This Privacy Policy explains how Cycle Haven processes personal data when you contact us, request bicycle servicing, book an appointment, or use the website.
We may process contact details, service request details, bicycle intake information, inspection notes, quote and approval records, collection and service summary records, payment-related records, and limited technical data such as device or browser information when you use the website. Where needed for service handling, we may also process information about the bicycle, its condition, and requested repairs.
We receive personal data from service inquiries, booking communications, workshop drop-ins, bicycle intake, inspection discussions, approval of scope or quote, payment handling, and follow-up messages. Some technical data is generated automatically when the website is used, and some service records are created internally during repair and collection.
We may use essential cookies to support site operation, preference cookies to remember basic settings, and limited analytics cookies to understand how the website is used. Cookies may be session-based or persistent, depending on their purpose and technical function.
You can manage cookies through your browser settings and, where available, through any on-site preference tools. Essential cookies may remain necessary for basic website operation, while analytics or similar cookies can usually be restricted or deleted through browser controls.
We use personal data to respond to inquiries, schedule and manage bicycle intake, assess service scope, prepare and confirm quotes, carry out repairs and adjustments, record approvals for additional work, arrange collection, issue service summaries, process payments, maintain business records, and operate the website securely.
We may share data with service providers that support website hosting, communications, payment processing, record management, or similar operational tasks. Where parts are ordered or compatibility must be checked, limited information may be shared with suppliers or logistics providers to complete the request.
We may disclose personal data when required to comply with law, a lawful request, or a binding order. We may also share information where necessary to establish, exercise, or defend legal claims, or to meet accounting and record-keeping obligations.
Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. We limit processing to what is necessary for workshop operations, communication, and record-keeping.
Where applicable, you may request access, rectification, erasure, restriction, portability, or objection. If processing is based on consent, you may withdraw it for future processing. Some requests may be limited where retention or disclosure is required by law.
Subject to applicable law, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction of processing. You may also raise concerns about how your data is handled through the contact channels listed in this policy.
To help us process a rights request, we may need enough information to verify your identity and locate the relevant records. We may decline or limit a request where the law permits or requires us to keep the data, or where the request would affect the rights of others.
Inquiry records are kept for the period needed to manage the request and any follow-up. Service and payment records are retained for the time required by applicable law and ordinary business administration. When data is no longer needed, we delete it or anonymize it where feasible.
When we update this policy, we will post the revised version on the website and apply the new text from its stated effective date. If a change materially affects how we process personal data, we may provide additional notice where appropriate.
