Mercia Website Privacy Policy

Mercia Cycles Privacy Policy

This policy was last updated: 25/09/2024

Date to be reviewed: 25/09/2026

At Mercia Cycles, we prioritise the privacy and security of your personal information. We are

dedicated to complying with the General Data Protection Regulation (GDPR) and all applicable

laws and regulations. This Privacy Policy outlines how we collect, use, store, and protect the

personal information of our website visitors and customers.

This policy forms an essential part of our terms and conditions and serves to help you understand

the processes surrounding the handling of your data.

CCTV Policy

Mercia Cycles operates CCTV systems at our premises for the purpose of crime prevention,

safety, and security. Our use of CCTV complies with the GDPR and Data Protection Act 1998,

ensuring that your privacy is respected while providing a safe environment for customers, staff,

and visitors.

1. Purpose of CCTV

- Safety & Security: CCTV is used to monitor key areas of our premises to safeguard our

customers, staff, and property.

- Crime Prevention: CCTV footage helps deter criminal activity and, if necessary, provides

evidence in the event of an incident.

2. CCTV Data Collection

- The cameras collect video footage, but not audio.

- CCTV covers public areas within our premises, including the entrance, bike storage areas, and

customer service points.

- All footage is securely stored and only accessible by authorised personnel.

3. Retention of CCTV Footage

- CCTV footage is retained for a maximum of 30 days, unless an incident occurs that requires us

to retain footage for a longer period. In such cases, footage may be kept as long as necessary to

complete investigations or legal proceedings.

- After the retention period, footage is securely deleted.

4. Access to CCTV Footage

- Access to CCTV footage is restricted to authorised personnel within Mercia Cycles, such as

security personnel or management.

- CCTV footage may be shared with law enforcement agencies upon request, where it is

necessary for the investigation of an incident or crime.

- In line with GDPR, you have the right to request access to footage that contains your image. You

can make a Subject Access Request (SAR) by contacting us at office@merciacycles.com. We may

need to verify your identity and will respond within one month of receiving your request.

5. Signage

- Clear signage is placed at entry points and around the premises to inform individuals that CCTV

is in operation.

6. Data Subject Rights Regarding CCTV

In addition to your general rights under GDPR, as outlined below, you also have the right to:

- Request access to CCTV footage featuring your image.

- Request rectification or erasure of footage if it is inaccurate or unlawfully processed.

- Object to processing, under certain conditions, if it affects your rights and freedoms.

---

Information We Collect

We collect personal information you provide to us, which may be processed under the provisions

of the Data Protection Act 1998 and subsequent GDPR legislation.

1. Information You Provide

- Contact Forms: Through our “Contact Us” page, you can reach us via email. To process your

inquiry, we request your name, email, phone number, and business name. We collect this data

to respond to your inquiries and provide relevant information about our products and services.

We process this information on the grounds of legitimate business interests or contractual

obligations.

- Cycle Hire and Wavier Forms -

- Social Media: We engage with users via social media platforms. While we do not retain

personally identifiable information about individual users on these platforms, we do track

aggregate data, such as follower counts.

If no further action is taken after an inquiry, your personal data will be deleted according to our

data retention policy.

2. Information We Obtain from Other Sources

Occasionally, we may collect data about you from third-party sources where it is necessary to

fulfil our services or where it is legally permitted.

3. Cookies

We utilise cookies to enhance your browsing experience. For more information, refer to our

Cookie Policy available at [Mercia Cycles Cookie Policy Link].

---

How We Use Your Information

As the Data Controller, Mercia Cycles undertakes to ensure the security of your personal data,

utilising measures in line with the GDPR. The information you provide is used to:

- Manage and administer our website;

- Personalise your user experience on our website;

- Respond to inquiries and follow up with emails or other forms of communication;

- Send marketing communications where consent has been expressly provided;

- Gather feedback and reviews for products and services;

- Provide third parties with non-identifiable statistical information;

- Address any complaints or queries related to our services.

All personal information is provided voluntarily, and users provide their data at their own risk.

---

Sharing Your Information

1. Data Disclosure

We do not sell or share your personal data with third parties unless required to do so by law or

where needed to deliver our services. Any contractors working on our behalf are bound by signed

agreements to ensure they comply with data protection laws.

2. Marketing Communications

You will only receive direct marketing emails from us if you have expressly consented. You can

withdraw your consent at any time by contacting us at office@merciacycles.com

3. Legal Requirements

We may disclose your personal information if required to do so by law or in connection with legal

proceedings to protect our legal rights.

---

Data Retention

We retain personal information only for as long as it is necessary to fulfil the purposes for which it

was collected or as required by law. Personal data will be securely disposed of when no longer

required, following our **Data Retention Policy**.

---

Data Storage

Your personal data may be stored in cloud-based systems, with servers located within the UK or

European Union (EU), ensuring compliance with the **Data Protection Act 1998** and GDPR.

---

External Links

Our website may contain links to third-party sites. Mercia Cycles is not responsible for the content

or privacy practices of external websites. Users are advised to be cautious when clicking on any

external links.

---

Social Media

Our social media platforms adhere to the terms and conditions of the respective platforms. While

we use social media for engagement, users should avoid sharing sensitive personal information

over these platforms and instead contact us directly via email or telephone for confidential

matters.

---

Data Subject Rights

In compliance with GDPR, users have the following rights regarding their personal data:

1. Subject Access Requests (SARs)

You have the right to access your personal data held by us. To make a SAR, please contact us at

office@merciacycles.co.uk. We will respond within one month of receiving your request.

2. Right to Rectification

If the data we hold about you is incorrect or incomplete, you have the right to request rectification.

3. Right to Erasure

You have the right to request the deletion of your personal data without providing a reason. We

will process this request promptly.

4. Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your

data, particularly if the data is inaccurate or processed unlawfully.

5. Right to Data Portability

You have the right to request a transfer of your personal data to another service provider.

6. Right to Object

You may object to the processing of your data, including profiling, unless there are legitimate

grounds for doing so.

7. Automated Decision-Making

We do not use any systems that make automated decisions based on your personal data.

To exercise any of these rights, please contact us via office@merciacycles.com

---

Complaints

If you have any concerns about how we handle your personal data, you can reach out to our Data

Controller at office@merciacycles.co.uk. Alternatively, you can file a formal complaint with the

Information Commissioner’s Office (ICO) at [https://ico.org.uk](https://ico.org.uk).

---

Changes to This Policy

We reserve the right to update this privacy policy periodically. Any changes will be reflected on

this page, and your continued use of our services following any amendments will signify your

acceptance of these updates.

---

Contact Information

If you have any questions or concerns about this policy, please contact us via email at

office@merciacycles.com