This Privacy Policy explains how Pedal Pals processes personal data in connection with its website and bicycle repair workshop services.
This section introduces how personal information, user rights, and support pathways are addressed in the document below.
We use personal data to respond to service inquiries, arrange bicycle intake, assess repair needs, prepare and confirm quotes, carry out servicing and adjustments, record approvals for additional work, complete quality checks, provide collection summaries, manage payments, maintain business records, operate the website, and meet legal obligations.
We may share personal data with trusted service providers that support website hosting, communications, record management, payment processing, or other operational functions. These parties may process data only on our instructions and are expected to use appropriate confidentiality and security measures.
We may disclose personal data to public authorities, courts, or other parties when required by law or when necessary to establish, exercise, or defend legal claims. We may also share information to comply with lawful requests or mandatory reporting duties.
We may collect identification and contact details, service inquiry content, bicycle intake and inspection information, quote and approval records, appointment details, payment-related records, and website usage data. Where relevant to the workshop process, we may also process notes about the condition of the bicycle, requested repairs, and service summary information.
We receive personal data from website forms, email, telephone calls, drop-in visits, and other direct communications. We also generate limited data through the handling of appointments, workshop records, and website operation, including technical logs and cookie-related information.
Cookies may include strictly necessary cookies for core website functions, preference cookies to remember basic settings, and analytics cookies that help us understand how the site is used. Cookie use is limited to what is reasonably needed for operation, performance, and improvement of the website.
You may block or delete cookies through your browser settings. If you do so, some website functions may not operate as intended. Where the website presents cookie choices, those settings should be used to adjust non-essential cookies.
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion in appropriate cases, restriction of processing, objection to certain processing, and a copy of data that you have provided where portability applies.
To exercise a privacy right, send a clear request using the contact details in this policy and describe the data or processing concerned. We may ask for information needed to confirm your identity and to locate the relevant records. If a request cannot be fully granted, we will explain the reason where required by law.
We keep personal data only for as long as needed for the purpose for which it was collected, including service administration, accounting, legal compliance, dispute handling, and recordkeeping. When data is no longer needed, we delete it or anonymise it where appropriate.
The current version of this policy applies from the date it is published on the website. If we make material changes, we will update the policy text and may provide additional notice where appropriate.
Where GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken before entering into a contract, compliance with legal obligations, legitimate interests, or consent where required. The specific basis depends on the type of data and the purpose for which it is used.
Where GDPR applies, individuals may have rights of access, rectification, erasure, restriction, objection, and data portability, and the right to withdraw consent where processing is based on consent. These rights are not absolute and may be limited by legal obligations or legitimate grounds for retaining the data.
