Who is responsible
Ralyo is run by Chad Richts, an individual based in the United Kingdom. He is the controller responsible for the personal information described here. Contact privacy@ralyo.uk with questions or requests about your information.
This notice covers visits to www.ralyo.uk and the redirect from ralyo.uk. It does not describe the Ralyo mobile apps, accounts, payments or coaching videos. There is no account, payment or video-upload form on this website.
The launch invitation list
If you choose to join our launch list, we collect your email address and the timestamp of your consent. We use them only to send a ralyo launch invitation. Joining does not create an app account or commit you to a payment. Our lawful basis is your consent, given by ticking the launch invitation box.
We store launch-list information with Amazon Web Services in Ireland. We stop using entries after 12 months and schedule automatic deletion. Our storage provider may take a few days to finish deletion. Email privacy@ralyo.uk to withdraw your consent or request earlier deletion. We do not send your email address to website analytics.
The form includes a hidden spam-prevention field and temporarily limits repeated requests. Please leave that field empty. To protect the form, we keep a daily salted hash of your IP address, rather than the raw address, in short-lived request counters. These counters expire after 24 hours; storage deletion can take a few more days. Our lawful basis for this protection is our legitimate interest in preventing abuse. Our hosting providers also process technical request information as described below.
Hosting and access logs
Amazon Web Services delivers this website. Its access logs record the requested path, time, IP address, browser or crawler identifier, referring page, response status and delivery timings. We use these records to operate and secure the website, investigate errors and understand whether discovery crawlers can reach our pages. Our lawful basis is our legitimate interest in running a reliable and secure website.
We omit request-cookie and request-query-string fields from these logs. Referring-page and browser-identifier fields can still contain information supplied by a browser, so raw logs have restricted access and are scheduled for deletion after seven days. Routine reports use counts and technical summaries with IP addresses, raw browser identifiers, raw referrers and unrecognised paths removed. Those summaries are scheduled for deletion after 400 days; temporary query results after seven days. Storage deletion can take time to complete.
We do not use crawler IP addresses to identify customers or link their identities to browsing. Hosting and access logs operate whether or not you accept optional analytics.
Optional analytics
If you accept analytics, we use Google Analytics to understand website visits and improve the site. It records page views, contact-link clicks, how you found us, basic browser and device information, and page performance and error categories. Google also processes your IP address when receiving requests; Google says GA4 does not log or store IP addresses.
We send the page's published address without query parameters, a page identifier and content version, referring website origin, and recognised source, medium and campaign values. Error reports contain categories, not error messages or recordings. We do not send names, email addresses, login details, payment information or coaching videos to website analytics. Campaign labels must not contain personal information.
Our lawful basis for optional analytics is your consent. We do not load Google's analytics tag or send analytics requests until you accept. Rejecting analytics does not affect access to the website. Advertising consent remains denied; we do not use Google signals, advertising personalisation or session replay on this website.
Google's user and event data retention is set to 14 months, without resetting that period on new activity. This setting does not expire all aggregate reports, which Google may retain longer. We review reports to understand traffic and content performance; these reports do not prove who a visitor is.
Cookies, browser storage and changing your choice
The essential preference entry ralyo.marketing.consent remembers your accept or reject choice for 180 days. It is used only to respect that choice. A visit does not extend it. We ask again after expiry or a material change to this notice.
Only after acceptance, Google's _ga and _ga_* cookies distinguish browsers and sessions. We configure them for this website's hostname with a 180-day lifetime and without extending that lifetime on visits. Browser controls can shorten their life.
After acceptance, ralyo.marketing.first stores the first consented source, medium, campaign and referring origin for up to 90 days. It does not mean your first-ever visit. ralyo.marketing.session stores the first consented landing information for the current browser-tab session. Closing that session ends its storage. Expired local-storage entries are removed when the site next checks them; you can clear browser storage earlier.
Open Analytics preferences in the footer to reject analytics or withdraw your consent at any time. Withdrawal stops further analytics collection by our adapter and removes its attribution entries and accessible Google Analytics cookies. It cannot undo requests already sent. You can also clear cookies and local storage in your browser.
Service providers and international processing
We use Amazon Web Services for website delivery and log storage, and Google for optional analytics. Access is limited to the people and tools authorised to operate the site and analyse its reports. We do not sell website visitor information.
Our AWS log storage is in Ireland. CloudFront delivers pages through a global network, so delivery processing is not limited to Ireland. Google Analytics also processes information internationally, including in the United States. The providers' data-processing terms describe their safeguards for international transfers, including contractual safeguards where applicable. You can contact us for information about the safeguards applying to your data.
Your rights and contacting us
Depending on the circumstances, you can ask to access, correct or delete your personal information, restrict its use or receive a portable copy. You can object to processing based on legitimate interests and withdraw analytics consent at any time. Withdrawal does not affect the lawfulness of processing before it. We do not make decisions with legal or similarly significant effects about you using website analytics.
Email privacy@ralyo.uk to make a request or raise a concern. We normally respond within one month. We may need enough information to locate the relevant records and verify your request; we do not ask you to identify yourself simply to browse this website. You can also complain to the UK Information Commissioner's Office.
If you email us, we use your email address and message to answer your enquiry, based on our legitimate interest in responding. We keep correspondence only as long as needed to resolve the enquiry and meet any applicable record-keeping or legal obligations.
We will update this notice when the website's data use changes and seek fresh consent where needed.