Privacy
Policy

1. Who We Are

Ealing Bike Mechanic is a sole trader bicycle repair and servicing business based at 22 Craven Road, Ealing, W5 2UA, West London ("we", "us", "our"). We are the data controller for the personal information we collect through this website.

If you have any questions about this policy or how we handle your data, contact us at: [email protected]

2. What Information We Collect

We may collect the following personal information when you use this website:

• Contact form submissions — your name, email address, phone number, and any message you send us
• Booking enquiries — details about your bike and the service you need
• Website usage data — basic analytics such as pages visited and approximate location (country/city level), collected anonymously if applicable

We do not collect sensitive personal data (e.g. health information, payment card details). Payment is handled in person.

3. How We Use Your Information

We use your personal information to:

• Respond to your enquiries — to answer questions and communicate about your booking
• Provide our services — to arrange and carry out bike repairs and servicing
• Improve our website — to understand how the site is used and make it better

We will not use your information for marketing without your explicit consent, and we will never sell your data to third parties.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract performance — processing necessary to carry out a service you have requested
• Legitimate interests — responding to enquiries and operating our business, where this does not override your rights
• Consent — where you have given explicit permission (e.g. optional marketing communications)

5. How Long We Keep Your Data

We keep your personal information only as long as necessary:

• Enquiry and booking records — up to 2 years, to support any follow-up service needs
• Financial records — 6 years, as required by HMRC

After these periods, data is securely deleted or anonymised.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:

• Hosting infrastructure — this website is hosted via Cloudflare Pages. Cloudflare processes data in accordance with their privacy policy and GDPR obligations.
• Legal obligation — if required to disclose data by law or a valid legal request from a public authority.

7. Cookies

This website uses Google Analytics (GA4) to understand how visitors use the site — for example, which pages are visited and how users navigate. Google Analytics sets cookies in your browser to collect this data anonymously; no personally identifiable information is included.

We only load Google Analytics after you have given consent via the cookie banner shown on your first visit. If you decline, no analytics cookies are set and Google Analytics does not run. You can change your choice at any time by clearing your browser cookies and reloading the page.

We do not use advertising cookies, retargeting cookies, or any third-party tracking beyond Google Analytics. Your browser may also store technical session data (such as form state) required for the site to function — these are not cookies and require no consent.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your data where there is no compelling reason to keep it
• Right to restrict processing — ask us to limit how we use your data in certain circumstances
• Right to data portability — receive your data in a structured, commonly used format
• Right to object — object to processing based on legitimate interests
• Rights related to automated decision-making — we do not carry out automated decision-making or profiling

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month.

9. Data Security

We take reasonable steps to protect your personal information from unauthorised access, loss, or misuse. Our website uses HTTPS encryption for all data in transit. We do not store contact form submissions on our servers — enquiries are delivered directly to our email inbox.

10. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK's supervisory authority:

We would always prefer to resolve any concern directly, so please contact us first.

11. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. Continued use of this website after changes have been made constitutes acceptance of the updated policy.