This Privacy Policy explains how Cycle Haven Workshop processes personal data in connection with its website and bicycle servicing activities. It applies to inquiries, bookings, intake, repairs, collection, and related communications.
We may process contact details, service request details, bicycle intake information, inspection notes, quote and approval records, booking and attendance information, payment-related records, and communications sent to us. Where needed for diagnostics or compatibility checks, we may also process technical information about the bicycle and the requested service.
We collect data when a person submits an inquiry, books a service, brings in a bicycle, approves a quote, makes a payment, or communicates with us by phone, email, contact form, or in person. We may also generate internal records during inspection, repair, quality checking, and collection of the bicycle.
We may use essential cookies to support page functions, preference cookies to remember basic settings, and limited analytics cookies to understand site use. Cookies may be session-based or persistent depending on their purpose.
We use only the cookie categories needed for site operation and basic measurement. Browser settings may be used to block or delete cookies, but some site functions may not work as intended if essential cookies are disabled.
We use personal data to respond to inquiries, manage bookings, receive bicycles for service, assess condition and compatibility, prepare quotes, carry out repairs and adjustments, communicate progress, arrange collection, process payments, maintain records, and meet legal obligations. We may also use limited technical data to operate the website and maintain security.
We may share personal data with service providers that support website operation, communications, payment processing, record keeping, or other administrative functions. These recipients may process data only under instructions or contractual obligations appropriate to their role.
We may disclose personal data where required to comply with law, court orders, tax obligations, or other binding requests from competent authorities. We may also share information when necessary to establish, exercise, or defend legal claims.
Subject to applicable law, individuals may request access to their data, correction of inaccurate information, deletion in appropriate cases, restriction of processing, or objection to certain processing activities. Where processing is based on consent, consent may be withdrawn for future processing.
To exercise a privacy right, a person should provide enough information for us to identify the relevant record and assess the request. We may ask for additional details where necessary to protect confidentiality and prevent unauthorised disclosure.
We keep personal data only for as long as it is needed for the relevant service, accounting, legal, or operational purpose. After that, data is deleted, anonymised, or archived where retention is required by law or justified by a legitimate business need.
When we update this policy, we will publish the revised version on the website and apply the new text from the stated effective date. If a change materially affects how we process personal data, we may provide additional notice where appropriate.
As a controller, we process personal data only where we have a lawful basis, such as performance of a service request, compliance with legal obligations, legitimate interests, or consent where required. We apply data minimisation and use information only for the purposes described in this policy.
Where the GDPR applies, individuals may have rights of access, rectification, erasure, restriction, objection, and data portability, as well as the right to withdraw consent where processing is based on consent. The right to lodge a complaint with a competent supervisory authority may also apply.
