1. Who We Are
Woosh Bikes Ltd is the data controller for this website.
We are based in Southend-on-Sea, Essex, and sell electric bikes and conversion kits to customers in the UK and EU.
Contact us about privacy:
This policy applies to all pages on the Woosh Bikes mobile website (wooshbikes.co.uk/…/mobile/). It covers the UK GDPR and the EU GDPR (for visitors from the European Economic Area).
2. Data We Collect
Contact & Enquiry Forms
When you submit a contact or kit-adviser form we collect your name, email address, and the message you write. We use this solely to respond to your enquiry.
- ✓Legal basis: legitimate interests (responding to customer enquiries)
- ✓Retention: we keep enquiry records for up to 2 years, then delete them
- ✓We do not pass your details to third parties for marketing
Shop Orders
When you place an order we collect your name, delivery address, and email address. These are the only order details we store in our database. Orders are placed without immediate payment — we contact you first to confirm the details, and payment is taken only once you are happy to proceed.
Payment is taken in person or by phone using a NatWest Tyl or Clover card terminal. We never record, or store your card details — all card processing is handled entirely by the terminal.
- ✓Legal basis: performance of a contract
- ✓Retention: order records kept for 7 years (UK tax law requirement)
- ✓Shared with: delivery couriers (name, phone number and postal address only)
Forum
If you post in our forum we store your chosen display name and your message content. Your IP address is logged temporarily to prevent abuse.
- ✓Legal basis: legitimate interests (operating a community forum)
- ✓IP address logs: retained for 30 days
- ✓Posts are public — choose your display name carefully
Web Server Logs
Our web server automatically logs IP addresses, pages visited, and browser type. This is standard web-server behaviour used for security and diagnostics. Logs are retained for 30 days and then deleted.
- ✓Legal basis: legitimate interests (security and fraud prevention)
3. Cookies & Local Storage
What We Use
We use browser local storage (similar to cookies but never sent to the server) and one server-side session cookie. We do not use advertising cookies or tracking pixels.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| wb_cart | Local storage | Saves the items in your shopping cart between page visits | Until you clear it or check out |
| wb_cookie_consent | Local storage | Remembers whether you have accepted or declined optional cookies | Until you clear your browser storage |
| PHPSESSID | Session cookie | Temporary identifier used when posting to the forum or submitting an order. Strictly necessary. | Deleted when you close your browser |
| Google Fonts | Third-party CDN | Loads the Inter typeface from Google's servers. Your IP address is transmitted to Google. | No cookie set, but font files are cached by the browser |
Strictly Necessary vs Optional
- ✓wb_cart and PHPSESSID are strictly necessary for the site to function — they do not require your consent.
- ✓Google Fonts is optional. If you decline cookies, fonts are still loaded (this is a technical limitation). To fully block Google Fonts you can use a browser extension such as uBlock Origin.
- ✓wb_cookie_consent is set only after you interact with the cookie banner.
Change Your Cookie Preference
To reset your choice and see the cookie banner again, clear your browser's local storage for this site, or tap the button below.
4. Third Parties
- ✓Google LLC — supplies the Google Fonts CDN. Google's privacy policy applies: policies.google.com/privacy
- ✓NatWest Tyl / Clover — card terminals used to take payment. We pass no data to them beyond what the terminal reads directly from your card. Their respective privacy policies apply to that transaction.
- ✓Delivery couriers (DPD / Fedex) — receive your name and delivery address only.
- ✓We do not sell personal data. We do not use Facebook Pixel, Google Analytics, or any advertising trackers.
5. Your Rights
Under UK GDPR (and EU GDPR for EEA residents) you have the right to:
- ✓Access — request a copy of the personal data we hold about you
- ✓Rectification — ask us to correct inaccurate data
- ✓Erasure — ask us to delete your data (subject to legal retention obligations)
- ✓Restriction — ask us to limit how we process your data
- ✓Portability — receive your data in a machine-readable format
- ✓Object — object to processing based on legitimate interests
- ✓Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any right, email support@wooshbikes.co.uk or call 01702 684444. We will respond within 30 days.
6. Complaints
If you believe we have handled your data unlawfully you can complain to the Information Commissioner's Office (ICO), the UK supervisory authority:
- 🌐ico.org.uk/make-a-complaint
- ☎0303 123 1113
EEA residents may also lodge a complaint with the supervisory authority in their country of residence.
7. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will change when we do. Material changes will be flagged in the cookie banner.
Questions about privacy?
Call or email us — we're a small, UK-based team and we're happy to explain anything.
01702 684444