Privacy Policy

1. Data controller

The data controller for customer accounts and the online shop is ForBike.

Contact details for privacy requests are available on the Contact & FAQ page of the website (email and phone published there).

2. Data we collect for accounts

When you create a private or business account we may process:

• email address and password (stored as a secure hash, not in plain text); • first and last name (or company name and VAT / tax ID for business accounts); • phone number; • delivery addresses (street, city, postal code, country); • customer number assigned to your account; • order history, payment status and delivery details; • wishlist / favourites; • workshop booking requests linked to your account; • messages you send via support chat or contact forms; • technical data needed to run the shop (cookies/session for cart and login, preferred language and delivery country).

We do not ask for more data than needed to provide the service.

3. Why we use account data

We use your data to:

• create and manage your customer account and sign-in; • process orders, payments, delivery and returns; • show order history and account settings; • save addresses and wishlist items; • book or handle workshop services; • answer support requests; • send service messages about your orders (status, delivery); • send marketing emails only if you opted in (you can unsubscribe at any time); • protect the shop against fraud and abuse; • meet legal and accounting obligations.

4. Legal basis

Depending on the processing, we rely on:

• performance of a contract (account, orders, delivery); • your consent (optional marketing, non-essential cookies/analytics); • legitimate interests (shop security, improving the service, fraud prevention), balanced against your rights; • legal obligations (tax, accounting, consumer law).

5. How long we keep data

Account data is kept while your account is active. After you delete the account we remove or anonymise personal profile data that is no longer needed.

Order and invoice records may be retained longer where required by law (tax and accounting). Support messages and logs are kept only as long as needed for support and security.

6. Who we share data with

We share data only when necessary:

• payment providers to process card payments; • courier / shipping partners to deliver orders; • hosting and technical service providers that process data on our instructions; • authorities if required by law.

We do not sell your personal data.

7. Cookies and similar technologies

We use cookies and similar technologies needed for the shop (cart, account session, language and delivery country). With your consent we may use additional cookies for analytics and service improvement.

You can change cookie choices in the banner on the site.

8. Your rights (accounts)

Subject to applicable law, you can:

• access and update your profile and addresses in the account area; • change your password; • delete your account from Personal information (you will be asked to confirm with your password); • ask us to correct inaccurate data; • withdraw marketing consent; • object to certain processing or request restriction; • request a copy of your data or deletion where legally possible.

To exercise rights that are not available in the account UI, contact us via the Contact page.

9. Security

We use technical and organisational measures to protect account data, including encrypted transport (HTTPS) and hashed passwords. No online service is completely risk-free; please use a strong unique password and do not share it.

10. Children

The shop and customer accounts are intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child registered an account, contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change. The current version is always published on this page.

12. Contact

For privacy questions about your account or personal data, use the Contact & FAQ page or email published there. We will respond within a reasonable time.