Privacy policy

Last updated: 23 June 2026

This policy explains how Waikin Sri Lanka Cycling (the “Platform”), operated by WAIKIN EUROPE (PVT) LTD(“we”, “us”, “our”), collects, uses and protects information about visitors and registered users of srilankacycling.lk.

Waikin Sri Lanka Cycling is an independent platform for cycling in Sri Lanka. We are not a government body and not the official Sri Lankan cycling federation. Use of the Platform is voluntary.

1. What we collect

1.1 Account data

When you create an account we collect:

• Name and email address
• Encrypted password (or, if you sign in with Google, the Google account identifier we receive — we do not see or store your Google password)
• Account role (rider, club manager, association admin, or platform admin)

1.2 Rider profile data (only if you create or claim a rider profile)

• Full name, date of birth, sex / category, nationality
• Optional profile photo and biography
• Club affiliation
• Optional contact details (phone)
• Optional ID document number and type (used to verify identity when issued by you and your club)
• Optional height, weight, blood group (for the printed rider card you can request)
• Waikin rider ID (a unique number we assign on the Platform)

1.3 Race participation data

• Race registrations submitted by you, your club, or an association admin
• Race results, finishing times and ranking points
• Predictions you make for upcoming races

1.4 Technical data

• IP address and browser session information (transient, used for security and to keep you signed in)
• Pages you view on the Platform, collected anonymously via Google Analytics — see Section 4

2. How we use your data

• To operate the Platform — show your profile, your race entries, results and predictions
• To calculate seasonal rankings from published race results
• To send transactional emails (registration confirmations, password resets, race entry approval notifications)
• To improve the Platform — anonymous usage statistics tell us which pages are useful
• To prevent abuse and protect the integrity of the service

We do not sell personal data to third parties and we do not use it for advertising.

3. What is publicly visible

Rider profiles you create or claim are intentionally public — this is a public sport. Public information includes your name, rider category and discipline, club affiliation, photo (if you upload one), race results and ranking position. ID document numbers, contact details, height, weight and blood group are never public; they appear only on the printed rider card if you request one and on your private account view.

You can request that your rider profile be hidden from public view by contacting us — see Section 8.

4. Cookies and analytics

4.1 Strictly necessary cookies

We use a small number of first-party cookies to keep you signed in and to remember the dismissal of the announcement bar. These cookies cannot be disabled because the site relies on them to function.

4.2 Google Analytics

We use Google Analytics 4 to understand how visitors use the Platform in aggregate — which pages are popular, how people arrive at the site, what devices and browsers they use. Google Analytics sets cookies on your device. IP addresses are processed by Google in a shortened, anonymised form before being stored.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by disabling cookies in your browser.

5. Third-party services we rely on

The Platform is built on the following infrastructure providers. Each receives only the data necessary for their function:

Some of these providers (Google, Cloudflare, Brevo) may transfer data to servers outside Sri Lanka and outside the European Economic Area. We rely on the providers’ own standard contractual clauses and published safeguards.

6. How long we keep your data

• Account & rider profile data — for as long as your account exists. If you ask us to delete your account we will remove personal data within 30 days; aggregated race results and ranking points may remain in the sporting record (with name attribution) because they are part of the public competitive history.
• Email logs — typically up to 12 months at our email provider.
• Analytics data — Google Analytics retains aggregated usage data for 14 months by default.
• Server access logs — short-lived (typically 7–30 days) and used only for security and debugging.

7. How we keep your data secure

• All traffic to the Platform is encrypted in transit via TLS / HTTPS
• Passwords are stored as one-way hashes — we cannot read them back
• The server has SSH key-only access, automated security patches, and brute-force protection
• Database backups are encrypted at rest

No service can be 100% secure. If we ever become aware of a breach affecting your personal data we will notify you via the email address on file.

8. Your rights and choices

You can:

• Access the personal data we hold about you — most of it is visible directly from your account
• Correct inaccurate information by editing your profile, or by writing to us
• Delete your account and personal data (subject to retention of public competitive results, see Section 6)
• Object to specific processing such as analytics, by opting out of cookies
• Withdraw consent to receive marketing emails at any time — every marketing email contains an unsubscribe link

To exercise any of these rights, write to info@waikineurope.com. We will respond within 30 days.

9. Children

We do not knowingly create accounts for users under the age of 13. If you are between 13 and 18, please ensure a parent or guardian has reviewed this policy. Parent or club-manager-assisted registration is the recommended path for junior riders.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the Platform homepage. The “Last updated” date at the top of this page always reflects the most recent revision.

11. Contact

Operator: WAIKIN EUROPE (PVT) LTD
Address: No 311/2, Duriyangas Junction, Katana, Sri Lanka
Email: info@waikineurope.com
Phone & WhatsApp: +46 76 155 89 70

For all data-protection enquiries, please use the email address above and include “Privacy” in the subject line.