Privacy policy

Last updated 29 October 2026

This policy explains what personal information we collect when you visit bikesonroof.co.uk or buy from us, why we need it, who we share it with and what your rights are.

Who we are

Bikes On Roof is run by BIKESONROOF, 15-17 Vale Road, Tunbridge Wells, Kent. TN1 1BS. We are the data controller for the personal information described here.

For anything about your personal information, email [email protected].

What we collect and why

When you place an order

Our checkout is run by Stripe. When you order, we receive:

• your name, email address and phone number
• your delivery address, and billing address if different
• what you ordered, how much you paid and when

We use this to take payment, post your order, send your receipt, and deal with any questions, cancellations or returns. The legal basis is that we need it to carry out our contract with you. We also keep order records because tax and accounting law requires us to.

Your card details go straight to Stripe. We never see or store your full card number.

When you email us

We keep your name, email address and what you tell us so we can reply and help. The legal basis is our legitimate interest in answering questions from customers and potential customers.

When you visit the website

• Server logs. Like most websites, our server records technical details of each visit, such as your IP address, browser type and the pages requested. We use these to keep the site secure and working. The legal basis is our legitimate interest in running a secure website.
• Your basket. Your basket is saved in your browser’s local storage, so it’s still there if you reload the page. It stays on your device and isn’t sent to us until you go to checkout. It’s cleared when you complete an order.
• Fonts. The website loads its fonts from Google Fonts, which means your browser connects to Google and shares your IP address with it.

Google Analytics cookies (only if you agree)

If you click Accept on our cookie banner, we use Google Analytics to understand how people use the site: which pages they visit, roughly where they’re visiting from, what device they use, and whether they add packs to their basket or buy. This helps us improve the site. The legal basis is your consent.

Google Analytics sets cookies called _ga and _ga_4Z3ZCY8Q3X, which last up to two years. Google receives your IP address and information about your device and visit. If you click Reject, or don’t choose, Google Analytics isn’t loaded at all.

You can change your mind at any time using the cookie settings link at the bottom of every page. Your choice is saved in your browser so we don’t ask again on every visit.

We don’t use advertising cookies, and we don’t track you across other websites.

Who we share it with

We don’t sell your personal information. We only share it with organisations that help us run the shop:

Stripe

takes payments, runs the checkout and sends receipts. See Stripe’s privacy policy.

Royal Mail

delivers your order, so your name and delivery address go on the parcel.

Our hosting provider

stores the website and its server logs.

Our email provider

stores emails you send us and our replies.

Google

serves the website’s fonts and, if you agree, provides Google Analytics. See Google’s privacy policy.

We may also share information if the law requires it, for example with HMRC.

Some of these organisations may process information outside the UK. Where they do, they use legal safeguards approved under UK data protection law, such as the UK’s International Data Transfer Agreement or adequacy regulations.

How long we keep it

• Order records: six years from the end of the tax year of your order, as tax law requires.
• Emails: up to two years after our last contact, unless they relate to an order, in which case we keep them with the order.
• Server logs: up to 90 days.
• Google Analytics data: 14 months, after which Google deletes it.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that’s wrong or incomplete
• ask us to delete your information, where we don’t need to keep it
• ask us to limit how we use your information, or object to us using it
• ask for information you gave us in a format you can pass to someone else

To use any of these rights, email [email protected]. We’ll reply within one month. There’s normally no charge.

Complaints

If you’re unhappy with how we’ve handled your personal information, please tell us first at [email protected]. We’ll acknowledge your complaint within 30 days, look into it, and let you know the outcome.

You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we use personal information, we’ll update this page and the date at the top.