Data Processing Notice
This is the Data Processing Notice (also known as a Privacy Policy) of Wheels Ltd – T/A Ian Brown’s Cycleshop. It is issued in compliance with the Data Protection (Bailiwick of Guernsey) Law, 2017 “the Law.”
We care about your personal data and ensuring you are informed about how we use it. We promise to protect your data, and to manage any information you share with us in line with data protection law.
This Notice sets out how and why we collect and use your personal data and our legal basis for doing so.
Who are we?
We are Wheels Ltd – T/A Ian Brown’s Cycleshop and registered with the Guernsey Registry (8189). We are also registered with The Office of the Data Protection Authority (DPA9544).
What do we do?
We are a local retailer of bicycles and cycling related products. We also provide bicycle maintenance and repair services.
What data we collect
Personal data you disclose to us
If you subscribe to our newsletter via the website we will collect your email address and consent to receive our marketing emails.
When you purchase products or services from us in-store, we may record your name, phone number and email address. We also maintain a record of your purchase history for warranty purposes.
Data automatically collected
Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our website. This data is anonymised and doesn’t allow us to identify you.
Information collected can include usage data (such as pages you visited or how long you viewed that page), device data (including what type of device and browser you’re using) and location information (includes imprecise data of where the device you used was located).
This not only enables us to contact you and to enable us to carry out our core business services and comply with a contract, but also to comply with statutory requirements and our legal obligations.
How we use your personal data
Email addresses collected from the website form are used for sending marketing emails relating to our products and services.
Website usage information is used to understand how our website is being used, how we can improve your experience and for measuring the success of marketing activities.
Our lawful basis for processing your personal data
In order to be able to provide you with the services you require, we use our legal contractual basis for processing your personal data and/or rely on our legitimate business interests.
Consent
In instances where we are not relying on a contractual and/or legitimate business interests’ basis, we rely on consent to lawfully process your personal data. This can be obtained orally, by email or via our website. You have the right to withdraw your consent at any time, however, it must be highlighted that by withdrawing your consent we may not be able to provide you with our core business services.
Types of personal data we collect
- Your contact details, such as name, postal address, email address and contact number
- Your purchase history
- Your communication preferences
Special category data
We do not process Special Category Data as defined by the Law.
Sharing of your personal data
Your personal information is stored in our cloud-based POS system provided by Citrus Lime. Their Privacy Policy can be https://www.citruslime.com/privacy/. We have the ability to promptly and completely remove your data from this system should you request it.
Transfer of data
In addition to the aforementioned POS system we also use Mailchimp for the purpose of consent only, direct email marketing. If you have consented to receive email marketing from us, we may store your email address in this system.
Direct marketing
If you have consented to receive our email newsletters we may contact you from time to time via email with offers, product & shop news. You can unsubscribe at any time by clicking unsubscribe on the email or by advising us either by emailing [email protected] or in person in-store.
Retention of data
All data is retained securely and only used for the purposes for which it was collected under the Law. Data is only retained for as long as is required to comply with our statutory obligations, in order for us to provide you with the services forming part of a contract or with your consent. In any event, data is reviewed and weeded accordingly after 8 years.
Your rights
The Law provides you with a number of rights, but specifically and of relevance, you have the right to:
- request confirmation of the personal data that we hold about you and what we are doing with your data
- request correction of your personal data if incorrect, out of date or incomplete
- request that we stop any consent-based processing of your personal data after you have withdrawn that consent
- request that we delete your personal data from our systems
Social media
This notice does not cover any third-party websites or social media sites used in conjunction with Wheels Ltd – T/A Ian Brown’s Cycleshop. We are not responsible for the actions or activities of third-party website/social media outlets. You are advised to read the data collection and privacy statements on other websites and social media outlets you visit.
Cookies
We use cookies to track user behavior on the site as described in the ‘what data we collect’ section of this policy. Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Website.
Contacting us
We are defined as a Controller according to the Law. If you have any questions or queries regarding how your personal data is being managed, please contact us in-store or by emailing [email protected].
Contacting the regulator
If you feel that your personal data has been handled incorrectly or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the data protection regulator – The Office of the Data Protection Authority (ODPA). You can contact them for advice by writing to:
The Office of the Data Protection Authority
Block A
Lefebvre Court
Lefebvre Street
St Peter Port
GY1 2JP
by telephoning (01481) 742074 or by email to [email protected] or you can submit a complaint online at www.odpa.gg and complete the ‘make a complaint’ section.
Last update/review 16/04/24
