Last updated: 25 June 2026

This Privacy Policy explains how Cycle Fix London collects, uses, shares and protects your personal data when you visit our shop, use our website at cyclefixlondon.co.uk, use our mobile app, book a workshop service, buy products from us, or join our loyalty scheme. We are committed to protecting your privacy and handling your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

1. Who we are

Cycle Fix London ("we", "us", "our") is a bicycle workshop and retailer based at 338 Kennington Road, London SE11 4LD. We are the "data controller" responsible for your personal data.

Address: Cycle Fix London, 338 Kennington Road, London SE11 4LD
Email: hello@cyclefixlondon.co.uk
Phone: 0207 820 0028
Company registration number: 09596767
VAT number: GB 273 5986 56

2. The personal data we collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

Identity and contact data: your name, email address, phone number, and billing and delivery addresses.
Account data: your login credentials (passwords are stored hashed, never in plain text), settings and preferences.
Order and transaction data: products you have bought, order history, Click & Collect and delivery details, returns and refunds.
Workshop and booking data: service bookings, deposits paid, appointment dates, and details of your bicycle (make, model, frame number if provided, and the work requested or carried out).
Payment data: card and wallet payments are processed directly by our payment providers. We do not store your full card number or security code; we receive only confirmation of payment and limited information such as the last four digits and the transaction reference.
Loyalty data: your loyalty membership, points earned and redeemed, and related history.
Mobile app and device data: device identifiers, app settings, and push notification tokens; limited data to create and update Apple Wallet / Google Wallet loyalty passes.
Marketing and communications data: your marketing and contact preferences.
Technical and usage data: IP address, browser and device information, and how you use our website and app, via cookies and similar technologies (see our Cookie Policy).
CCTV: our premises are covered by CCTV for the safety of customers, staff and property.

We do not routinely collect special category data (such as health data). Please do not send us sensitive personal information unless we specifically ask for it.

3. How we use your personal data and our lawful bases

To process and fulfil your orders (payment, Click & Collect or delivery, returns and refunds) – lawful basis: performance of a contract.
To manage your workshop bookings and deposits – lawful basis: performance of a contract.
To create and manage your account and provide our website and app – lawful basis: performance of a contract and our legitimate interests.
To run our loyalty scheme – lawful basis: performance of a contract and our legitimate interests in rewarding customers.
To send service messages (order confirmations, booking reminders, delivery updates, push notifications you have enabled) – lawful basis: performance of a contract and our legitimate interests.
To send marketing by email, SMS or push notification – lawful basis: your consent, or our legitimate interests where we may market similar products to existing customers (you can opt out at any time).
To improve and analyse our website, app and services – lawful basis: your consent for non-essential cookies and analytics, and our legitimate interests.
To keep our website, app, premises and customers safe and secure (including fraud prevention and CCTV) – lawful basis: our legitimate interests.
To comply with our legal obligations (tax, accounting, consumer protection) – lawful basis: compliance with a legal obligation.
To handle queries, complaints and disputes and to establish, exercise or defend legal claims – lawful basis: our legitimate interests and, where relevant, a legal obligation.

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.

4. Who we share your personal data with

We share your personal data only where necessary, and only with organisations required to keep it secure and use it solely for the purposes we specify:

Payment providers – including Stripe, Dojo, PayPal and Klarna – to process payments, deposits and refunds.
Delivery and courier companies – to deliver your orders.
Email and SMS providers – to send transactional messages and, where you have agreed, marketing.
Cloud hosting and IT providers – who host our website, app, databases and systems.
Analytics providers – to help us improve our website and app (subject to your cookie preferences).
Apple and Google – to deliver app push notifications and Apple/Google Wallet passes you choose to add.
Professional advisers and authorities – such as accountants, lawyers, and HMRC or other regulators, where required by law.

We do not sell your personal data. We may share anonymised or aggregated data (which cannot identify you) for analysis and reporting.

5. International transfers

Some service providers may process your personal data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as transfers to countries the UK Government considers adequate, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. Contact us for more information about these safeguards.

6. How long we keep your personal data

Order, payment and booking records: up to 6 years after the transaction, to meet tax and accounting law and handle disputes or warranty claims.
Account and loyalty data: while your account is active; deleted or anonymised after closure or extended inactivity, subject to the retention periods above.
Marketing data: until you opt out, after which we keep a minimal record to respect your choice.
CCTV footage: normally up to 30 days, then automatically overwritten, unless needed for an investigation or legal claim.
App device and push tokens: while you use the app with notifications enabled; removed when you disable notifications or delete the app/account.

7. Your rights

Under data protection law you have the right to be informed; the right of access; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; the right to object (including to direct marketing at any time); and the right to withdraw consent. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

To exercise any of these rights, please contact us at hello@cyclefixlondon.co.uk or write to us at the address above. We will respond within one month and will not normally charge a fee, though we may need to verify your identity first.

8. Your right to complain

Please contact us first and we will do our best to resolve your concern. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk

9. Children

Our website, app and services are intended for customers aged 16 and over. We do not knowingly collect personal data from children under 16 without parental consent. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

We take appropriate technical and organisational measures to protect your personal data, including encryption in transit, secure hosting, access controls, and using reputable PCI DSS compliant payment providers so card details are not stored on our systems. No method of transmission or storage is completely secure, but we work to protect your data and to deal promptly with any suspected breach.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "last updated" date, and where changes are significant we will take reasonable steps to notify you.

12. Contact us

Email: hello@cyclefixlondon.co.uk
Phone: 0207 820 0028
Post: Cycle Fix London, 338 Kennington Road, London SE11 4LD

Privacy Policy & Data Protection