Privacy Policy

1. Introduction 

This privacy and cookie policy (“Policy”) describes how Life Cycle (“Company”, “we” and “our”) collects, uses and shares personal data when using our services, including our website: www.lifecycle.org.uk (the “Site”). Please read the following information carefully to understand our views and practices regarding your personal data and how we will treat it. We may modify this Policy from time to time. Please check the date at the bottom of this Policy to see when it was last updated. 

2. Purposes of processing 

2.1. What data do we collect?

Life Cycle collects detailed information about individuals and organisations that sign up for our services, purchase our products or support our work. If you provide us with information about other people (e.g. emergency contact details) or organisations (e.g. to request cycle parking), it is your responsibility to let them know about us storing and processing their information in accordance with this policy and ensure they are happy for you to share their data with us. Life Cycle relies on users to say if the information is incorrect or out of date and if any alterations need to be made.

2.2. What is personal data?

Some information we collect about you is personal data. As used in this Policy, “personal data” is as defined in the UK General Data Protection Regulation and any successor or related data protection and privacy legislation (the “UK GDPR”). Personal data includes any information which, either alone or in combination with other information we hold about you, identifies you as an individual. This includes your name, postal address, email address and telephone number.

2.3. Why do we need your personal data?

We will only process your personal data in accordance with applicable data protection and privacy laws. We need certain personal data in order to provide you with access to our Site and our services - or for our volunteer, employee or freelance worker recruitment process. If you register your details on our website, over the phone or in person, you will be asked to provide this information to us. Some of our services require you to provide information in this way in order for us to deliver them.

Once you have provided us with your data, it will be processed in line with the legal basis outlined in this Policy. If you have any questions about the use of your data, please contact the Life Cycle team. We will always do our best to accommodate your requests in line with the UK GDPR and applicable data protection law.

3. Collecting your personal data

We collect personal data in various different ways as set out below:

3.1. Information you give us

This includes personal data:

  • You provide when you register to use our Site, our services or speak to a Life Cycle member of staff, volunteer, associate or partner. This information includes your‎ name, email address and telephone number. In some cases you will be asked to provide your postal address and possibly provide demographic information (such as your gender or title);
  • That may be contained in a video, photograph, comment, news article, or other content or submission you send via email or social media, or that a Life Cycle member of staff carries out on your behalf (with permission);
  • That may be contained in a video, photograph or other media, taken by a Life Cycle member of staff, for example on one of our rides or at a Life Cycle event (this will only ever be taken and shared with your consent); 
  • You provide when signing up to an event or training, such as your name and contact details; 
  • You provide when you make an enquiry on our Site, over the phone, or directly with a Life Cycle member of staff; 
  • You provide when you sign up to our newsletter or other mailing lists through our Site; and 
  • You provide when you correspond with us by phone, email or otherwise. 

We may also give you the option to opt-in to specific mailing lists or other general communications from Life Cycle. You can unsubscribe or update your communication preferences at any time through our communications preferences page or by clicking the link at the bottom of an email from us.  

3.2. Information from Social Networking Sites

Our Site includes interfaces that allow you to connect with social networking sites (each an “SNS”). We post content on SNS’s such as YouTube, Instagram and Facebook and advise you to check their privacy policies. If you connect to an SNS through our Site or Life Cycle Privacy Policy Page 3 of 17 other services, we will be able to access, use and store the information that you have agreed the SNS could provide to us based on your settings on that SNS. We will access, use and store that information in accordance with this Policy. You can revoke our access to the information you provide in this way at any time by amending the appropriate settings from within your account settings on the applicable SNS.

We use programs such as Buffer to monitor our SNS activity. If you interact with us on one of the SNS’s listed above, your public social media account information (such as your name, and the things you ‘like’) will be logged by these programs. They allow us to monitor individuals interacting with us and we use this information to improve our services. 

3.3. Information we get from others

We may also get information about you from other sources, for example, if you have agreed to allow a third party to share information with us. We may add this to information to our internal CRM database system. When using these channels to communicate with Life Cycle, it is your responsibility to read the other relevant organisation’s privacy policy. We are not responsible for such organisations' use of your personal data.

4. Using your personal data

We use your personal data as follows:

  • To operate, maintain, and improve our Site, products, and services;
  • To respond to your comments and questions and to provide customer service;
  • To provide users with training, advice and support, including news, information and opportunities;
  • To send you information including technical notices, updates, security alerts, and support and administrative messages;
  • To send you administrative information regarding rides or training courses you have signed up to, and other correspondence regarding our business dealings with you;
  • With your consent, to link you with other organisations (such as Cytech, The Bikeability Trust, Travelwest and their funded travel offers) if this is beneficial;
  • To link or combine user information with other personal data;
  • As we believe necessary or appropriate to comply with applicable laws, lawful requests and legal processes, including to respond to requests from public and government authorities, to enforce our Policy, and to protect our rights, privacy, safety or property, and/or that of yours or others;
  • To enhance and improve the services we provide; Life Cycle Privacy Policy Page 4 of 17
  • To analyse who accesses our services and any trends which might occur, for monitoring and future planning purposes;
  • To analyse our impact and how well we are reaching our aims;
  • To send you promotional emails or messages about upcoming activities, news, fundraising, volunteering opportunities and other updates relating to Life Cycle's charitable purposes. Where you have expressed interest in or offered support to Life Cycle's charitable purposes (e.g. by donating or registering for an activity), we may send such communications under the charitable purposes soft opt-in introduced by the Data (Use and Access) Act 2025, provided you were given a clear opportunity to opt out when your details were collected. For commercial promotions, such as products or paid services, we will rely on your consent or the commercial soft opt-in where applicable. You can opt out of any marketing communications at any time by using the unsubscribe link in any email or by contacting us directly.
  • As described in the “Sharing of your Personal Data” section below. This may include use of cookies and similar technologies as described in the “Cookies” section below.

5. Sharing your personal data

We share your personal data as follows:

  • With our third party service providers, who provide services such as payment processing, information technology and training accreditation. These include: Microsoft (who provide our email and office systems), Webflow, Airtable, Survey Monkey, Quickbooks and our contracted IT support agencies They are only permitted to use your personal data to the extent necessary to enable them to provide their services to us and are required to follow our express instructions and to comply with appropriate security measures to protect your personal data;
  • If and when we sell or transfer all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding;
  • As we believe necessary or appropriate to: comply with applicable laws; to comply with lawful requests and legal processes, including to respond to requests from public and government authorities to meet national security or law enforcement requirements; to enforce our Policy; and to protect our rights, privacy, safety or property, and/or that of yours or others; 
  • When we are required to share your data with third parties on the basis that we are jointly undertaking or being commissioned to fulfil a contract with them; and
  • With other third parties, where you have provided your consent for us to do so (unless we rely on a legal basis for sharing data under the GDPR other than consent, as outlined elsewhere in this policy). 

Here are some examples of third parties that Life Cycle might share your data with (note: these may change as contracts, funding and partnerships change):

5.1. Instructors

If you attend an event, course or training session we will share your personal details with the instructor delivering the activity, including (if relevant) details of additional needs and/or emergency contact information.

5.2. Accreditation bodies

If you are attending an accredited course, we will share your personal data with the relevant accrediting body. This could include be, for example, Cytech, 1st4Sport or The Bikeability Trust.

5.3. Funders

If you receive a free or discounted service, we may share limited personal details with the organisation funding or subsidising the activity or product to prove your eligibility and/or attendance. This could include: Wheels to Work, Bristol City Council, Derby City Council, or Charitable Funders.

5.4. Delivery partners

We may share limited personal data (for example: DBS number, phone number, address, details of any additional needs) with our delivery partners for safeguarding reasons. Our delivery partners include schools, external training organisations, volunteers, taxi companies, delivery companies or couriers.

5.5. Financial providers or regulators

If you work for us, claim volunteer expenses or make a Gift Aid or regular donation we may share your personal data with our bank, your pension provider and/or HMRC. We may also need to share your personal data with authorised external individuals as part of an independent evaluation or audit required for legal purposes.

5.6. Anonymous data 

When we use the term “anonymous data,” we are referring to data and information that does not permit you to be identified or identifiable, either alone or when combined with any other information available to a third party. 

We may create anonymous data from the personal data we receive about you and other individuals whose personal data we collect. Anonymous data might include monitoring and evaluation data (including diversity and equality forms), analytics information and information collected by us using cookies. We make personal data into anonymous data by excluding information (such as your name) that makes data personally identifiable to you.

5.7. Third Party Sites

Our Site and services may contain links to third-party websites and features. This Policy does not cover the privacy practices of such third parties. These third parties have their own privacy policies and we do not accept any responsibility or liability for their websites, features or policies. We recommend you read their privacy policies before submitting any data to them.

5.8. Interacting with Life Cycle online

You may share personal data with us when you submit content to our social media pages, such as a comment on a post, photo or video. Please note that any information you post or disclose on our social media pages in this way will become public information, and will be available to others who access these platforms and to the general public. We urge you to be very careful when deciding to disclose your personal data, or any other information, on social media in this way. Such personal data and other information will not be private or confidential once it is published on our social media pages.

5.9. Feedback

If you provide feedback to us, about our Site or services, we may use and disclose such feedback, without your personal data attached, on our Site, in our fundraising activities, to our funders or in advertisements.

6. Location of data 

Personal data held by Life Cycle is typically stored on secure servers located in the United Kingdom and/or the European Union. Where data is stored or processed outside the UK, we will only transfer it if the level of protection in the destination country is not materially lower than that provided under UK data protection law. This is the standard required by the Data (Use and Access) Act 2025.

In practice, international transfers outside the UK will only take place where one of the following conditions is met:

• The destination country or territory has been granted adequacy status by the UK Secretary of State, meaning the UK Government has determined that it provides a comparable level of data protection;

• Appropriate safeguards are in place, such as a UK International Data Transfer Agreement (IDTA) or equivalent standard contractual clauses approved for use under UK law; or

• A recognised exception under applicable data protection law applies in the circumstances.

Where we rely on safeguards such as an IDTA, we ensure that any transfer risk assessment we carry out applies the statutory "not materially lower" test. We keep our international transfer arrangements under review and update them as required when the nature or circumstances of any transfer change.

For reference, the European Commission renewed the UK's adequacy decision in December 2025, meaning that transfers of personal data from the EU to the UK may continue under the existing EU adequacy framework until at least December 2031.

7. Accessibility of data

Access to personal data is limited to employees or contractors who need access to it to perform their roles.

Life Cycle has an internal IT Security Policy which requires staff and contractors to follow all applicable laws and regulations, including to not share information outside of Life Cycle unless required to do so by law.

8. Security

We seek to use reasonable organisational, technical and administrative measures to protect personal data within our organisation, in compliance with applicable laws and regulations. Our IT support contractor uses an Information Security Management System (ISMS) that is ISO 27001 accredited, and as such implements and maintains technical and organisational measures to ensure ongoing confidentiality, integrity, availability and resilience of our systems.

9. Data retention

We will only retain your personal data for a maximum of 36 months after your last interaction with our Site, access to our services or other contact with Life Cycle, unless a longer retention period is required or permitted by law (for example for regulatory purposes). However, it is common for service or funding contracts to require data relating to their delivery to be retained by the provider for a number of years after the contract has been completed. Therefore, Life Cycle may retain some information for archival purposes and historical analysis for more than 36 months in order to comply with such requirements. 

10. Policy on children

Whilst much of our work is with adults, Life Cycle provides cycle training to children and our Youth Project caters for children and young people. We collect some personal data on the young people we work with, and this data is either submitted by a consenting parent or carer, or (at the Youth Project) collected by our youth workers in order to provide a safe and effective service to the children we work with.

Our Youth Project records details of a child’s progress during their time with us so we can evaluate the difference we are making to their life. This information is only shared with funders and is always completely anonymised first. All data is held and destroyed securely and is only accessible to the relevant members of Life Cycle staff.

We do not market our services to, or directly communicate with, anyone under 18. Where we provide or develop online services that children are likely to access, we design them with children's needs explicitly in mind, in line with the Data (Use and Access) Act 2025 and the ICO's Age Appropriate Design Code.

Special category personal data relevant to the safe delivery of our services may be collected by our partner organisations (such as schools, adventure playgrounds and youth organisations) with parental consent. This is only shared with Life Cycle to the extent it is completely necessary. You can ask to access our partners’ privacy policy when they ask you for this data.

11. Special category personal data 

Special category personal data includes information related to racial or ethnic origin, political opinions, religion or other beliefs and health. Special category personal data, as well as information about criminal convictions and offences, is more heavily protected by data protection laws. Providing special category or criminal conviction personal data is never a requirement to use our Site or services. If you choose to provide us with this information, you must make sure you are happy for us to use it in accordance with this Policy. If you do not want us to use this type of personal data, you must not submit such information to our Site or services. 

In some instances, we may request special category personal data from you, which is not mandatory to provide. This is to monitor our Site and services and ensure they are accessible to all demographics and we do this on the basis that it is in the public interest to do so to monitor equality of opportunity. Volunteers, freelancers and staff that apply to work with children or vulnerable adults will need to submit special category personal data for vetting and safeguarding purposes. This is to ensure that we can comply with legal obligations in relation to safeguarding.

12. Bank details

If you are purchasing a product or service from us over the phone with a credit or debit card, a member of Life Cycle staff will take your card details and enter it into a password protected Sage Pay portal. We do not write down or store these details on our systems or on paper. When you purchase a product or service via our website, we do not retain any records of your card details.

13. Legal basis for processing

Data protection laws mean that each use we make of personal information must have a “legal basis”. The legal bases are set out in the UK General Data Protection Regulation (UK GDPR), as updated from time to time, together with other applicable data protection laws. Life Cycle processes data under the following bases:

Specific consent

Consent is where we ask you if we can use your information in a certain way, and you agree to this. Where we use your information for a purpose based on consent, you have the right to withdraw consent for any future use of your information for this purpose at any time.

For electronic marketing communications specifically, we may in some circumstances rely on the charitable purposes soft opt-in introduced by the Data (Use and Access) Act 2025 rather than consent. This applies where you have expressed interest in or offered support to Life Cycle's charitable purposes - for example by making a donation, signing up for one of our programmes, or registering to hear from us - and where you were given a clear opportunity to opt out at that point. Communications sent on this basis will solely further Life Cycle's charitable purposes. Where we send commercial marketing (such as promotions for products or paid services), we will rely on your consent or the commercial soft opt-in where applicable, and these will always be kept separate from charitable communications.

Withdrawing your consent does not affect any processing we carry out on a different lawful basis. For example, where we also hold your data to fulfil a contract or to comply with a legal obligation, we may continue to process it for those purposes even after consent is withdrawn.

Legal obligation

We have a basis to use your personal information where we need to do so to comply with one of our legal or regulatory obligations.  For example, in some cases we may need to share your information with our various regulators such as the Charity Commission, HMRC or to use information we collect about you for our financial records.

Performance of a contract, or to take steps at your request to prepare for entry into a contract

We have a basis to use your personal information where we are entering into a contract with you or performing our obligations under that contract.  Examples of this would be if you are buying something from us (for instance a refurbished bicycle, a Dr Bike session or some bike mechanics training), applying to work/volunteer with us, or signing up to attend cycle training or one of our group rides.

Vital interests

We have a basis to use your personal information where it is necessary for us to protect your or someone else's vital interests.   For instance, if there were to be an emergency impacting individuals at one of our events, or a safeguarding issue which required us to contact people unexpectedly or share their information with emergency services.

Legitimate interests

We have a basis to use your personal information if it is reasonably necessary for us (or others) to do so and in our/their “legitimate interests” (provided that what the information is used for is fair and does not unduly impact your rights). We consider our legitimate interests to include all of the day-to-day activities Life Cycle carries out with personal information.

Recognised legitimate interests

In some limited circumstances, we may process personal data where it is necessary for a “recognised legitimate interest” set out in law. These are specific situations where the law allows the use of personal data without the need to carry out a balancing test. Where we rely on this basis, we will ensure that the processing is necessary and proportionate, and that appropriate safeguards are in place.

Some examples not mentioned under the other bases above, where we are relying on legitimate interests include:

We only rely on legitimate interests where we consider that any potential impact on you (positive and negative), how intrusive it is from a privacy perspective and your rights under data protection laws do not override our (or others’) interests in us using your information in this way.

When we use special category personal information (please see the “Special Category Personal Data” section above), we require an additional legal basis to do so under data protection laws, so we will either do so on the basis of your explicit consent or another route available to us at law for using this type of information (for example if you have made the information manifestly public, we need to process it for employment, social security or social protection law purposes, your vital interests, or, in some cases, if it is in the public interest for us to do so).

14. Automated decision-making

Automated decision-making (ADM) refers to decisions made about individuals using solely automated processes, without meaningful human involvement.

Life Cycle does not currently use automated processes to make significant decisions about you. If this changes, we will update this Policy and, where required by law, seek your explicit consent or identify another appropriate lawful basis before doing so.

Where any automated processing is introduced that produces a significant effect on an individual - particularly where it involves special category personal data such as health information - you will have the right to:

• Receive meaningful information about how the decision was reached;

• Make representations about the decision;

• Request that the decision is reviewed by a person; and

• Challenge the outcome.

  • use of personal information when we are monitoring use of our website for technical purposes;
  • use of personal information to administer, review and keep an internal record of the people we work with, including supporters, volunteers and researchers;
  • analysis and profiling of our supporters using personal information we already hold; and
  • sharing of personal information between relevant staff members, volunteers and freelance workers within Life Cycle and between Life Cycle’s delivery partners.

15. Your rights

15.1. Object 

You have the right to object to Life Cycle’s processing of your data unless:

  • The data has been given with your consent (in which case you can withdraw consent);
  • It has been collected or processed for the purposes of fulfilling a contract with you;  
  • If we have collected it because we have a legal obligation to do so;
  • It has been collected in order to protect life or health.

You should note that we will not always be required to stop processing your personal data if you object. If we are not, we will explain why to you when we respond to your request.

15.2. Opt-out 

You may contact us at any time to opt-out of direct marketing communications.

15.3. Access 

You may access the personal data we hold about you at any time by contacting us using the details in the "Contact Us" section below. We will respond to your request in line with applicable law.

In responding to your request, we will conduct a search that is reasonable and proportionate in the circumstances - taking into account the nature of your request, the systems and records likely to hold the relevant data, and the resources reasonably available to us. We may contact you to ask for clarification about the scope of your request before or during our search, in which case the response period will be paused until we receive your reply (see "How to exercise your data protection rights" below).

15.4. Amend

You can contact us to update or correct any inaccuracies in your personal data. We periodically remind individuals whose data we hold to review and correct the information we hold on them, and it is their responsibility to maintain the accuracy of information we hold about them or tell us about any issues. We are not liable for any damages caused by the information you get from our Site or any connections made to it. 

15.5. Move

Your personal data is portable, and you have the right and flexibility to receive an electronic copy of the personal data that you have provided to us and to move that personal data to another service provider if you wish, provided that the personal data is processed for the purposes of entering into or fulfilling a contract with you, or on the basis of your consent. To do this please contact us, stating what information you would like to transport and who to. 

15.6. Erase and forget

You have the right to request we erase data you no longer want us to hold in certain circumstances. We will not always be obliged to comply and erasure may mean you can no longer access our services, and it may impact your use of our Site. In particular, we may need to retain certain information for legal, recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion. In most cases we will be able to anonymise your record, remove any extraneous personal data, and keep a record that an anonymous individual has undertaken certain activities or transactions with Life Cycle.

15.7. General

There are some exemptions to the rights above, which means that we do not always have to comply with them, or we may be able to exclude certain information from the response to the request. For example, we can withhold information requested as part of an access request if releasing the information would prejudice an ongoing criminal investigation. If we are relying on an exemption, we will make this clear when we respond to your request.

16. How to exercise your data protection rights

If you wish to exercise any of the rights detailed above, please contact us using the details in the “Contact Us” section below. In your request, please make clear the following:  

  1. What personal data is concerned;  
  2. Which of the above rights you would like to enforce.  

You do not need to use formal language or refer to the UK GDPR by name for your request to be valid. We may need to verify your identity before acting on your request.

16.1. Reasonable and proportionate searches

For subject access requests, we are required under the Data (Use and Access) Act 2025 to conduct a search that is reasonable and proportionate in the circumstances. We will not interpret your request as requiring us to search every system or record regardless of relevance, but we will take reasonable steps to locate the personal data most likely to be responsive to what you have asked for.

16.2. Stopping the clock

Where we need further information from you to clarify the scope of your request or confirm your identity, we may pause the one-month response period until we receive that information. We will let you know promptly if we are doing this and why. The pause ends on the day we receive your response, after which the remaining time to respond resumes. We will only request clarification where it is genuinely necessary.

We will otherwise aim to respond within one month of receiving your request.

17. Cookies 

17.1. What are cookies?

Cookies are small data files stored on the hard drive of your computer or mobile device by a website. We use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer or mobile device until you delete them) to provide you with a more personal and interactive experience on our Site. 

17.2. Cookies we use 

We use two broad categories of cookies:

• First-party cookies, served directly by us to your computer or mobile device; and

• Third-party cookies, served by service providers on our Site.

Some of these cookies are essential to ensure our Site works as expected. These cookies do not require your consent. We may also use cookies to collect information about how users access and use our Site in order to improve our services.

Where these cookies are used solely for statistical or analytical purposes:

• We will provide clear information about how they are used; and

• You will be given a simple and free way to opt out.

Our Site uses the following types of cookies for the purposes set out below:

17.3. Essential cookies

These cookies are essential to provide you with services available through our Site and to enable you to use some of its features. Without these cookies, some parts of the Site may not function properly.

17.4. Functionality cookies

These cookies allow our Site to remember choices you make, such as language preferences or login details, to provide a more personalised experience.

17.5. Analytics and performance cookies

These cookies are used to collect information about how users interact with our Site. This information is aggregated and does not directly identify individuals. We use this information to improve how our Site and services operate. Where these cookies are used solely for statistical purposes, you can opt out at any time using the options available on our Site or through your browser settings.

We use Google Analytics and Tag Manager to monitor this website activity and improve our services. You can find out more about how Google protects your data here. You also have the right to object to Google Analytics processing your data and can prevent this by downloading the Google Analytics Opt-out browser Add-on.

17.6. Social Media Cookies

These cookies are used when you engage with our content through social networking websites such as Facebook or Instagram. The social network will record you have done this.

17.7. Disabling cookies

You can remove or reject cookies via your browser settings. You can also opt out of certain cookies using the options provided on our Site. If you do not accept or choose to disable cookies, some features of our Site may not function as intended.

Further information about cookies, including how to manage and delete them, is available at www.allaboutcookies.org.

18. Pixel tags 

We may use pixel tags (which are also known as web beacons and clear GIFs) to track mail openings of users who are signed up to receive information via email. Unlike cookies, which are stored on the hard drive of your computer or mobile device by a website, pixel tags are embedded invisibly on webpages. Any data collected through pixel tags is not used to directly identify you as an individual, and we do not use it for any purpose beyond understanding how our email communications are engaging our audience.

19. Complaints 

You have a statutory right under the Data (Use and Access) Act 2025 to raise a complaint directly with us if you believe your personal data has been processed unlawfully or in a way that does not comply with applicable data protection law. You do not need to go to the ICO first. You can submit a complaint to us by any of the following means:

• Email: hello@lifecycle.org.uk

• Post: Life Cycle, The Create Centre, Smeaton Road, Bristol, BS1 6XN

• Telephone: 0117 353 4580

• In person: at any of our offices or workshops during normal working hours

• Via social media: through our published social media channels

We accept complaints however they are submitted and do not require any particular format.

When we receive a data protection complaint, we will:

• Acknowledge receipt within 30 days of the complaint being received;

• Investigate the issues raised without undue delay, to a depth that is reasonable and proportionate to the nature and complexity of the complaint;

• Keep you informed of progress and any anticipated delays during our investigation;

• Provide our response and the outcome of our investigation without undue delay.

Where a complaint is made by a third party on your behalf, we will verify their authority to act for you before taking any action or sharing information. If you remain dissatisfied with our response, or believe we have not handled your complaint appropriately, you have the right to raise your concern with the Information Commissioner's Office (ICO) at ico.org.uk/concerns or by calling 0303 123 1113.

We keep a record of all data protection complaints and how they are resolved, in line with our legal obligations. For details of our wider complaints handling process - including service complaints and internal escalation routes - please see our Complaints Policy.

20. Contact us

• Email: hello@lifecycle.org.uk

• Post: Life Cycle, The Create Centre, Smeaton Road, Bristol, BS1 6XN

• Telephone: 0117 353 4580

21. Approval and review dates

This policy will be reviewed every three years, or sooner if affected by regulatory changes:

Last updated: 15th June 2026