This policy explains what personal data Cycle Bros ("we", "us") collects when you use our website and place an order, how we use it, and your rights over it. For any privacy question, email [email protected].
Who we are
Cycle Bros is the trading name for our small business, based at Church View, PL19 8PU. We are the data controller for the personal data described below. Any questions about this policy or your data, email [email protected].
What we collect
- Order details: your name, email address and shipping address, which you provide at checkout so we can process and deliver your order.
- Payment information: card payments are handled entirely by Stripe on Stripe's own checkout. We never see or store your full card details.
- Email: we use your email address to send your order confirmation and to contact you about your order.
- Analytics: anonymous, aggregated usage statistics (see "Analytics and cookies" below).
- Café suggestions: if you nominate a café through our form, we receive what you enter, plus your name and email if you choose to give them so we can follow up. These submissions are handled by Netlify Forms.
How we use it and our legal basis
- To fulfil your order (process payment, deliver coffee, send confirmations). Legal basis: performance of our contract with you.
- To keep records required for accounting and tax. Legal basis: legal obligation.
- To understand site usage through privacy-friendly analytics. Legal basis: our legitimate interest in improving the site, using only aggregated data.
Who we share it with
We only share data with the service providers that help us run the shop:
- Stripe: payment processing and order/customer records.
- Mailgun: sending your order confirmation email.
- Netlify: website hosting.
- Limini Coffee: our roastery and fulfilment partner in Yorkshire, who receive your name and delivery address to roast and ship your order.
- Plausible Analytics (self-hosted by UF Media at data.ufmedia.co.uk): privacy-friendly website analytics.
We never sell your personal data.
Analytics and cookies
We use Plausible Analytics, a privacy-friendly analytics tool. It does not use cookies, does not collect any personal or identifiable information, and does not track you across websites or over time. It only produces aggregated statistics such as page views and referrers. Because of this, our site does not require a cookie consent banner for analytics. Note that Stripe may set cookies on its own checkout pages as part of processing your payment.
How long we keep it
We keep order and transaction records for as long as needed to fulfil your order and to meet our legal and accounting obligations (in the UK, financial records are generally retained for six years). Analytics data is aggregated and not tied to you.
Your rights
Under UK data protection law you have the right to access, correct, or request deletion of your personal data, to object to or restrict its processing, and to data portability. To exercise any of these, email [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed.