Our policy on data collection and your privacy
Our contact details
E-Radicals, 15 King Street, Lancaster LA1 1JN
01524 968000
shop@eradicals.bike The type of personal information we collect
We currently collect and process the following information:
- personal identifiers, contacts and characteristics (for example, name, e-mail address, telephone number, postal address and cycling preferences);
- diagnostic data from electric bikes and connected e-bike systems.
Connected e-bike data rights (EU Data Act)
Pre-purchase information for connected e-bikes
Before purchasing, renting, or leasing any e-bike with connected systems (including Bosch e-bike systems), we inform you that these products generate and collect data about your usage and the bike's performance.
What data do connected e-bikes generate:
- Technical performance data (speed, battery usage, motor performance)
- Usage patterns (riding time, distance, routes when GPS-enabled)
- Component status and diagnostic information
- Maintenance and service data
- Battery charging patterns and health information
Your rights under the EU Data Act:
- Right to access: You can request access to data generated by your e-bike
- Right to data portability: You can request that your e-bike data be transferred to third parties of your choice
- Right to understand data use: You can request information about how your data is processed and used
- Right to object: You can object to certain uses of your e-bike data
Data storage and retention: e-bike-generated data is stored by the manufacturer (e.g., Bosch) and by us for diagnostic and service purposes. Data retention periods vary by manufacturer - typically 2-5 years for technical data.
To exercise your Data Act rights, contact us at shop@eradicals.bike or call 01524 968000. We will coordinate with the relevant manufacturer to fulfill your request within one month.
How we get the personal information and why we have it
Information you provide to us directly: Most of the personal information we process is provided to us directly by you for one of the following reasons:
- being able to contact our customers about matters relating to their bikes or other goods and services they have bought from the shop;
- being able to contact our prospective customers for matters relating to test rides, and to provide information about the products we sell.
Information we collect automatically: We collect some information about you automatically when you visit our website or use our services, like your IP address and device type. This information is useful for us because it helps us get a better understanding of how you’re using our website and services so that we can continue to provide the best experience possible. Some of this information is collected using cookies and similar tracking technologies. See our notice on cookies for more information.
Information we get from third parties: We also receive personal information indirectly, from the following sources in the following scenarios:
- Cycle To Work schemes when prospective customers have created vouchers or provided other information that needs to be sent to us to process the sale of a bike;
- our test ride booking service, HubSpot, when someone books a test ride.
Diagnostic data from electric bikes
Bosch eBike Systems data processing
When servicing Bosch eBike Systems, we connect your e-bike to the Bosch DiagnosticTool 3, which automatically transmits data to Bosch eBike Systems for:
- Processing service requests and warranty claims
- Performing software updates and system configuration
- Product improvement and development
- Resetting detected tampering and enabling components
- Statistical analysis for quality improvement
Data transmitted to Bosch includes:
- E-bike manufacturer, model, and production date information
- Component details (serial numbers, hardware/software versions)
- Performance data (torque, temperature, current, voltages)
- Usage statistics (total riding time, service intervals, charging cycles)
- Configuration and diagnostic information
Legal basis: This processing is based on our contractual relationship with you for service provision and Bosch's legitimate interest in product improvement, subject to your consent under Bosch's Data Processing Agreement.
Your consent: By agreeing to Bosch eBike Systems servicing, you consent to this data processing. You can withdraw consent, but this may limit our ability to provide certain services.
How we use your information
We use the information that you have given us in order to keep in touch with you about things that matter to you, e.g. news about bikes you have enquired about, how a service of your bike is progressing, letting you know that a bike you've ordered has arrived.
How we share your information
We may share your personal information in the following circumstances:
With e-bike manufacturers:
- For warranty claims and technical support
- For safety recalls and product updates
- When you request data to be shared with the manufacturer
- Under the EU Data Act: When you specifically request that your e-bike data be shared with third parties of your choice
With Bosch eBike Systems:
- Automatic data transmission during diagnostic procedures (as detailed above)
- Subject to Bosch's Data Processing Agreement and your consent
With Cycle To Work scheme providers: Where relevant for processing bike purchases
With third parties at your request: Under the EU Data Act, you have the right to request that your e-bike data be shared with third parties. We will coordinate such transfers with the relevant manufacturer within one month of your request.
Customer Notifications and Consent
Pre-sale notifications: Before completing any purchase of a connected e-bike, we will inform you about the data generation capabilities of the product and your rights under the EU Data Act.
Bosch service consent: Before performing any diagnostic work on Bosch eBike Systems, we will obtain your explicit consent for data transmission to Bosch under their updated Data Processing Agreement.
Ongoing consent management: You can manage your consent preferences by contacting us. Withdrawing consent may affect our ability to provide certain services.
Legal basis for processing
Under the UK General Data Protection Regulation (UK GDPR) and EU Data Act, the lawful bases we rely on for processing this information are:
- Your consent. You are able to remove your consent at any time. You can do this by contacting: Jack Lenox, E-Radicals, 15 King Street, Lancaster LA1 1JN, 01524 968000.
- We have a contractual obligation.
- We have a legal obligation (including compliance with EU Data Act requirements).
- Legitimate interest (for product safety, warranty, and improvement purposes).
For connected e-bike data processing, we rely on your explicit consent and our legitimate interest in providing technical support and safety services.
How we store your personal information
Your information is securely stored.
We keep your contact details and e-bike diagnostic data for up to five years after the point of our most recent communication with you. We will then dispose of your information by deleting it from our systems and any third party systems where it is stored. When we dispose of storage drives, we always fully format them and overwrite all data with zeroes.
Third party services
Below, we list the third party services we use, what we use them for, and link to their privacy policies.
Hubspot: we manage enquiries and customer information with this service. Link to Hubspot’s privacy policy.
Zettle: we manage in-store card payments with this service. Link to Zettle’s privacy policy.
Xero: we manage accounting and purchasing information with this service. Link to Xero’s privacy policy.
Where we store your data
The E-Radicals web server is hosted by GreenNet in the UK. The mail server is hosted by Krystal in the UK.
Where organisations who process data on our behalf are based outside the UK or European Economic Area (the EEA), or where data may be transferred outside the EEA, we have put in place agreements to ensure that data is processed to the same standards of protection as European Law.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at shop@eradicals.bike, 01524 968000, or 15 King Street, Lancaster LA1 1JN if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at: E-Radicals, 15 King Street, Lancaster LA1 1JN.
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://ico.org.uk
Last updated: 3 September 2025
