Privacy Policy for The Talaria UK
This privacy policy explains what we do with the personal data you give us when you browse this site, place an order for a Talaria electric bike or a part, apply for finance or send us a question. We have kept it specific rather than generic, because a page that lists every possible use of data tells you nothing about what actually happens to yours.
Last updated 11 September 2026. This privacy policy applies to purchases and enquiries made through this website, thetalariauk.uk. It does not cover other sites we link to, which run their own policies.
Who controls your data under this privacy policy
The data controller for the purposes of this privacy policy is The Talaria UK, the operator of this website. Our company registration and VAT details are available on request. Our correspondence address is available on request through our contact page, and we confirm it in writing to anyone who needs to write to us about their data. You can complain to the Information Commissioner’s Office at any time, and the section on complaining to the ICO below explains how.
We process personal data under the UK General Data Protection Regulation and the Data Protection Act 2018. For any question about this privacy policy, or to make a request about your own data, contact us through our contact page.
What we collect
We collect only what an order or an enquiry actually requires, and this privacy policy sets out each category. We do not buy marketing lists, and we do not build profiles of visitors who never contact us.
Order and account data
This privacy policy covers your name, billing address, delivery address, email address and telephone number, the items you bought, the order value and the order history on your account. If you create an account, we also hold your username and a securely hashed password.
Payment data
Card details are entered on the payment provider’s own form and are processed by that provider as a separate controller. We receive a confirmation of the result, the last few digits of the card and a transaction reference. We never see or store your full card number or security code.
Delivery and finance data
Where a delivery needs coordinating, this privacy policy allows the carrier to receive the name, address and telephone number needed to complete it, as set out in our shipping policy. Where you apply for finance through our Talaria finance page, the lender collects and assesses your application directly under its own privacy notice, and tells us only whether it succeeded.
Enquiry and browsing data
Anything you write to us, including photographs and frame numbers sent with a warranty question, plus the technical data every website receives: IP address, browser and device type, pages viewed, and the referring site. This privacy policy covers all of it.
Why we use it and our lawful basis
Every use of personal data described in this privacy policy needs a lawful basis. Ours are contract, legitimate interests, legal obligation and consent, and the table sets out which applies to what. Where the basis is legitimate interests, you can object at any time and we will stop unless we have a compelling reason to continue.
| What we do | Data used | Lawful basis under this privacy policy |
|---|---|---|
| Take and fulfil your order | Order, contact and delivery data | Performance of a contract |
| Take payment and prevent fraud | Transaction reference, order data | Contract and legitimate interests |
| Arrange carriage and book a slot | Name, address, telephone number | Performance of a contract |
| Handle a warranty claim or return | Order data, photographs, frame number | Contract and legal obligation |
| Answer an enquiry | Contact details and message content | Legitimate interests |
| Keep accounting and VAT records | Invoice and transaction data | Legal obligation |
| Send marketing email | Name and email address | Consent, withdrawable at any time |
| Measure how the site is used | Analytics and cookie data | Consent |
| Defend or bring a legal claim | Whatever the claim concerns | Legitimate interests |
How long we keep it
Under this privacy policy we keep data for as long as the purpose requires and no longer. Order, invoice and VAT records are kept for six years after the end of the accounting period, because tax law requires it. Records tied to the warranty on your bike are kept for the life of the cover plus a reasonable margin, so that a later claim can be assessed properly.
Enquiries that do not become orders are deleted within two years. Marketing consents are kept until you withdraw them, and a record of the withdrawal is kept afterwards so that we can prove we stopped. Account data is removed when you close the account, apart from anything a legal obligation requires us to retain.
Who we share it with
We do not sell personal data, and we never share it for another company’s marketing. We do share it, as this privacy policy describes, with the organisations that make an order work.
- Our payment provider, which processes the card transaction as a separate controller
- Carriers and delivery crews, which receive the contact and address data needed to deliver
- The finance lender, where you choose to apply, under its own privacy notice
- Our hosting and website platform providers, which store the site and its database
- Our analytics provider, only where you have consented to analytics cookies
- Our accountants and, where necessary, our legal advisers
- Public authorities, where the law obliges us to disclose something
Each supplier that acts as a processor under this privacy policy is bound by a written contract requiring it to act only on our instructions and to keep the data secure.
Transfers outside the UK
Some of the suppliers named in this privacy policy, particularly in hosting and analytics, operate outside the United Kingdom. Where personal data leaves the UK, we rely either on UK adequacy regulations for the destination country, or on the International Data Transfer Agreement, or on the UK addendum to the European Commission’s standard contractual clauses, together with a transfer risk assessment.
If you would like to know which mechanism applies to a particular supplier, ask us and we will tell you. We will not move data to a country without one of those protections in place.
Your rights over your data
UK data protection law gives you eight rights, and this privacy policy honours every one of them. They are not absolute, and some apply only in particular circumstances, but we will always explain our reasoning if we cannot act on one.
- To be informed. To know what we do with your data, which is what this privacy policy is for.
- Of access. To get a copy of the personal data we hold about you.
- To rectification. To have inaccurate data corrected and incomplete data completed.
- To erasure. To have data deleted where we no longer need it and no legal duty requires us to keep it.
- To restrict processing. To have us pause use of your data while a dispute about it is resolved.
- To data portability. To receive data you gave us in a structured, commonly used, machine readable format.
- To object. To stop processing based on legitimate interests, and to stop direct marketing outright.
- Regarding automated decisions. We make no solely automated decisions with legal or similarly significant effects. A finance decision made by a lender is that lender’s process, and the lender will tell you how to ask for human review.
How to exercise your rights
To exercise any right in this privacy policy, contact us through our contact page with what you want and enough detail for us to find your records, usually the order number or the email address used at checkout. There is no charge. We respond within one month, and we will tell you if a complex request needs longer, which the law permits up to a further two months.
We may ask you to confirm your identity before we release anything, because sending your order history to somebody claiming to be you would be a far worse failure than a short delay. To withdraw marketing consent you do not need to contact us at all: use the unsubscribe link in any marketing email.
Cookies and tracking
Cookies are covered separately from this privacy policy, because the rules that govern them come from the Privacy and Electronic Communications Regulations rather than from data protection law alone. Our cookie policy lists the categories we use, explains which ones need your consent, and shows how to change your choice at any time.
In short, the cookies that make the basket and the checkout work are set without consent because the site cannot function without them. Analytics and any marketing cookies are set only if you agree, and declining them does not restrict your ability to browse or to buy.
Complaining to the ICO
If you think we have handled your data badly, or that we have departed from this privacy policy, tell us first. We would rather fix a mistake than defend one, and most concerns are resolved in a single exchange of emails.
You also have the right to complain to the supervisory authority without coming to us first. In the United Kingdom that is the Information Commissioner’s Office, and you can start at the ICO complaints page. Raising a complaint with the ICO does not affect any other legal remedy available to you, including a claim for compensation. The text of the regulation itself is published as Regulation 2016/679 on legislation.gov.uk.
Frequently asked questions
Do you store my card details?
No. Card data is entered on the payment provider’s own hosted form and processed by that provider. We receive a transaction reference, the result and the last few digits of the card so that we can match a refund to the right payment. Your full card number and security code never reach our systems.
Can I buy without creating an account?
Yes. Guest checkout still needs a name, delivery address, email address and telephone number, because a carrier cannot deliver a crated bike without them. An account simply stores the same details so you do not retype them, and gives you a record of past orders and warranty registrations.
What happens to my data if I apply for finance?
The lender collects your application directly and assesses it as its own controller under its own privacy notice, which you should read before applying. We are told whether the application was approved or declined so we can progress or cancel the order. We do not receive your credit file or your score.
How do I get a copy of the data this privacy policy covers?
Send us a request through our contact page and ask for a copy of your personal data. Include the order number or the email address you used at checkout. We may ask you to confirm your identity, then we respond within one month at no charge. If the request is unusually complex we will tell you and explain the extension.
Will you send me marketing I did not ask for?
No. Marketing email goes out only to people who have opted in, and every message carries an unsubscribe link that works immediately. If you have bought from us we may occasionally contact you about that specific order, for example a safety notice affecting your model, and that is service communication rather than marketing.
Can I ask you to delete everything?
You can ask, and we will delete what we are able to. Records that tax and accounting law requires us to hold, such as invoices, have to stay for six years, and we will tell you plainly which items fall into that category. Everything outside that is removed, and we confirm when it has been done.
Next steps
To manage cookie choices, read our cookie policy and change your preferences there. For the commercial side of an order, including cancellation and refunds, see our returns and refunds policy and our terms and conditions. For anything this privacy policy does not answer, contact us through our contact page and we will reply in writing.