Biking Direct Privacy Policy

This Privacy Policy explains how Biking Direct (“we”, “our”, or “us”) collects, uses, and protects your personal information when you visit or make a purchase from www.bikingdirect.com (the “Site”).

We are committed to protecting your privacy and handling your data fairly, transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal Information We Collect

When you visit our Site, we automatically collect certain information about your device and your interaction with us. This includes details such as your web browser, IP address, time zone, and installed cookies. We also collect information about the pages or products you view, referring websites or search terms, and how you interact with the Site. We call this “Device Information.”

We collect Device Information using:

  • Cookies – data files stored on your device (learn more or disable at www.allaboutcookies.org)
  • Log files – which record IP address, browser type, and usage activity
  • Web beacons, tags, and pixels – to analyse browsing behaviour

When you make or attempt to make a purchase, we also collect Order Information, such as your name, billing and shipping address, payment details, email address, and phone number. Together, Device Information and Order Information form your Personal Information.

2. How We Use Your Personal Information

We use your Personal Information to:

  • Process and fulfil your orders (including payment processing, shipping, and confirmation emails)
  • Communicate with you regarding your order or enquiry
  • Arrange vehicle delivery (using trusted third-party couriers)
  • Screen transactions for fraud or security risks
  • Improve our website performance and customer experience
  • Provide marketing or promotional content, where you have consented

3. Sharing Your Personal Information

We share your Personal Information only where necessary to provide our services. This may include:

  • Payment processors to securely handle transactions
  • Finance lenders and brokers, if you apply for finance (your consent is required to proceed)
  • Couriers and logistics partners for deliveries
  • Analytics providers such as Google Analytics (see Google Privacy Policy and opt-out)

We may also share information to comply with legal obligations, respond to lawful requests, or protect our rights and property.

4. Behavioural Advertising

We may use your information to show relevant advertisements or offers based on your browsing behaviour. You can learn more about how targeted advertising works via the Network Advertising Initiative and opt out at optout.aboutads.info.

5. Data Security and Storage

We store personal data in secure, access-controlled systems and use encryption where appropriate. Data is hosted within the UK or European Economic Area (EEA). If transferred outside the EEA (for example, for cloud hosting or analytics), it is done using legally approved safeguards to ensure equivalent protection under UK GDPR.

Regular security reviews are carried out to ensure data accuracy, protection, and safe handling.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law.

Data Type Retention Period Reason / Legal Basis
Order and payment records 6 years HMRC compliance
Customer account details Duration of account + 6 years after last transaction Contractual / legal record-keeping
Marketing contact data Until consent is withdrawn or 24 months after inactivity Consent-based marketing
Website analytics (e.g. Google Analytics) Up to 26 months Site performance analysis
Employee and HR records 6 years after employment ends Employment law
CCTV footage 30 days Security and crime prevention
Backup data Rolling 12 months (auto-overwritten) Business continuity

After these periods, data is securely deleted or anonymised.

7. Your Rights Under UK GDPR

You have the right to:

  • Access a copy of the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data (“right to be forgotten”)
  • Object to or restrict the processing of your data
  • Withdraw consent for marketing communications
  • Request data portability to another provider

To exercise any of these rights, please contact us at info@bikingdirect.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk.

8. Do Not Track

Please note that we do not alter our Site’s data collection and use practices when a “Do Not Track” signal is received from your browser.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. The most recent version will always be available on this page.

10. Contact Us

For any questions, requests, or complaints about this policy or how your data is handled, please contact us:

Email: info@bikingdirect.com
Address: Unit 4 The Wards, Elgin, IV30 6AA, United Kingdom