Privacy Statement and Cookies Policy
This privacy statement sets out how Henley Women’s Regatta (HWR) Ltd collects, uses and protects your personal information while browsing or using our websites hwr.org.uk and henleywomensregatta.org.
Henley Women’s Regatta (HWR) Ltd is registered in England under Company Registration Number 9568093. HWR is a data controller for the purposes of any UK Data Protection Act, the General Data Protection Regulation, and all associated laws applicable in England and Wales, including the Privacy and Electronic Communications Regulations (Data Protection Law).
HWR is committed to ensuring that your privacy is protected. Should we ask you to provide information by which you can be identified when using our websites, then you can be assured that it will only be used in accordance with this privacy statement.
Henley Women’s Regatta (HWR) Ltd may change this policy from time to time by updating this page. You should check this page periodically to ensure that you are happy with any changes.
What data we collect
We may collect the following information:
- Name and contact details including email address.
- Product choices
- Demographic information such as preferences and interests.
- Other information relevant to customer surveys.
- Photos and video images, which may include panning shots of people in the regatta enclosure and in public areas.
Please note that all credit and debit card transactions are handled by our payment processor (Stripe), so we do not hold your card details.
How we collect this data
We collect your data in the following ways:
- When you actively provide us with that data. This includes but is not limited to contacting us directly, making an entry to HWR, applying for or purchasing products or services (including tickets), volunteering, completing a survey, and doing business with us.
- When you use our website/s, we collect anonymous information automatically about your visit. This information, such as demographic data and browsing patterns, is only used in aggregate form, i.e. your individual identity is not revealed. This can involve the use of Cookies. See below for our Cookie Policy.
How we use this data
We collect data from you for the following purposes:
- For the running of HWR including making you aware of services and events directly linked to the regatta
- To service your orders
- To send you newsletters that you have explicitly requested to receive requested or that are part of your Friends of HWR membership
- For market research purposes
- For website analytics purposes.
Your personal information will only be shared within the HWR organisation (including third party contractors) with individuals who have a legitimate need to have sight of it for specific purposes stated above.
We will never sell your data to a third party organisation.
Film and livestream
HWR may be filmed, including by drone cameras, so that video can be broadcast live and made available for later viewing on the internet.
Prior notice of the filming and broadcast is publicly advertised.
No individual is personally identified though athletes may be named in the racing commentary for which prior consent will have been obtained as part of the regatta entry process.
Embedded content from other websites
Pages on our websites may include embedded content (e.g. YouTube videos). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Links to other websites
Our websites may contain links to other websites of interest such as the car parking booking site. Please note that once you have clicked one of these links you will have left our site, and we do not have any control over that third party website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites, which are not governed by this privacy statement, but should publish their own privacy statement.
Controlling your personal information
You have the right to be forgotten or to change your mind about HWR holding your data and can instruct us to delete your records (or update the information as appropriate) by contacting the Chairman of HWR at the address below. Please note that we may have sound and compelling reasons to refuse specific requests to stop processing your data, or to amend or delete it, for example, because it is necessary for a legitimate purpose identified in this privacy statement.
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable if you require a copy of the information we hold on you. Such requests can be made via the address below. We will endeavour to respond to any such written requests as soon as is reasonably practicable and in any event within statutory time-limits, which in the case of requests for access to information is one month.
Security
We are committed to ensuring that your information is secure.
Cookies Policy
What are cookies?
Cookies are small text files that are stored on your device that allow HWR or a third party to distinguish you from other users. Cookies might be used for the following purposes:
- To enable certain functions
- To provide analytics
- To store your preferences
- To enable ad delivery and behavioural advertising.
You can learn more about cookies on the following third party websites:
Types of cookies we use
- Necessary: These enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data. We do not need to ask permission to use necessary cookies.
- Functional: These help to perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
- Analytical: These are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
- Performance: These are used to understand and analyse the key performance indexes of the website, which helps in delivering a better user experience for the visitors.
- Advertisement/Marketing: These are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.
List of cookies used on www.hwr.org.uk
| Cookie Name | Description | Retention Period | Third Party | Type |
| __cf_bm | Cloudflare’s bot products identify and mitigate automated traffic to protect your site from bad bots. Cloudflare places the __cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for the proper functioning of these bot solutions. | 30 minutes | No | Necessary |
| __cfduid | The ‘__cfduid’ cookie is set by the CloudFlare service to identify trusted web traffic. It does not correspond to any user id in the web application, nor does the cookie store any personally identifiable | 5 years | No | Necessary |
| __cflb | When enabling session affinity with Cloudflare Load Balancer, Cloudflare sets a __cflb cookie with a unique value on the first response to the requesting client. Cloudflare routes future requests to the same origin, optimizing network resource usage. In the event of a failover, Cloudflare sets a new __cflb cookie to direct future requests to the failover pool. | 30 minutes | Yes | Necessary |
| __cfruid | Used by the content network, Cloudflare, to identify trusted web traffic. | Session | No | Necessary |
| _cfuvid | The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address. | Session | No | Necessary |
| cf_chl_2 | Used by Cloudflare for the execution of Javascript or Captcha challenges. These cookies are not used for tracking or beyond the scope of the challenge. | session | No | Necessary |
| cf_clearance | Whether a CAPTCHA or Javascript challenge has been solved. | 1 years | No | Necessary |
| AMP_TOKEN | Contains a token code that is used to read out a Client ID from the AMP Client ID Service. By matching this ID with that of Google Analytics, users can be matched when switching between AMP content and non-AMP content. | 1 year | No | Analytics |
| FPAU | Assigns a specific ID to the visitor. This allows the website to determine the number of specific user-visits for analysis and statistics. | session | No | Analytics |
| FPID | Registers statistical data on users’ behaviour on the website. Used for internal analytics by the website operator. | 1 years | No | Analytics |
| FPLC | This FPLC cookie is the cross-domain linker cookie hashed from the FPID cookie. It’s not HttpOnly, which means it can be read with JavaScript. It has a relatively short lifetime, just 20 hours. | 20 hours | No | Analytics |
| __utma | ID used to identify users and sessions | 2 years | No | Analytics |
| __utmb | Used to distinguish new sessions and visits. This cookie is set when the GA.js javascript library is loaded and there is no existing __utmb cookie. The cookie is updated every time data is sent to the Google Analytics server. | 30 minutes | No | Analytics |
| __utmc | Used only with old Urchin versions of Google Analytics and not with GA.js. Was used to distinguish between new sessions and visits at the end of a session. | session | No | Analytics |
| __utmt | Used to monitor number of Google Analytics server requests | 10 minutes | No | Analytics |
| __utmv | Contains custom information set by the web developer through the _setCustomVar method in Google Analytics. This cookie is updated each time new data is sent to the Google Analytics server. | 2 years | Unknown | Analytics |
| __utmx | Used to determine whether a user is included in an A / B or Multivariate test. | 18 months | No | Analytics |
| __utmxx | Used to determine when the A / B or Multivariate test in which the user participates ends | 18 months | No | Analytics |
| __utmz | Contains information about the traffic source or campaign that directed user to the website. The cookie is set when the GA.js javascript is loaded and updated when data is sent to the Google Anaytics server | 6 months | No | Analytics |
| _dc_gtm_ | Used to monitor number of Google Analytics server requests | 1 minute | No | Analytics |
| _ga | ID used to identify users | 1 years | Unknown | Analytics |
| _ga_* | Used to identify and track an individual user session. | 2 years | No | Analytics |
| _gac_ | Contains information related to marketing campaigns of the user. These are shared with Google AdWords / Google Ads when the Google Ads and Google Analytics accounts are linked together. | 90 days | No | Analytics |
| _gat | Used to monitor number of Google Analytics server requests when using Google Tag Manager | 58 seconds | No | Analytics |
| _gat_* | Used to set and get tracking data | 1 hour | No | Analytics |
| _gid | ID used to identify users for 24 hours | 24 hours | No | Analytics |
| DEVICE_INFO | Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. | 180 days | Yes | Marketing |
| GPS | Registers a unique ID on mobile devices to enable tracking based on geographical GPS location. | 1 day | No | Marketing |
| LOGIN_INFO | This cookie is used to play YouTube videos embedded on the website. | 2 years | Yes | Marketing |
| PREF | This cookie stores your preferences and other information, in particular preferred language, how many search results you wish to be shown on your page, and whether or not you wish to have Google’s SafeSearch filter turned on. | 10 years | No | Marketing |
| VISITOR_INFO1_LIVE | Tries to estimate the users’ bandwidth on pages with integrated YouTube videos. Also used for marketing | 6 months | No | Marketing |
| VISITOR_PRIVACY_METADATA | Youtube visitor privacy metadata cookie | 6 months | No | Marketing |
| YSC | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Session | No | Marketing |
List of cookies used on henleywomensregatta.org
| Cookie | Description | Duration | Type |
| ssr-caching | The ssr-caching cookie is set by Wix and indicates how a site was rendered. | less than a minute | Necessary |
| XSRF-TOKEN | This cookie enhances visitor browsing security by preventing cross-site request forgery. | session | Necessary |
| hs | Wix platform sets this cookie for security purposes. | session | Necessary |
| svSession | Wix platform sets this cookie to identify unique visitors and track a visitor’s session on a site. | 1 year 1 month 4 days | Necessary |
| bSession | Wix set this cookie in context with load balancing to improve user experience. | 1 hour | Necessary |
| fedops.logger.sessionId | never | Other | |
| mpaSessionId | session | Other | |
| client-session-bind | session | Other | |
| server-session-bind | session | Other |
Managing cookies
You can control the use of cookies at the browser level. If you choose to reject cookies, you may still use our website, but your ability to use some features or areas of our website may be limited. Most browsers allow you to:
- Block third-party cookies.
- Delete cookies after you close the browser.
- Clear cookies stored on your device.
You can also decline non-necessary cookies via the cookies control panel.
How to contact us
General enquiries regarding this privacy statement, or our use of cookies, should be directed to:
Henley Women’s Regatta, The Old Waterboard House, Icknield Road, Goring, Reading, RG8 0DE or by email to chairman@hwr.org.uk
Revision log
| Date | Changes since previous version |
| 7 May 2026 | Name of payment processor changed |
| 16 September 2025 | Cookie list updated for new hwr.org.uk website |
| 9 May 2025 | Baseline for this Revision log. |
Our partners
