability; to withdraw consent at any time; and to complain to your local data protection authority (in the UK, the ICO).
California (CCPA/CPRA): you have the right to know what we collect, access it, correct it, delete it, and limit use of sensitive data (we don’t use any). Do not sell or share: we don’t sell your personal data or share it for cross-context behavioral advertising, so there’s nothing to opt out of, but you can still ask us to confirm. We won’t treat you differently for using your rights. You can use an authorized agent.
To use any right, email kera87@gmail.com. We’ll reply within 30 days (45 days for California requests) and may ask you to confirm it’s your email address.
Children
This site is for adults. We don’t knowingly collect personal data from children under 13, or under 16 in the EU/UK. If you think a child has signed up or sent us something, email us and we’ll delete it.
International transfers
Our providers are mostly based in the United States, so your data may be stored and processed in the US. Where data comes from the EU/UK, we rely on our providers’ safeguards, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Security
The site runs over HTTPS, the sign-up form has spam protection, and the passwords that connect our tools are kept secret and are never shown on the site. Only the people who run the newsletter can see your data. No system is perfectly secure, so please don’t send anything highly sensitive.
Changes
If we change this policy, we’ll update the effective date at the top. If the change is big, we’ll tell subscribers by email.
Contact
Questions or requests: kera87@gmail.com