Privacy Policy

This Privacy Policy explains how Cycle Craft processes personal data when users visit the website, submit inquiries, book workshop services, or communicate with us about bicycle servicing and repairs. It also describes the main categories of data we use, the purposes of processing, and the rights available under applicable data protection law.

Effective Date
As stated in this policy
Scope
All users of our services
Questions?
GDPR

GDPR Overview

Cycle Craft processes personal data as a controller for website, booking, workshop, and administrative purposes. Processing is carried out on a lawful basis that may include performance of a contract, steps taken at the request of the user before entering a contract, compliance with legal obligations, legitimate interests, or consent where required. We limit processing to what is relevant for the service relationship and the operation of the website.

Where GDPR applies, it governs our processing of personal data of individuals in the European Economic Area.

This section applies to data subjects protected by GDPR.
GDPR-aware data handling

GDPR Rights

Where GDPR applies, individuals may request access, rectification, erasure, restriction of processing, data portability, or objection to processing. If processing is based on consent, that consent may be withdrawn at any time without affecting prior lawful processing. A request may be refused or limited where the law permits, including where retention is required for legal or operational reasons.

GDPR rights are available subject to the conditions and limits set by law.

How We Use Data

We use personal data to respond to service inquiries, schedule and manage workshop appointments, inspect bicycles, prepare quotes, carry out repairs and adjustments, record parts and service notes, communicate progress, arrange collection, process payments, maintain business records, operate and secure the website, and comply with legal obligations. We may also use limited data to improve service coordination and to send seasonal maintenance reminders where permitted.

Processing is limited to the operational and legal purposes described here.

Service Providers

We may share personal data with trusted service providers that support website hosting, communications, payment processing, analytics, or administrative operations. These parties may process data only for the services they provide to us and are expected to handle it under appropriate confidentiality and security obligations. We do not authorize them to use the data for their own independent purposes.

Service providers receive only the information needed to perform their assigned function.

Legal Disclosure

We may disclose personal data when required to comply with law, a court order, a lawful request from a public authority, or another binding legal obligation. We may also share information where disclosure is necessary to establish, exercise, or defend legal claims, or to protect the rights and safety of the business, users, or others.

Disclosure to public authorities is limited to situations where a legal duty applies.

Depending on the circumstances, users may have rights to access their data, request correction of inaccurate information, ask for deletion, object to certain processing, or request restriction of use. Where processing is based on legitimate interests, users may object on grounds relating to their particular situation. Some requests may not be granted if we must keep the data for legal, accounting, or service documentation purposes.

Available rights depend on the legal basis and the nature of the processing involved.

To exercise a privacy right, a user should provide enough information for us to identify the relevant record and understand the request. We may ask for additional details to confirm identity or to clarify the scope of the request. We will respond within the period required by applicable law and will explain any lawful refusal or limitation.

Requests are handled after reasonable verification of identity and scope.

We retain personal data for the period needed to handle inquiries, manage bookings, complete repairs, issue service summaries, maintain business records, and meet legal obligations. When data is no longer required, it is deleted, anonymized, or archived in a form that is no longer actively used, subject to any retention duty that applies.

We keep personal data only for as long as needed for the stated purpose or legal retention.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or internal practices. The revised version will apply from the date it is published unless a different effective date is stated. Users should review the policy periodically to stay informed about current processing practices.

We review this policy when our processing practices or legal obligations change.
01 · Collection

Data We Collect

We may collect identification and contact details, service inquiry information, bicycle intake and repair details, appointment and collection records, payment-related information, communication content, and limited technical data such as device and browser information. Where relevant, we also process information needed to assess the condition of a bicycle, prepare a quote, complete the requested service, and record the service summary.

The categories of data collected depend on how users interact with the website and workshop services.
02 · Sources

How We Collect Data

We receive data when a user submits an inquiry, books a service, brings in a bicycle for inspection or repair, communicates with the workshop, or makes a payment. We also obtain limited data from website operation, such as form submissions, cookie records, and basic usage logs, and from service-related notes created during inspection, repair, and collection.

Most information is provided directly by the user, while some technical data is generated automatically during site use.
03 · Cookies

Types of Cookies

We may use essential cookies to support site operation, preference cookies to remember basic settings, and analytics cookies to understand how the website is used. Cookies may be session-based or persistent depending on their purpose. We do not rely on cookies for purposes beyond those described in this policy.

Cookie use is limited to common website functions and basic measurement where enabled.
04 · Controls

Cookie Controls

We use standard cookie controls for essential and non-essential cookies. Users may block or delete cookies through their browser settings, and some browsers allow cookies to be cleared automatically when the session ends. If cookies are disabled, parts of the website may not function as intended.

Cookie preferences can be adjusted through browser settings and, where available, site controls.

Contact Information

Privacy email
Privacy phone
+370 614 58624
Postal address
Vakarinis aplinkkelis 18, 48182 Kaunas
Privacy contact