What personal data we collect and how.
Personal data is any information which identifies you personally whether directly (for example, your name) or indirectly. The following data that you provide to us may therefore be defined as personal under the GDPR. If it is, then it will be treated in accordance with this Policy:
1. Basic contact details: We ask you to provide us with your name, postal address, email addresses and telephone numbers to purchase or reserve any products on our website, or sign up to receive our marketing communications, complete a survey or send us feedback, or contact or correspond with us.
2. Payment details: We ask you to provide us with your shipping address and billing address if you purchase any products on our website. We also ask you to provide your payment card details – this information is processed by our third party payments service provider and not retained by us.
3. Information about how you use our website and services: Each time you visit our website, where you have consented to cookies, we or our service providers automatically collect technical information about the device you have used to access our website (including the make, model and operating system, IP address, browser type and mobile device identifiers) and information about your user preferences and browsing habits (such as items or links clicked on, web pages viewed, any web page download errors, products you have added to your shopping basket or wish list, and other customised features). Please see our Cookie Policy to find out more about what cookies and other similar technologies we use, and how to decline or disable them.
We use the data described above for the purposes set out in the How we use your personal data section below.
How we use your personal data.
To process your orders:
We use your personal data to manage your account and process any orders you make in accordance with our terms and conditions.
We use the contact details you have provided to us so that we can communicate with you about the products you have purchased from us (for example, to confirm that you have successfully placed an order or to let you know when your order has been dispatched) and to notify you of changes to any of our services or to the terms of any contracts between us or to any related information (such as changes to this Privacy Policy).
If you have provided your consent to do so, we will use your contact details to send you marketing communications by email and post about Cyclelife East Devon, services, special offers and promotions that we think may be of interest to you.
You can unsubscribe or opt out of receiving our marketing communications at any time by using the unsubscribe link and the bottom of the email in question or unsubscribing from our social media platform on there links provided.
Or you can contact us directly to have your details removed.
If you receive emails from us, we or our marketing service provider may automatically collect technical information about how you have interacted with those emails, including whether you have opened them or clicked through any links within them. This helps us understand how an email campaign performed, what types of emails and content our customers find interesting, and what actions our customers took, so we can improve our email campaigns in the future and make our emails more relevant to you.
We use your personal data to be able to provide and improve the customer support we provide to you (for example, where you have questions about our products and services).
We use the personal data we hold about you to help us respond to any enquiries or complaints you have made, or address any dispute which may arise in the course of us providing our products and services to you.
We process your personal data to provide any other services requested by you from time to time, as described at the time we collect the data.
We process personal data in the course of maintaining and administering our internal records.
We may aggregate the data we hold about you on an anonymous basis with other data for analytical and reporting purposes.
In certain circumstances, we use your personal data only to the extent required in order to enable us to comply with our legal obligations, including to detect, prevent and investigate fraud or to facilitate the exercise of your consumer rights. In addition, we may need to use your personal data to detect, prevent and investigate any other actual or suspected violations of law or misuse of our website.
Legal grounds for using your personal data.
Applicable data protection law requires us to only process your personal data if we satisfy one or more legal grounds. These are set out in law and we rely on a number of different grounds for the processing we carry out, depending on the purposes of the processing. These are as follows:
Necessary for the performance of a contract and to comply with our legal obligations
Much of the personal data we collect about you is necessary for the performance of certain contracts between us in order for us to comply with our terms and conditions for the use of our website
In certain circumstances, we also use your personal data only to the extent required in order to enable us to comply with our legal obligations, including to detect, prevent and investigate fraud or to facilitate the exercise of your consumer rights.
Necessary for the purposes of our legitimate interests
It is sometimes necessary to collect and use your personal data for the purposes of our legitimate interests as a business, which are to:
• provide our customers with products and services that are as useful and beneficial as possible, including by personalising our contact with customers;
• develop and improve our website to enhance the customer experience;
• safeguard the security and effective operation of our website;
• better understand our customer base by engaging with customers and conducting research into, and analysis of, how customers interact with us and use our website and the services available through it so that we can improve those services as well as our product selection, marketing activities and communications (all of which could also benefit you); and
• ensure effective operational management and internal administration of our business, including in relation to document retention, compliance with regulatory guidance and exercise or defence of legal claims.
Please note that where we wish to rely on this legal ground, we are required by law to conduct balancing tests to determine whether our legitimate interests are overridden by your interests or your fundamental rights and freedoms. We may continue to process your personal data on the basis of our legitimate interests only if we determine that your interests, rights and freedoms are not overridden by our legitimate interests.
We have considered these matters and where we think there is a risk that your interests or fundamental rights and freedoms may be affected we will not process your personal data unless there is another legal ground for us to do so (either that we have obtained your consent to the processing or it is necessary for us to perform our contract with you or to comply with our legal obligations).
Consent
In certain limited circumstances, we also process your personal data after obtaining your consent to do so for the purposes of sending you marketing communications about Cyclelife East Devon products, services, special offers and promotions. You don’t have to provide your consent, and can withdraw it at any time.
Who we disclose your personal data to.
We may from time to time need to disclose your personal data to third parties in order to provide you with our services and ensure the effective operation of our website. The providers of such services are granted access to certain personal data to the extent necessary for them to perform the services that we request. Any personal data that is processed by third parties must be processed in accordance with applicable data protection law and subject to contractual obligations, including regarding security and confidentiality. The third parties are:
1. Squarespace & Lightspeed, which provides us with a software platform and support from which we operate our website.
2. Lightspeed & Lloyds business banking, our payments service provider, which enables us to take payments for purchases.
3. Our delivery providers, including Royal mail and DPD, which assist us with fulfilling orders.
4. Squarespace, our marketing service provider, which assists us with our marketing activities and sends you email marketing.
5. Our social media platforms Instagram and Facebook, which collect personal data under their sole liability.
Additionally, where you have consented to cookies we allow third parties such as Google to set Google Analytics cookies on your device to assist us with the improvement and optimisation of our website. Google Analytics cookies collect information such as items clicked on, web pages viewed and any web pages where users are encountering download error messages from time to time.
Please see our Cookie Policy to find out more about how we use cookies and other similar technologies (including links to further information provided by Google), Facebook, Instagram and Twitter about their practices), and how to decline or disable them.
How long we keep your personal data for.
We retain your personal data for no longer than is necessary for the purpose(s) for which it was collected. What this means in practice will vary between different types of data. When determining the relevant retention periods, we take into account factors including:
1. legal obligation(s) under applicable law to retain data for a certain period of time;
2. statute of limitations under applicable law;
3. the warranty period for any products you have purchased from us;
4. potential or actual disputes; and
5. guidelines issued by relevant data protection authorities.
Otherwise, we securely erase your personal data from our systems when it is no longer needed.
Your Privacy Rights
The table in this section below explains what rights you have with regard to your personal data. These rights are not absolute and are subject to certain exceptions and qualifications.
For more information about your rights or if you would like to exercise any of your rights, you are welcome to contact us directly.
Please note that if you ask us to stop using your personal data in a certain way or erase your personal data, and this type of use or personal data is required by us in order to facilitate your use of our website or services in any way, you may not be able to use our website or services as you did before. This does not include your right to withdraw your consent to receiving marketing communications from us, which you can do so at any time without restriction.
Privacy rights
What does this mean?
Right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we provide you with the information in this Privacy Policy.
Right of access
You have the right to receive confirmation from us that your personal data is being processed, and where that is the case, obtain access to the personal data that we hold about you and certain other information (similar to that provided in this Privacy Policy).
Right to rectification
You have the right to require us to rectify any personal data that we hold about you if it is inaccurate or incomplete. Please contact us if you believe that any personal data we hold about you is inaccurate or incomplete. If you have an account with us, you can also view and update your basic contact details, gender, date of birth and marketing preferences at any time by logging into your account on our website.
Right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the erasure of the personal data that we hold about you where:
the personal data is no longer necessary for the purpose it was originally collected/processed;
you withdraw your consent (where consent was previously provided and required for us to process the data);
you object to the processing, as long as there are no overriding legitimate grounds for us to continue the processing;
we’ve been processing your personal data unlawfully, or
your personal data has to be erased in order to comply with a legal obligation.
This is not a general right to erasure; there are exceptions. For example, we have the right to continue using your personal data if such use is necessary for compliance with our legal obligations or for the establishment, exercise or defence of legal claims.
Right to restrict processing
You have the right to restrict further processing of your personal data where:
you consider the personal data we hold to be inaccurate, in which case we have to restrict any processing while we verify the accuracy of your personal data;
the processing we are carrying out is unlawful and you request us to restrict processing, rather than erasing your personal data;
we no longer need the personal data, but you need it to establish, exercise or defend a legal claim; or
we are considering our legitimate interests for processing your personal data to which you have objected.
When processing is restricted, we can still store your personal data, but may not process it further without your consent (unless processing is required in connection with legal claims, to protect another person’s rights or on important public interest grounds).
Right to data portability
You have the right to obtain and reuse the personal data that we hold about you in a structured, commonly used and machine-readable format, and (where technically feasible) to have such information transmitted to another "data controller", where:
this is personal data you provided to us (i.e. not any other information);
we are processing such data on the basis of your consent or to perform a contract with you; and
the processing is carried out by automated means.
Right to object to processing
You have the right to object to processing in the following circumstances:
where the processing of your personal data is based on our legitimate interests. However, if we can show compelling legitimate grounds for processing your personal data which override your interests, rights and freedoms, or we need your personal data to establish, exercise or defend legal claims, we can continue to process it. Processing of your personal data will be restricted while we make this assessment. Otherwise, we must stop using the relevant personal data; or
where your personal data is processed for direct marketing purposes (including profiling related to such direct marketing).
Right to withdraw consent to processing
If you have given your consent to us to process your personal data for a particular purpose (for example, to send you marketing communications), you have the right to withdraw your consent at any time (although if you do so, it does not mean that any processing of your personal data up to that point is unlawful).
Right to make a complaint to the data protection authority
You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with applicable data protection law.
How you can contact us
If you would like to exercise your privacy rights or if you are unhappy with how we have handled your personal data, please contact us by:
emailing: henry@cyclelifeeastdevon.co.uk
writing to: Cyclelife East Devon Workshop, Retail unit 3, The grove, Underfleet, Seaton, Devon, EX12 2FU
calling: 01297 631202
Changes to this Privacy Policy
This Privacy Policy was last updated on 21st November 2025
This Privacy Policy may be updated from time to time. We will post the updated terms on our website and, where appropriate, we will notify you of the changes, for example by an email notification. We recommend that you check this page from time to time to ensure that you are aware of and understand any changes.