We are a Limited Company, privately owned and run and based in the United Kingdom. Our main business is the sourcing, curating and retailing of premium brands in the cycle sector. We specialise in bikes, clothing and accessories. We have a real passion for cycling as well, so we try and bring our customers the most interesting stories and experiences from around the cycling world. We do that through various means such as our blog, our social media channels and regular emails and other forms of communication which we send to those who have subscribed to receive them.
The law on data protection sets out a number of different reasons permitting a company such as Always Riding to collect and process your personal data. These include:
If you sign up to receive our email newsletters and communications for example, then that is you giving us your consent to process your contact details for this purpose. You can withdraw your consent at any time by contacting us.
If you order something from us we will need to process your data to provide you with that product. If you have asked for the product to be delivered by courier, then we will need to pass your name and contact details to that courier. We have contractual arrangements in place to ensure that they only use your data for that purpose alone. If you create an account with us then we will use your data to provide you with the services you have signed up for as an account holder.
In certain circumstances we need to use your data in order to run our business. As a business we believe that we have a legitimate interest in doing this but that it does not significantly impact your rights or interests. A good example might be when we combine the shopping history of a large group of our customers to identify trends which we then use to make sure we are offering all our customers the right products and best possible services.
Sometimes, we are legally required to pass on information to appropriate agencies. For instance, we are allowed to pass on details of anyone suspected of being involved in criminal activity but we will only do this in compliance with the law.
The main ways we collect your data are the ones listed below:
We want to give you the best possible customer experience and the personal data we collect about you allows us to do that. If you wish to change how we use your data, then you can find out more about this in the section below entitled “Your rights over your data”. Please note though that if you change or restrict what we can use your data for, we may not be able to provide you with all the services you would like or have asked for.
So why do we do it?
Data security matters to everyone, so at Always Riding we treat your data with the greatest of care and as if it were our own personal data. We take appropriate steps to protect it.
Access to all transactional areas of our websites is protected using ‘https’ technology. Access to your personal data is password-protected and / or encrypted as appropriate, and sensitive data is secured by SSL encryption. We have high quality firewalls and whitelisting systems protecting access to our systems and these monitor our systems for possible vulnerabilities and any attacks.
We’ll only keep your personal data for as long as is necessary having regard for the purpose for which it was collected.
We will keep transactional information for 6 years after the transaction has ended after which we will securely delete your data.
If you have signed up for our newsletter, we will send this to you with your consent. If you have not engaged with us for 3 years we will ask if you still want to hear from us. If you do not respond we will delete or anonymise your data.
Sharing your data with third parties for them to use for Always Riding's purposes:
We sometimes share your personal data with trusted third parties such as with courier companies (like UPS, Royal Mail and DPD) to ensure your orders reach the place where you asked us to deliver them to.
We use a third party to build and send our email newsletters to our subscribers. Their system also allows us to segment subscribers into different groups to provide the information that is most relevant to that group.
However, we apply the following policies with any such third party to keep your data safe:
Companies we work with to provide our service to you.
We do not store any bank details or card details on our systems and use PayPal and Stripe to provide us with payment services.
Sharing your data with third parties for them to use for their own purposes:
We will only do this in very specific circumstances such as:
Sometimes we will need to transfer your personal data to our third parties and suppliers who reside outside the European Economic Area (EEA), such as the USA, Australia and Japan. The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway. If you reside outside the EEA we will need to transfer your delivery details to third party processors in countries outside the EEA. This will be required in order to fulfil your order or answer any subsequent queries you may have with regards to that order.
If you have any queries about how your personal data is processed and managed, please contact us at email@example.com.
Your rights to access your data and request corrections / amendments.
You have the right to request:
To ask for a copy of your personal data, please email us at firstname.lastname@example.org and enter the phrase Data Protection Request either in the subject line of the email or as a heading in the body of the email. Alternatively, if you prefer, you may write us at – Always Riding, Bike Republic Ltd, 12 th Floor, 6 New Street Square, London, EC4A 3BF.
To ask for your information to be amended, please either login and update the details in your online account or email us at email@example.com setting your request out clearly. If we choose not to action your request we will explain to you the reasons for our refusal.
You have the right to stop the use of your personal data for direct marketing activity through any or all channels. We will always comply with your request. Please note that regardless of your marketing preferences, if you continue to shop with us, you will continue to receive order acknowledgements, dispatch confirmations and credit memo notifications (where applicable), as legally required.
To stop us using your personal data for direct marketing you can:
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. Please do contact us first, and we will do our best to help you.
You can contact the ICO by calling 0303 123 1113 or go online to: ico.org.uk/concerns.
If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.