Privacy Policy
This Privacy Policy explains how Cycle Savvy processes personal data in connection with its website and bicycle repair workshop services.
Contact Details
Data We Collect
We may collect identification and contact details, bicycle and service information, appointment and intake details, payment-related records, communication content, and technical data such as device, browser, and usage information. Where relevant to a repair request, we may also record inspection findings, parts compatibility notes, and service summary information.
Sources of Data
We receive data from users when they submit forms, call, email, book a workshop visit, or bring in a bicycle for inspection or repair. We also generate information during intake, diagnostics, quote preparation, repair work, quality checks, and collection. Some technical data is collected automatically through the website and related systems.
Cookie Types
We may use essential cookies to support site security and core functions, preference cookies to remember limited settings, and analytics cookies to understand general site use. Cookies may be session-based or persistent depending on their purpose.
Cookie Controls
Users may block or delete cookies through their browser settings. If the browser is configured to reject certain cookies, some site functions may not operate as intended. Where the site provides a cookie preference tool, users may use it to manage non-essential cookies.
How We Use Data
We use personal data to respond to inquiries, schedule and manage workshop appointments, assess bicycles, prepare and confirm quotes, carry out repairs and adjustments, record service history, handle payments, provide collection summaries, maintain site security, improve basic site performance, and comply with legal and accounting obligations. We may also use limited contact details to send seasonal maintenance reminders where permitted.
Service Providers
We may share personal data with trusted service providers that support website hosting, communications, payment processing, record keeping, or similar operational tasks. These parties act on our instructions or under their own legal obligations, and they are expected to handle data in a manner consistent with the purpose for which it was shared.
Legal Disclosure
We may disclose personal data where required by law, to respond to lawful requests, to protect our rights or property, or to support the prevention or investigation of fraud, misuse, or security incidents. We may also share information where necessary to complete a service requested by the customer and where the disclosure is otherwise permitted by law.
GDPR Overview
Under GDPR, processing must have a lawful basis such as performance of a contract, compliance with a legal obligation, legitimate interests, or consent where required. We limit processing to what is necessary for service handling, administration, security, and legal compliance.
GDPR Rights
Where GDPR applies, individuals may request access, rectification, erasure, restriction, objection, and data portability, and may withdraw consent where processing relies on consent. A complaint may also be raised with the competent supervisory authority.
Subject to applicable law, individuals may have rights to access their data, correct inaccurate information, request deletion, object to certain processing, and ask for restriction of processing. Where processing is based on consent, that consent may be withdrawn for future processing.
To exercise a privacy right, a person should provide enough information for us to identify the relevant record and understand the request. We may ask for additional details where needed to verify identity or locate the data. If a request cannot be fully granted, we will explain the reason where the law requires us to do so.
We keep personal data only for as long as needed for the relevant service, administration, dispute handling, security, or legal compliance. Workshop records, quote information, and communication history may be retained for a practical period after completion of the service, then deleted or anonymised when no longer required.
We may update this Privacy Policy from time to time. When changes are material, we will take reasonable steps to make the revised version available and indicate the effective date. Continued use of the site after an update does not remove any rights available under applicable law.