Privacy Policy

Last Updated: 4/8/2025

Welcome to Spire Carbon Works (“we”, “us”, or “our”). We are committed to protecting your personal data and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains:

What personal data we collect
How and why we collect it
How we use and share your data
Your data protection rights
How to contact us
Our specific policies regarding children

1. Who We Are

Data Controller:

Spire Cycle Works

The Old Dairy, Upwood, Sixpenny Handley, Salisbury, SP5 5PQ

Email: matt@spirecycles.co.uk

Phone: 07825666412

We are the “data controller” for the purposes of UK data protection laws, which means we determine the purposes and means of processing your personal data.

2. What Data We Collect

We may collect, use, store and transfer different kinds of personal data about you, including:

a. Identity and Contact Data

Full name
Email address
Phone number
Address
Username or similar identifier

b. Technical Data

IP address
Browser type and version
Device type and operating system
Login data
Time zone setting and location
Usage data (e.g. page visits, clicks)

c. Marketing and Communications Data

Preferences for receiving marketing from us or third parties
Communication preferences

d. Payment and Transaction Data (if applicable)

Billing address
Payment details (note: we do not store credit/debit card numbers directly)

e. Special Category Data

We do not intentionally collect any special category data (e.g., race, religion, health data) unless explicitly required with your consent.

3. How We Collect Your Data

We use different methods to collect data from and about you including:

a. Direct Interactions

You may give us your data by:

Filling in forms on our website
Subscribing to our newsletters
Creating an account
Contacting us

b. Automated Technologies

We automatically collect technical data about your browsing using:

Cookies
Server logs
Analytics tools (e.g., Google Analytics, Hotjar)

c. Third Parties

We may receive personal data from:

Payment providers
Analytics providers
Social media platforms (if you interact with us there)
Advertising networks

4. Why We Collect Your Data

We only use your data when the law allows us to. Most commonly, we use it:

To provide access to our services and website features
To process transactions and send invoices or confirmations
To respond to queries and offer customer support
To personalise your experience
For analytics and site improvement
For marketing (only with your consent or where otherwise permitted)
To comply with legal obligations

Legal bases for processing may include:

Your consent
Performance of a contract
Legal compliance
Our legitimate interests (e.g., to improve our services or prevent fraud)

5. Sharing Your Data with Third Parties

We will not sell your personal data.

We may share your data with:

Service providers (e.g., hosting companies, payment processors, analytics services)
Professional advisers (e.g., accountants, legal advisors)
Law enforcement or regulators if legally required
Third-party marketing partners (only with your consent)

All third parties are required to respect the security of your personal data and to treat it in accordance with the law.

6. International Data Transfers

Some of our service providers are located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the ICO
Transfers to countries with adequate data protection standards

Data Security

We have implemented appropriate technical and organisational measures to secure your personal data, including:

HTTPS encryption
Firewalls and anti-malware software
Role-based access controls
Data pseudonymisation (where appropriate)

Despite our efforts, no online transmission is ever fully secure. Please take steps to protect your own data as well.

8. Data Retention

We will only keep your personal data as long as necessary for the purposes outlined in this policy, including:

For legal, tax, and accounting requirements
To resolve disputes or enforce agreements

When we no longer need your data, we will securely delete or anonymise it.

9. Your Legal Rights (UK GDPR)

You have the following rights:

Right to Access – Request a copy of the data we hold about you
Right to Rectification – Request correction of inaccurate or incomplete data
Right to Erasure – Request deletion of your data (“right to be forgotten”)
Right to Object – Object to processing based on legitimate interests or direct marketing
Right to Restrict Processing – Ask us to suspend processing of your data
Right to Data Portability – Request your data in a structured format
Right to Withdraw Consent – Where we rely on consent, you can withdraw it at any time

To exercise your rights, contact us at: matt@spirecycles.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/

10. Children’s Privacy

Our website is not intended for or directed at children under the age of 13, and we do not knowingly collect personal data from children.

If we become aware that we have inadvertently collected data from a child without parental consent, we will delete that information promptly. Parents or guardians may contact us at matt@spirecarbonworks.com.

11. Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and collect analytics. You can manage cookie preferences through our cookie banner or browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email (if applicable) or by posting a notice on our website.

Please check this page periodically for the latest version.