Our privacy policy sets out what personal information we collect, how we use it and under what circumstances, if any, we will share it with other parties. We abide by, and are compliant with, the Data Protection Act 1998 and the General Data Protection Regulation (herein referred to as “The GDPR”) which came into effect in May 2018. We are committed to keeping customers’ personal information secure and confidential; all data is stored in a secure and confidential manner, and never shared without consent and/or legal obligation.
Lawful Basis for Processing Personal Data
For the purposes of The GDPR, we are the Data Controller and Data Processor when selling on BurtonBikes.com, and process all personal data lawfully, fairly and in a transparent manner. Under Article 6 of The GDPR, the lawful basis on which we process personal data received from our customers is that of “Contract” - whereby processing is necessary in order to fulfil customer orders and enquiries. We retain information provided by customers, such as transaction information for internal financial accounting purposes. It is a legal requirement to retain this information for a period of 7 years.
Data We Receive: Personally Identifiable Information
We collect personally identifiable information from customers only when it is voluntarily submitted when placing an online order or enquiry. The data we receive can include: name, telephone number, delivery name, delivery address, e-mail address, date of order, items ordered, value of items ordered, chosen method of delivery.
How we use customers’ personal information
We may use any personal buyer information provided on BurtonBikes.com to:
-process and dispatch a buyers’ order
-carry out regulatory checks to meet our legal obligations
-prevent and detect crime
-develop and improve our products
-undertake anonymised statistical analysis (we won’t be able to identify individuals from this data)
We treat all information we hold about customers as private and confidential. We will not reveal any personal details or details concerning buyers’ orders to any third party, unless:
-a buyer asks us to reveal the information, or we have a buyer’s permission to do so
-we are required or permitted to do so by law
-it is required by law enforcement, fraud prevention or credit reference agencies
We may share buyer personal information with our service providers and contractors (for example the Royal Mail or other couriers) only to fulfil orders buyers' placed with us on BurtonBikes.com. We do not sell or give personally identifiable information to any third party for any other purpose.
Data Subject Access Requests
Under The GDPR, buyers are entitled to obtain from us, a copy of the data held concerning them and to have any inaccuracies in the data rectified. We are obliged to provide this data to within 1 calendar month of the request and free of charge. However we have the right to refuse or charge for requests that are manifestly unfounded or excessive and repetitive.