Privacy policy

Updated 20 May 2026

Data controller

Ignition Limited (trading as ebikeist), company number 11234792, 3 The Piggery, Little Dartmouth, Dartmouth, TQ6 0JP, United Kingdom.
Email: hello@ebikeist.com
Phone: 03330 151 979
ICO registration: ZC088440

About this policy

This Privacy Policy explains how Ignition Limited (trading as ebikeist) collects, uses, stores and shares personal data about visitors to ebikeist.com and our customers. It applies to anyone who buys from us, contacts us, signs up to our newsletter, or browses our website.

We are committed to processing your personal data fairly, transparently and in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

What personal data we collect

Depending on how you interact with us, we may collect:

  • Contact details: name, billing and delivery address, email address, phone number.
  • Financial information: payment-card data is processed by Shopify Payments and never stored by us; finance applications are handled by Novuna Consumer Finance.
  • Account information: account login if you create one with us, order history, communication preferences.
  • Transaction information: what you bought, when, delivery method, returns history.
  • Communications: emails, phone calls, contact form submissions, social media interactions.
  • Device and usage information: IP address, browser type, pages viewed, referrer, cookies (see Cookies section below).

How we use your data

We process personal data to:

  • Process and fulfil your orders, including delivery and after-sales support
  • Take payments and process refunds
  • Provide customer support and respond to your enquiries
  • Send transactional emails (order confirmations, shipping updates, return updates)
  • Send marketing communications where you have opted in (our newsletter)
  • Improve our website and product range based on aggregated analytics
  • Prevent fraud and protect our legal interests
  • Comply with our legal obligations (tax records, consumer law, regulatory requirements)

Lawful bases for processing

We rely on one or more of the following lawful bases under UK GDPR Article 6:

  • Contract: to process your order and provide the services you have asked for.
  • Legitimate interests: to run our business, prevent fraud, and contact existing customers about products related to past purchases.
  • Consent: for marketing emails and for non-essential cookies. You can withdraw consent at any time.
  • Legal obligation: to keep tax and accounting records as required by HMRC.

Who we share your data with

We share personal data only with the providers we need to run our business. These are:

  • Shopify Inc. (e-commerce platform, payment processing, website hosting)
  • HubSpot (CRM, contact form submissions, support email tracking, newsletter management)
  • Mailchimp (email marketing where used for specific campaigns)
  • Alhena (AI customer support platform handling chat, email and support enquiries on our behalf; processes customer messages, names, email addresses and order details)
  • Google LLC (Google Analytics, Google Ads, Google Search Console, Google Merchant Center, Google Business Profile)
  • Novuna Consumer Finance (credit broker referrals for 0% finance)
  • Cyclescheme and Green Commute Initiative (Cycle to Work scheme administration)
  • Specialist bike couriers (delivery)

We do not sell your personal data. We only share with these providers where it is necessary to deliver the service to you. Each provider acts as a data processor and is bound by a data-processing agreement with us.

How long we keep your data

We keep personal data only as long as we need it:

  • Customer purchase and transaction records: 6 years from end of accounting period (HMRC minimum retention).
  • Email marketing list: until you unsubscribe. Unsubscribing is one click in any newsletter.
  • Contact form submissions: 24 months for follow-up purposes.
  • Support email correspondence: for the life of the customer relationship plus 2 years.
  • Website analytics (Google Analytics): 14 months.

When data is no longer needed for the purpose for which it was collected, we delete it or anonymise it.

Your rights

Under UK GDPR you have the following rights in relation to your personal data:

  • Right of access: ask for a copy of the personal data we hold about you.
  • Right to rectification: have inaccurate or incomplete data corrected.
  • Right to erasure: ask us to delete your data (subject to legal retention requirements).
  • Right to restrict processing: ask us to stop using your data in certain ways while we resolve a query.
  • Right to data portability: receive your data in a structured, commonly used, machine-readable format.
  • Right to object: object to processing based on our legitimate interests, including direct marketing.
  • Right to withdraw consent: where we rely on consent (marketing, non-essential cookies), you can withdraw it at any time.

To exercise any of these rights, please email hello@ebikeist.com. We will respond within one calendar month.

If you are resident in the European Economic Area, equivalent rights apply under the EU GDPR. Note that the UK and EEA are separate data protection jurisdictions since 1 January 2021.

Children

Our website and services are not directed at or intended for use by children under the age of 18. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@ebikeist.com and we will delete the data.

Cookies

Our website uses cookies and similar technologies. Essential cookies (for example, those that remember your shopping basket or your cookie preferences) are always on. Non-essential cookies (analytics, advertising, personalisation) are only set with your consent via our cookie banner.

You can change your cookie preferences at any time using the cookie settings link in our website footer, which opens Shopify's cookie preferences panel.

The main cookies and similar technologies we use come from Shopify (cart, session, checkout), HubSpot (visitor tracking and chat), Google (Analytics, Ads, Search Console verification), and Mailchimp (email open and click tracking).

International transfers

Some of our data processors (notably Shopify, Google, HubSpot, Mailchimp) are based outside the United Kingdom, including in the United States and the European Economic Area. Where data is transferred internationally, we rely on UK GDPR-approved safeguards: UK Adequacy Decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum, as appropriate.

Regulator and complaints

Ignition Limited's data controller registration with the Information Commissioner's Office (ICO) is in progress. The registration number will be added to this page as soon as it is issued.

If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint or by phone on 0303 123 1113. We would appreciate the chance to address your concerns first; please contact us at hello@ebikeist.com.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The current version is always available on this page, with the "Updated" date at the top.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal data:

Ignition Limited (trading as ebikeist)
3 The Piggery, Little Dartmouth, Dartmouth, TQ6 0JP
Email: hello@ebikeist.com
Phone: 03330 151 979