Template for review. Have a solicitor check before you rely on it.
Legal

Privacy policy

This policy explains how we collect, use and protect your personal data when you use our website or buy from us, in line with UK GDPR and the Data Protection Act 2018.

Last updated: 14 July 2026

Who we are

This website is operated by [confirm: registered company name] (we, us, our), company number [confirm: company number], registered office [confirm: registered office address]. We are the data controller for the personal data we hold about you. Our ICO registration number is [confirm: ICO registration number].

How to contact us about privacy

For any privacy question, or to use your rights, email [confirm: contact email]. Our data protection contact is [confirm: data protection contact name and email].

What data we collect

  • Contact details such as your name, email, phone number and address.
  • Order and payment details. We do not store your full card number; payments are handled by our payment providers.
  • Delivery information needed to get your bike to you.
  • Messages and records of your contact with us.
  • Technical data such as your IP address, device and browser, and cookie data (see our cookie policy).

How we use your data, and our lawful bases

Under UK GDPR we only use your data where we have a lawful basis to do so:

  • To process and deliver your order and provide customer service (to perform our contract with you).
  • To take payment and manage returns, refunds and warranty claims (contract, and legal obligation).
  • To meet our legal, tax and accounting duties (legal obligation).
  • To send marketing where you have agreed to receive it (consent).
  • To keep our website secure and to improve it (our legitimate interests).

Marketing

We only send marketing emails if you have opted in. You can unsubscribe at any time using the link in any email, or by contacting us.

Who we share your data with

We share your data only where it is needed, with payment providers, delivery partners, IT and hosting providers, and professional advisers, and with authorities where the law requires it. [confirm: your specific processors and third parties]. We do not sell your personal data.

Sending data outside the UK

Where a provider is based outside the UK, we make sure appropriate safeguards are in place, such as UK approved standard contractual clauses or an adequacy decision. [confirm: whether any transfers happen and the safeguards used].

How long we keep your data

We keep personal data only as long as we need it for the purposes above and to meet legal, tax and accounting requirements. Order records are usually kept for six years. [confirm: your specific retention periods].

Your rights

Under UK GDPR you have the right to:

  • Ask for a copy of the data we hold about you.
  • Ask us to correct data that is wrong or incomplete.
  • Ask us to delete your data in certain cases.
  • Ask us to restrict or object to how we use your data.
  • Ask us to transfer your data to another provider.
  • Withdraw your consent at any time where we rely on consent.

To use any of these rights, contact us. We will respond within one month.

Cookies

We use cookies and similar technologies as described in our cookie policy.

Keeping your data secure

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

Complaints

If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed.