This Privacy Policy explains how WestXbike (“we”, “us”, “the Store”) collects, uses and discloses your information when you visit westxbike.com or make a purchase.
Who we are
Data Controller: WestXbike, [registered company name], [registered address], United Kingdom.
Email: support@westxbike.com
1. Information we collect
- Identity & contact: name, email, billing/shipping address, phone.
- Order & payment: order details and transaction metadata. Payments are processed by secure providers; we do not store full card numbers.
- Device & usage: IP address, browser/device info, pages viewed, cookies/analytics.
- Support: messages and attachments you send us.
2. Lawful bases & how we use data
- Contract: process orders, shipping/returns, customer support.
- Legitimate interests: operate, secure and improve the Site; prevent fraud/abuse.
- Legal obligation: tax/accounting, product safety, recall notices.
- Consent: marketing emails where required (you can withdraw any time).
3. Sharing
We share data with service providers (Shopify, payment processors, couriers, analytics/marketing tools) under contracts and safeguards. We may disclose information to comply with law, protect our rights, or during a business transfer.
4. Cookies & similar tech (PECR)
We use essential, analytics, functional and marketing cookies. Manage preferences via our cookie banner and your browser settings. Non-essential cookies run only with consent where required.
5. Data retention
We keep order and related records only as long as necessary for the purposes above and to meet legal/regulatory requirements.
6. Security
We apply appropriate technical and organisational measures, but no method is 100% secure.
7. Your rights (UK GDPR)
You may request access, rectification, erasure, restriction, portability, and object to processing (including direct marketing). To exercise rights, email support@westxbike.com. You also have the right to complain to the ICO (ico.org.uk).
8. International transfers
Where data is transferred outside the UK/EEA, we use appropriate safeguards (e.g., UK IDTA/EU SCCs).
9. Children
We do not knowingly collect data from children under 13. Contact us to delete such data.
10. Changes
We will update this Policy when needed and post the new effective date.
