Last updated 15 October 2026

Privacy notice

This notice explains what personal data DialedRide KineMetric collects, why, where it is stored, how long it is kept, and your rights. It covers practitioners who use the workspace, riders who use a clinic's upload link, and visitors to this website.

Who we are

DialedRide KineMetric is run by John Gould, trading as DialedRide, in the United Kingdom. For anything about your personal data, email support@dialedride.co.uk.

Local workspace records and analysis

Rider records, ride files, imported documents, reports and archives that a practitioner creates in the workspace are stored in that practitioner's browser, and workspace analysis runs there. Optional rider uploads, intake forms and published reports use our hosted services, as described below. Account access and billing use separate hosted services.

The practitioner or clinic is responsible for these client records as the data controller. They must provide their own privacy information explaining the advice being provided, the information needed, the lawful basis for using it, any additional condition for health information, who it is shared with, how long it is kept and how clients can exercise their rights. Acknowledging an evidence-use notice is separate from consenting to the use of personal or health information.

What we collect and why

Practitioner accounts and billing

What: your email address, sign-in details, access and subscription status, a record of which version of the Terms of Use you accepted and when, and a log of administrative changes to your access.
Why: to give you access to the workspace, manage your subscription, and keep evidence of the terms you agreed to.
Lawful basis: performing our contract with you, and our legitimate interest in keeping records of access and agreement.
Payments are processed by Stripe. We do not receive your full card details.
Sign-in codes and invitations are emailed through Fastmail.

Riders using a clinic's upload link

When you send a ride file or intake form through a clinic's upload link, the clinic is responsible for your data (the controller) and we handle it on the clinic's behalf (as processor). Contact your clinic first about how they use your data.

What: the ride file and its recording, the note you add, and any intake form, which can include your name, contact details and health-related information you choose to give.
Why: to pass it to your clinic and return any report they publish to you.
Upload links use a short client code, not your name.

Website visitors

Server logs: our website host, 123 Reg, records visitors' IP addresses and the pages requested.
Abuse protection: requests to the rider upload service are counted per network, using a scrambled (hashed) form of the IP address, to stop automated guessing of upload links.
Lawful basis: our legitimate interest in keeping the service secure and available.
Browser storage: the workspace uses your browser's local storage for things it needs to work, such as keeping you signed in, remembering that you accepted the terms, and holding your workspace data. We do not use advertising or analytics cookies or trackers.

Where your data is stored

Our database and file storage run on Google Cloud (Firebase) in London, United Kingdom. That covers rider uploads, intake forms, reports and account records.
Sign-in (Firebase Authentication), Stripe and Fastmail may process data outside the UK. Where they do, they rely on safeguards recognised under UK data protection law.

How long we keep it

Local workspace client records: the practitioner must keep personal information only for as long as needed to provide the agreed advice, review that need, and securely delete it when no longer needed, including copies they hold in exports and backups. Any legal requirement to keep particular records for longer must be explained in their own privacy notice. Workspace records do not expire automatically; the practitioner is responsible for removing them. The hosted-service periods below do not delete local workspace records or downloaded copies.
Rider uploads and intake forms: deleted when the practitioner imports them into their workspace, or automatically 14 days after they arrive if they are never imported.
Upload status records: after import we keep only the upload's identifiers, file name, status and dates, deleted 14 days after import.
Reports published to a rider: deleted, with their status record, 14 days after publication.
Abuse-protection records: cover one hour and are deleted automatically, usually within a day.
Practitioner accounts: kept while your access continues. When your account is deleted, we delete your account records, your sign-in account, and any clinic you own together with its upload links, uploads, intake forms and reports.
Records we keep after an account is deleted: the record of which Terms of Use you accepted and when, for 6 years (the period in which a contract claim can be made); entries in our administrator audit log, for 2 years from when they were written; and billing records, for as long as the law requires.
Sign-in codes: stop working after 10 minutes and are deleted within about a day.
Server logs are kept by 123 Reg under its own retention policy.

Your rights

Under UK data protection law you can ask us for a copy of your personal data, and ask us to correct it, delete it, restrict or object to how we use it, or give it to you in a portable format. Email support@dialedride.co.uk. If you are a rider, we will pass your request to your clinic, which is responsible for your data.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this notice

We will update this notice when how we handle personal data changes, and change the date at the top.