1. Who we are
Bike Parts Guru is a trading name operated from England. We provide online tools to help cyclists check bike component compatibility. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.
Data protection contact: [email protected]
2. What data we collect
Account data
When you create an account we collect your email address, display name, and an authentication token. If you sign in via a third-party provider (e.g. Google) we receive only the data that provider shares (typically name and email).
Bike and build data
Components, bikes, and builds you save to your account are stored so you can access them across sessions.
Analytics data
If you consent to analytics cookies, we collect anonymised usage data via Google Analytics 4 (GA4). IP addresses are anonymised before processing. No personally identifiable information is sent to Google. See our Cookie Policy for details.
Technical data
Our servers automatically log your IP address, browser type, operating system, referral URL, and timestamps for security and operational purposes.
3. How and why we use your data
| Purpose | Data used | Lawful basis |
|---|---|---|
| Providing your account, saved bikes, and builds | Account data, bike/build data | Contract (Art. 6(1)(b)) |
| Understanding how the site is used | Analytics data | Consent (Art. 6(1)(a)) |
| Maintaining security and preventing abuse | Technical/server log data | Legitimate interests (Art. 6(1)(f)) |
| Responding to enquiries | Contact details you provide | Legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, our interest is to operate, secure, and improve the site. You have the right to object to processing based on legitimate interests (see Section 6 below).
4. Who we share data with
We do not sell your personal data. We share data only with:
- Google LLC — analytics data (only with your consent). Google processes this data under the Google Analytics Data Processing Terms.
- Hosting provider — our infrastructure provider processes data on our behalf under a data processing agreement.
5. International transfers
Google Analytics data may be transferred to the United States. This transfer is protected by the UK Extension to the EU-US Data Privacy Framework. Where no adequacy decision applies, we use standard contractual clauses approved by the ICO.
6. Your rights
Under the UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data where there is no compelling reason for continued processing.
- Restriction — ask us to restrict processing of your data in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.
- Withdraw consent — where processing is based on consent (e.g. analytics cookies), you can withdraw at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, email [email protected]. We will respond within one month.
7. Data retention
| Data category | Retention period |
|---|---|
| Account data, bikes, and builds | Duration of your account plus 30 days after deletion |
| Server logs | 90 days |
| Analytics data | 14 months (configured in GA4) |
| Inactive accounts | Deleted or anonymised after 24 months of inactivity |
8. Cookies
We use essential localStorage items and optional analytics cookies. Full details are in our Cookie Policy.
9. Children
Our site is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us and we will delete it promptly.
10. Security
We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure password hashing, and access controls on our infrastructure. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.
12. Complaints
If you are unhappy with how we handle your personal data, please contact us first at [email protected]. We will acknowledge your complaint within 30 days and work to resolve it.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
Information Commissioner's OfficeWycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint
13. Contact
For any questions about this Privacy Policy or our data practices, please email [email protected].