Privacy and Data Policy

We're The Common Cyclist — a bike repair kiosk beside Wandsworth Common in South London. We take your privacy seriously, not just because the law says we have to, but because we think it's the right way to run a business in our community. This policy explains what personal information we collect, why we collect it, and what we do with it.

This policy applies to all personal data collected through our website, booking system and any direct communications with us.

1. Who we are

We are The Common Cyclist Ltd, a company registered in England and Wales. Our trading address is 1 Bellevue Road, Wandsworth, London, SW17 7EG.

If you have any questions about this policy or your personal data, please get in touch at service@thecommoncyclist.com.

2. What personal data we collect

When you book a repair, use our website or contact us, we may collect:

  • Your name

  • Your postcode

  • Your mobile phone number

  • Your email address

  • Payment information — processed securely by our payment provider (Stripe). We never store full card details on our own systems

  • Details of the repair or service you've requested

  • Technical data from your visit to our website, including your IP address, browser type and cookies (see our Cookie Policy for more)

3. Why we collect your data — and our legal basis for doing so

To manage your booking and deliver our service
We need your name, contact details and booking information to arrange your appointment, carry out the repair, notify you when your bike is ready and process payment. This processing is necessary to perform our contract with you.

To keep you updated during and after your repair
We'll contact you if we discover additional issues, need to discuss parts or costs, or when your bike is ready for collection. Again, this is necessary to deliver our service.

To send you marketing communications (with your permission)
With your consent, we'd like to send you occasional updates — new services, seasonal offers, children's bike exchange stock, and upcoming workshops. You can opt out at any time via the unsubscribe link in any of our emails or by contacting us directly. This is based on your consent.

To improve our website and services
We use anonymised analytics to understand how people use our site. This data helps us make improvements and is based on our legitimate interests in running and developing our business. No personally identifiable information is shared with analytics providers.

4. Who we share your data with

We do not sell your data. We do not pass it to third parties for their own marketing. We share information only with:

  • Acuity — our booking platform, to manage your appointment

  • Stripe — our payment processor, to handle your payment securely

  • Email marketing providers (where you've opted into marketing), such as Mailchimp or equivalent — they are contractually required to handle your data securely

  • Any other service providers who assist us in running the business, under strict data processing agreements

We may also be required to share data by law or with regulatory authorities.

5. How long we keep your data

  • Booking and repair records: up to 7 years, for accounting and legal compliance

  • Marketing contact list: until you unsubscribe, or after 3 years of inactivity

  • Website analytics data: held in anonymised form on an ongoing basis

6. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you

  • Ask us to correct inaccurate data

  • Ask us to delete your data (in certain circumstances)

  • Object to processing for marketing purposes

  • Withdraw consent at any time (where processing is based on consent)

  • Ask us to restrict processing in certain circumstances

  • Receive your data in a portable format

To exercise any of these rights, email us at service@thecommoncyclist.com. We'll respond within 30 days.

7. Keeping your data secure

We take reasonable steps to protect your personal data. Payment information is processed exclusively by Stripe and is not stored on our systems. Access to customer records is restricted to those in our team who need it.

8. Cookies

We use cookies on our website. Please see our Cookie Policy for full details on what we use, why, and how to manage your preferences.

9. Changes to this policy

We may update this policy from time to time. When we do, we'll update the date at the top of this page. Significant changes will be communicated to you where we hold your contact details.

10. Complaints

If you're not happy with how we've handled your data, please contact us first — we'd like the chance to put things right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.