This Data & Privacy page explains how Brightwheel Brighton manages personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We handle all data with care, respect, and transparency. This document applies to our website, booking forms, email interactions, and any direct messages you send to us.
We collect only what is necessary to manage bookings, respond to enquiries, and keep the service functioning smoothly. The main categories include:
We process personal information under the following lawful bases:
Your details help us confirm bookings, prepare bikes, and contact you if plans change. Aggregated analytics guide us in improving the website layout, not to build marketing profiles. We never sell or rent personal data.
We store information on secure UK or EU servers protected by modern encryption and restricted access. Physical copies (if any) are kept in a locked cabinet within our Brighton office. Staff access is limited to those directly responsible for bookings or technical maintenance.
Personal data linked to bookings is retained for up to 24 months to support potential queries or legal requirements. Non-essential messages and routine correspondence are deleted sooner. Aggregated statistics contain no personal identifiers.
Under UK GDPR, you have rights to:
To exercise these rights, contact us at [email protected] or by post at 22 Trafalgar Street, Brighton BN1 4EQ, England.
We use a limited number of external partners, such as payment processors and analytics providers. Each partner operates under its own data-protection terms aligned with UK/EU standards. We ensure they only access the information essential to their function.
Our website uses functional and minimal performance cookies (see Cookie Choices for details). Data from cookies helps us maintain site performance and track anonymous visit counts. You can change your cookie preferences anytime.
We generally keep all information within the UK or EEA. If occasional transfers occur (e.g., cloud backup in another region), they are protected by standard contractual clauses approved by the UK ICO.
This policy may be updated to reflect legal or operational changes. The “last updated” date appears at the top of the page. Continued use of the website indicates your acceptance of any updates.
We’ll respond to verified privacy requests within 30 days.
We use a small set of cookies to keep forms steady and to understand basic visit patterns. Choose what suits you below—browsing continues whichever option you pick.