What we do with your export

Bound makes a printed book from a copy of your Strava data that you give us. This page says what we hold, for how long, and who sees it. It is written to be read; the legal bits are at the end.

What is in a Strava export

The zip Strava gives you contains everything on your account: every activity with its GPS track, your photos, your profile, followers, comments, clubs, and some device and health fields (heart rate, weight, if you recorded them). We only read the parts the book needs: activities.csv, the GPS files in activities/, the photos in media/, and your name from profile.csv. The rest sits in the zip untouched until the zip is deleted.

How long we keep things

Your Strava export and generated files (the upload, the extracted export, your photos, the book and cover PDFs and the page images): deleted 30 days after your book is dispatched, or 30 days after upload if you never order. Deletion is automatic. A reprint after that needs a new upload.
Order record (name, email, delivery address, what was ordered, page count, status history): kept for 6 years, which is what UK tax rules require for sales records.
Payment card details: never reach us. Stripe handles payment and holds those under its own policy.

Location data

Your GPS tracks are personal data: they show where you start and finish, which is usually home. We use them for one thing, drawing the route on the page, and the printed book shows them at the zoom Strava shows them. If you want a start point hidden, leave that activity out in setup or edit the activity in Strava before exporting. Tracks are not used for anything else, not aggregated, not shared, and are deleted with the export. Maps are drawn from map tiles served by a third-party tile provider; when tiles are used, the tile server sees the areas requested but not your identity.

Photos

Photos in the export are printed where you took them. They are resized for print and deleted with the export. We do not look at them beyond the page check before printing, and we do not use them for anything else.

Who sees your data

Us. A person checks every page before it is printed, so someone at Bound will have seen your book.
The printer. Your book is printed and shipped by a third-party print partner; your name and delivery address are shared with them to fulfil your order, along with the book PDFs. They do not receive the export.
Stripe for payment, our email provider for order emails, and our hosting provider where the files are stored (UK or EU region).
No one else. We do not sell or share data, and we do not use your data to train anything.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it (which we will do, except for the sales record we are required to keep). Email hello@boundbooks.uk. If you are not happy with how we handle it, you can complain to the ICO at ico.org.uk.

The legal bits

Bound is a trading name of John White, a sole trader, who is the data controller. Contact: hello@boundbooks.uk. The lawful basis for processing your export is the contract to make your book (UK GDPR Article 6(1)(b)); for the sales record, legal obligation; for emails about your order, the contract. Your export may contain health-related data, such as heart rate and weight. We use heart rate only to print it in your book, and only if you choose to show it. We do not use weight. Calories are treated the same way: printed only if you choose to show them, and not used for anything else. As these fields may be present in the file, uploading it counts as your explicit consent for us to hold the file for the period above. Cookies: one, to remember a gift code you have entered, for 7 days. No analytics cookies.