Privacy notice
Last updated: 30 July 2026
Who we are
The data controller is A55 Motorcycles, Victoria Garage, High Street, Penmaenmawr, Conwy, LL34 6NF. Website: https://a55motorcycles.co.uk
Privacy requests: paulknight@hotmail.co.uk (or a55motorcycles@gmail.com for privacy-specific requests). Phone: (07936) 080-586.
What personal data we collect and why
We collect personal data that you provide directly through this website.
- Contact, repair, bike enquiry, and selling forms. Name, email address, optional phone number, and your message or bike details. We use this to respond to you and to take steps you have asked for before a sale or repair. Lawful basis: taking steps at your request before entering a contract (UK GDPR Article 6(1)(b)), and legitimate interests in answering general correspondence (Article 6(1)(f)).
- Review form. Name, email, optional phone, and review text. Contact details are used only if we need to follow up. If you agree, we may moderate and publish the review with your first name and surname initial. Lawful basis for handling the submission: legitimate interests / steps toward a service relationship; lawful basis for publishing: your consent (Article 6(1)(a)), which you can withdraw.
- Completed sales and workshop records. Where an enquiry becomes a transaction, we retain records needed for tax, accounting, warranty, and legal obligations (Article 6(1)(c) and (b)).
- Technical security data. Short-lived IP address processing for spam protection and rate limiting, plus hosting/security logs operated by our providers. Lawful basis: legitimate interests in keeping the site secure (Article 6(1)(f)).
Name and email are required on forms so we can reply. Phone is optional. We do not operate an online shop or take card payments through this website.
How long we keep data
- Routine closed or unanswered enquiries: typically up to six months.
- Transaction and workshop records: for the periods required by tax, accounting, warranty, and other legal obligations.
- Published reviews: while the review remains on the site, or until you withdraw consent and we remove it.
- Rejected review drafts: deleted within 30 days.
- Rate-limit data: kept only briefly in memory on the server.
Who we share data with
We use service providers (processors) to run the website and deliver messages. They only process data on our instructions:
- Hostinger — website hosting
- Resend — email delivery of form submissions
- Sanity — content management and review drafts awaiting approval
- Our business mailbox provider — receiving and storing enquiry emails
Some providers may process data outside the UK. Where that happens, we rely on their data processing terms and lawful transfer safeguards (such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum). We do not sell your personal data.
Cookies and similar technologies
The public website does not set non-essential cookies and does not use analytics or advertising trackers. Essential hosting and security processing may occur as part of delivering the site. If we introduce analytics, advertising, or other non-essential storage in future, we will update this notice and put a consent mechanism in place first.
Your rights
Under UK GDPR you can ask us to:
- access the personal data we hold about you
- correct inaccurate data
- erase data in certain circumstances
- restrict or object to certain processing
- receive data you provided in a portable format where applicable
- withdraw consent for publishing a review at any time
We aim to respond within one month. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/.
How we protect your data
- The website is served over HTTPS (TLS).
- Access to enquiry emails is limited to people who need them to respond.
- Visitor-submitted reviews are held as drafts until an authorised person publishes them.
- Published reviews show only a minimised display name (first name and surname initial).