Privacy policy

Last updated: 10 Dec, 2025

This Privacy Policy explains how Prime Pedals Ltd (“Prime Pedals”, “we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit or make a purchase from primepedals.com (the “Site”). 

We are committed to complying with the General Data Protection Regulation (GDPR) and all applicable UK data-protection laws.


1. Who We Are (Data Controller) 

Prime Pedals Ltd

Unit 23, B&S Business Centre, Saffron Way, Leicester, LE2 6UP, UK

Email: support@primepedals.com

 We act as the data controller for all personal information collected through our website.


2. Personal Data We Collect

We collect information in the following categories:

A. Information You Provide

  • Name
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment method details (processed securely through third-party providers — we do NOT store card numbers)
  • Messages sent through forms, email, WhatsApp, or chat

B. Information Collected Automatically

  • IP address
  • Device type
  • Browser type
  • Pages viewed and time spent
  • Cookies & tracking data
  • Approximate location (based on IP)

C. Information from Third Parties

  • Shopify (ecommerce platform)
  • Payment gateways (e.g., Stripe, PayPal)
  • Delivery partners
  • Analytics tools


3. Legal Basis for Processing (GDPR Article 6)

 

We process your data under the following lawful bases:

Purpose

Legal Basis

To process and deliver your order

Contract

To communicate with you

Legitimate Interest

Fraud prevention and security

Legitimate Interest

Email or WhatsApp marketing

Consent

Using cookies for analytics / marketing

Consent

Record keeping for tax compliance

Legal Obligation


4. How We Use Your Information

We use personal data to:

  • Process orders and payments
  • Deliver your items and provide updates
  • Respond to inquiries and support requests
  • Improve our website and customer experience
  • Prevent fraud and ensure platform security
  • Send marketing messages if you have given consent
  • Comply with legal requirements

 We do not sell your personal information.


5. Sharing Your Personal Data

We only share your data with trusted partners who support our operations:

  • Shopify (store management & hosting)
  • Payment processors (Stripe, PayPal, Shopify Payments)
  • Shipping & courier companies
  • Analytics providers
  • Marketing platforms (only if you consent)

 Each provider is GDPR-compliant and processes data on our behalf under signed agreements.


6. International Data Transfers 

Some service providers (including Shopify) may process data outside the UK/EU. 

We rely on GDPR-compliant safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Secure data-processing agreements

These ensure your data remains protected regardless of location.


7. Data Retention

We keep your information only as long as necessary:

Type of Data

Retention Period

Order & transaction data

7 years (legal requirement)

Customer account

Until account deletion

Marketing data

Until you withdraw consent

Contact messages

1–2 years

Cookies

Based on cookie type (6–24 months)


8. Your Rights Under GDPR

 You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Withdraw consent at any time
  • Object to processing
  • Request a copy of your data (portability)
  • Restrict processing
  • Lodge a complaint with a data protection authority

 To exercise any rights, email us at:

📩 support@primepedals.com


9. Cookies & Tracking

 We use cookies for:

  • Site functionality
  • Analytics
  • Marketing & advertising
  • Personalisation

 When you first visit the site, you will be asked to accept or reject cookies.

You may also change your cookie settings anytime.


10. Security Measures

 We use technical and organisational measures to protect your data, including:

  • Encrypted connections (SSL)
  • Secure payment processing
  • Access controls
  • Monitoring for suspicious activity


11. Children’s Privacy

 Our services are not intended for children under 16.

We do not knowingly collect data from minors.


12. Changes to This Policy

 We may update this policy when needed.

The updated date will always be shown at the top.


13. Contact Us

 If you have questions or want to exercise your GDPR rights:

 📩 support@primepedals.com

We respond to all requests within 30 days.