1. Who we are

Spindles Bikes ("we", "us") is the data controller for the personal information you provide when booking a repair or service with us.

2. What we collect

• Your name and phone number
• Details of your bike (make, model, colour)
• Details of the work you've booked and any notes you provide
• Records of past services, parts purchased, and payments

3. Why we use it

• To book and carry out the repair you've requested
• To contact you by SMS when your bike is ready to collect
• To keep a record of your service history
• To meet our legal and tax obligations

Our lawful bases are performance of a contract (carrying out the service you booked) and legal obligation (keeping sales records).

4. Who we share it with

We only share your data with service providers we rely on to run the business: our hosting provider (for storing booking data) and our SMS provider (Twilio) for sending you "bike ready" messages. We never sell your data.

5. How long we keep it

We keep customer and sales records for up to 7 years to meet UK tax requirements. After that, records are deleted or anonymised.

6. Your rights

Under UK GDPR you have the right to access, correct, or delete your data, and to object to how we use it. To exercise any of these rights, please contact us in the shop or by phone.

7. Security

Your data is stored on secure servers with restricted access. Only staff at your local shop can view your records.

8. Contact

If you have any questions about this policy or how we handle your data, please speak to us at the shop.