Legal & Data Protection

Privacy Policy

Compliant with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 • Last Updated: October 2026

At Cars ‘n’ Bikes (“we”, “us”, or “our”), we respect your personal privacy and are committed to protecting your personal data. This Privacy Policy informs you how we look after your personal data when you visit our website (https://carsnbikes.uk/), purchase bicycles or cycling accessories from our store, or interact with our workshop team, and tells you about your privacy rights under UK law.

1. Data Controller Information

Cars ‘n’ Bikes is the data controller responsible for your personal data collected via this website and our retail operations:

Business Name: Cars ‘n’ Bikes
Physical Address: 67 Main Street, Frodsham, Cheshire, WA6 7DF, United Kingdom
Telephone: +44 1928 731575
Website: https://carsnbikes.uk/

2. Personal Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

  • Identity Data: First name, last name, title.
  • Contact Data: Billing address, delivery address, email address, and telephone numbers.
  • Transaction Data: Details about payments, order references, products purchased, and workshop servicing history. (Note: We do not store full payment card details on our servers; payments are processed securely through PCI-DSS compliant third-party payment gateways).
  • Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
  • Profile Data: Your account username, purchases or orders made by you, and preferences.

3. Lawful Basis for Processing

We only process your personal data when the law allows us to. Most commonly, we rely on the following lawful bases under the UK GDPR:

  • Performance of a Contract: To process and dispatch your online orders, arrange workshop servicing, manage click-and-collect orders, and provide customer support.
  • Legal Obligation: To comply with legal, tax, and accounting requirements (e.g. maintaining VAT invoices and financial records for HM Revenue & Customs).
  • Legitimate Interests: To maintain website security, prevent fraud, troubleshoot technical issues, and improve our cycle store services.

4. Third-Party Data Sharing

We do not sell, rent, or trade your personal data. We only share necessary data with trusted service providers who assist us in operating our online store and delivering your purchases:

  • Courier & Delivery Partners: Trusted UK logistics providers (e.g. Royal Mail, DPD, freight carriers) strictly to deliver your ordered items.
  • Payment Gateways: Authorised UK payment processors for secure transaction verification.
  • Website Hosting & Infrastructure: Hostinger UK infrastructure hosting the WordPress and WooCommerce store.
  • Professional & Legal Advisers: Accountants, auditors, and insurers as required by UK law.

5. Data Security & Storage

We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, or disclosure. All website data transmissions are secured using 256-bit Transport Layer Security (TLS/HTTPS). Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and HMRC statutory reporting requirements (typically 6 years for transaction records).

6. Your Legal Rights Under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have rights in relation to your personal data, including the right to:

  • Request access: Obtain a copy of the personal data we hold about you.
  • Request correction: Have incomplete or inaccurate data rectified.
  • Request erasure: Ask us to delete personal data where there is no good reason for us continuing to process it.
  • Object to processing: Object where we rely on legitimate interests.
  • Request restriction: Request suspension of processing under certain conditions.
  • Request data transfer: Request transfer of your data to another party in a structured format.

To exercise any of these rights, please contact our team in writing at 67 Main Street, Frodsham, Cheshire, WA6 7DF, or call +44 1928 731575.

7. Complaints to the Supervisory Authority

You have the right to make a complaint at any time to the UK Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk). We would, however, appreciate the opportunity to resolve your concerns directly before you approach the ICO, so please contact us first.