[/lvca_panel][lvca_panel panel_title=”Who Are Criterium Cycles?”]
We are a Limited Company (our full name is Criterium Cycle Company Limited), we are privately owned and run and are based just outside Edinburgh, Scotland in the United Kingdom. Our main business is the retailing of bikes, cycle clothing and accessories plus we also provider other services such as custom build of bikes and repair / workshop services.
We love cycling and we try to bring our customers the most interesting stories and experiences from around the cycling world using various means such as our blog, our social media channels and regular emails and other forms of communication which we send to those who have subscribed to receive them.
[/lvca_panel][lvca_panel panel_title=”The Law”]The law on data protection sets out a number of different reasons permitting a company such as Criterium Cycles to collect and process your personal data. These include:
If you sign up to receive our email newsletters and communications for example, then that is you giving us your consent to process your contact details for this purpose. You can withdraw your consent at any time by contacting us.
If you order buy something from our shop in Edinburgh, we will usually need to take name and address details, primarily so that we can provide you with proof of purchase and warranty support.
Some of our customers acquire bikes through us using the Cycle to Work Scheme. We act as partners of a number of the leading Cycle to Work Scheme providers. We do need to keep some details of Cycle to Work scheme transactions in order to comply with our obligations to the scheme provider.
In certain circumstances we need to use your data in order to run our business. As a business we believe that we have a legitimate interest in doing this but that it does not significantly impact your rights or interests.
Sometimes, we are legally required to pass on information to appropriate agencies. For instance, we are allowed to pass on details of anyone suspected of being involved in criminal activity but we will only do this in compliance with the law.
[/lvca_panel][lvca_panel panel_title=”When Do We Collect Your Personal Data?”]The main ways we collect your data are the ones listed below:
[/lvca_panel][lvca_panel panel_title=”What kinds of personal data do we collect?”]
[/lvca_panel][lvca_panel panel_title=”Why do we use your personal data?”]We want to give you the best possible customer experience and the personal data we collect about you allows us to do that. If you wish to change how we use your data, then you can find out more about this in the section below entitled “Your rights over your data”. Please note though that if you change or restrict what we can use your data for, we may not be able to provide you with all the services you would like or have asked for.
[/lvca_panel][lvca_panel panel_title=”How do we protect your personal data?”]Data security matters to everyone so at Criterium Cycles so we treat your data with the greatest of care and as if it were our own personal data. We take appropriate steps to protect it.
Our website is protected using ‘https’ technology. Access to your personal data is password-protected and / or encrypted as appropriate, and sensitive data is secured by SSL encryption.
[/lvca_panel][lvca_panel panel_title=”How long do we keep your personal data?”]We’ll only keep your personal data for as long as is necessary having regard for the purpose for which it was collected. We will keep transactional information for 6 years after the transaction has ended after which we will securely delete your data. If you have signed up for our newsletters, we will send this to you with your consent. If you have not engaged with for 3 years we will ask if you still want to hear from us. If you do not respond we will delete or anonymise your data.
[/lvca_panel][lvca_panel panel_title=”Who do we share your personal data with?”]
We use a proprietary EPOS (Electronic Point of Sale) system called Ascend which is where all transactional data from our Edinburgh store is kept. We use a third party to help us manage our marketing dataset and to send messages and emails to our subscribers. We apply the following policies with any such third party to keep your data safe:
We use V12 Retail Finance to provide you with financial services if requested by you. We do not store any bank details or card details on our systems (we are fully PCI compliant) and use Global Payments (a partner of HSBC Bank) to provide us with payment services in our Edinburgh store.
We will only do this in very specific circumstances such as:
[/lvca_panel][lvca_panel panel_title=”Where your personal data may be processed”]Sometimes we will need to transfer your personal data to our third parties and suppliers who are outside the European Economic Area (EEA). We use a third party email marketing data partner based in the US who are GDPR compliant themselves. If you have any queries about how your personal data is processed and managed, please contact us at [email protected].
[/lvca_panel][lvca_panel panel_title=”Your rights over your personal data”]
You have the right to request:
To ask for a copy of your personal data, please email us at [email protected] and enter the phrase Data Protection Request either in the subject line of the email or as a heading in the body of the email. Alternatively, if you prefer, you may write us at Criterium Cycle Company Limited, Unit 3 Dobbies Garden World, Melville Nurseries, Lasswade, Edinburgh, EH18 1AZ.
To ask for your information to be amended, please either login and update the details in your online account or email us at [email protected] setting out clearly your request. If we choose not to action your request we will explain to you the reasons for our refusal.
You have the right to stop the use of your personal data for direct marketing activity through any or all channels. We will always comply with your request. To stop us using your personal data for direct marketing you can:
[/lvca_panel][lvca_panel panel_title=”Contacting the Regulator”]If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. Please do contact us first, and we will do our best to help you. You can contact the ICO by calling 0303 123 1113 or go online to www.ico.org.uk/concerns. If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.