Privacy Policy
Last updated: 20 June 2026
This Privacy Policy explains how Bike Wreckers Ltd, trading as Bike Wreckers ("we", "us", "our"), collects, uses and protects your personal data when you use our website or buy from us. We are committed to processing your data lawfully and transparently in line with the UK GDPR and the Data Protection Act 2018.
1. Who we are (data controller)
We are the data controller responsible for your personal data.
- Business name: Bike Wreckers Ltd
- Trading address: 136 Welham Road, Norton, Malton, North Yorkshire, YO17 9DU
- Contact email: info@bikewreckers.co.uk
If you have any questions about this policy or how we handle your data, contact us using the details above.
2. The personal data we collect
Depending on how you interact with us, we may collect:
| Category | Examples |
|---|---|
| Identity & contact data | Name, billing and delivery address, email address, phone number |
| Order & transaction data | Items purchased, order history, vehicle/fitment details you provide, correspondence about orders |
| Payment data | Processed by our payment provider; we receive confirmation of payment but do not store full card numbers |
| Technical data | IP address, browser type, device information, and cookie data (see our Cookie Policy) |
| Marketing data | Your preferences for receiving marketing and your communication preferences |
| Communications | Emails, messages and enquiries you send us |
We do not knowingly collect special category data (such as health data) and ask that you do not send it to us.
3. How we collect your data
- Directly from you — when you place an order, create an account, contact us, or sign up for marketing.
- Automatically — through cookies and similar technologies when you use the website.
- From third parties — for example, payment providers, couriers, or marketplaces such as eBay where a sale originates there.
4. Why we use your data and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| To process and fulfil your order, take payment and arrange delivery | Performance of a contract |
| To respond to enquiries and provide customer support | Performance of a contract / Legitimate interests |
| To keep records required for tax, accounting and legal compliance | Legal obligation |
| To prevent fraud, secure our website and protect our business | Legitimate interests |
| To send marketing to existing customers about similar products | Legitimate interests (soft opt-in) |
| To send marketing where you have signed up | Consent |
| To use non-essential cookies and analytics | Consent |
Where we rely on legitimate interests, we have balanced those interests against your rights. You can ask us about this balancing assessment at any time.
5. Marketing
We will only send you marketing emails where you have opted in, or where you are an existing customer and we are contacting you about similar products under the "soft opt-in" rules of PECR. You can unsubscribe at any time using the link in any marketing email or by contacting us. Withdrawing marketing consent does not affect order-related messages we need to send you (e.g. dispatch confirmations).
6. Who we share your data with
We share your data only where necessary, with:
- Payment providers to process payments;
- Couriers and postal services to deliver your order;
- Marketplaces (e.g. eBay) where your purchase was made through them;
- Our accountant / bookkeeper for tax and accounting;
- IT, website, email and analytics providers who host or support our systems;
- Professional advisers, regulators or law enforcement where legally required.
We require these parties to keep your data secure and to use it only for the purposes we specify. We do not sell your personal data.
7. International transfers
Some of our service providers may process data outside the UK. Where they do, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / Addendum, so your data remains protected.
8. How long we keep your data
- Order and transaction records: retained for 6 years after the end of the relevant financial year, to meet HMRC and accounting requirements.
- Account data: retained while your account is active, then deleted or anonymised on request.
- Marketing data: retained until you unsubscribe or withdraw consent.
- Enquiries that do not lead to a sale: retained for a reasonable period and then deleted.
9. How we protect your data
We use appropriate technical and organisational measures to protect your data, including secure (HTTPS) connections, access controls and reputable service providers. No method of transmission over the internet is completely secure, but we take all reasonable steps to safeguard your information.
10. Your rights
Under the UK GDPR, you have the right to:
- Be informed about how we use your data (this policy);
- Access a copy of the data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten") in certain circumstances;
- Restrict our processing in certain circumstances;
- Data portability — receive your data in a portable format;
- Object to processing based on legitimate interests or to direct marketing;
- Withdraw consent at any time where we rely on consent.
To exercise any of these rights, contact us at info@bikewreckers.co.uk. We will respond within one month. There is normally no charge.
11. Complaints
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
12. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted here with a revised "Last updated" date.