Privacy policy
Last updated: June 4, 2026
Control BMX is a trading name of Control BMX Limited (company number 16828416), a company registered in England and Wales whose registered office is at Ddau Gae Farm, Gwrhyd Rd, Rhiwfawr, Cwmllynfell, SA9 2RY (“we”, “us”, “our”). We operate this store and website, including all related information, content, features, tools, products and services (the “Services”), which are powered by Shopify.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit, use, or make a purchase through the Services.
Personal Information We Collect
“Personal information” means information that identifies you or can reasonably be linked to you. Depending on how you interact with our Services, we may collect:
- Contact details including your name, billing address, shipping address, telephone number, and email address
- Financial and payment information including payment confirmations and transaction records
- Account information such as login credentials, saved preferences, and account settings
- Transaction information including products viewed, cart activity, purchase history, returns, and order details
- Communications including customer support requests, enquiries, reviews, and feedback
- Device information including IP address, browser type, operating system, device identifiers, and connection data
- Usage information including browsing behaviour, interactions with our Services, and analytics information
Sources of Personal Information
We collect personal information from the following sources:
- Directly from you when you place an order, create an account, subscribe to communications, or contact us
- Automatically through cookies, analytics tools, and similar tracking technologies
- From service providers acting on our behalf
- From marketing, advertising, analytics, or business partners
How We Use Your Information
We use personal information for the following purposes:
- Providing and improving our Services including processing payments, fulfilling orders, managing accounts, and improving website functionality
- Customer support and communication including responding to enquiries and providing updates regarding orders or services
- Marketing and advertising including sending promotional emails, personalised advertisements, and marketing communications where permitted by law
- Security and fraud prevention including monitoring suspicious activity and protecting our business and customers
- Legal and regulatory compliance including compliance with tax, accounting, legal, and regulatory obligations
Legal Basis for Processing Personal Data (GDPR)
If you are located in the United Kingdom or European Economic Area (EEA), we process your personal information in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).
We rely on the following legal bases for processing personal information:
- Contract Performance: To process and deliver orders, manage payments, provide customer support, and fulfil contractual obligations.
- Legitimate Interests: To improve our Services, prevent fraud, maintain website security, analyse usage, and operate our business efficiently.
- Consent: Where required by law, we rely on your consent for marketing communications, cookies, and certain tracking technologies. You may withdraw consent at any time.
- Legal Obligations: To comply with legal, tax, accounting, regulatory, or law enforcement requirements.
Where we rely on legitimate interests, we ensure our interests are balanced against your rights and freedoms.
How We Disclose Personal Information
We may share personal information:
- With Shopify and third-party service providers including payment processors, shipping providers, hosting providers, analytics providers, and IT support providers
- With marketing and advertising partners to deliver personalised advertising and promotional campaigns
- Where required by law, regulation, legal process, or governmental request
- In connection with a merger, acquisition, business transfer, restructuring, or sale of assets
Relationship with Shopify
Our store is hosted and powered by Shopify. Shopify may collect and process personal information to provide and improve the Services.
To learn more about how Shopify handles personal information, please review Shopify’s Privacy Policy at https://privacy.shopify.com/en.
Cookies and Tracking Technologies
We use cookies, pixels, analytics tools, and similar technologies to operate our website, improve user experience, analyse website traffic, and support marketing activities.
You can manage your cookie preferences at any time using the cookie banner on our website, or through your browser settings. Please note that disabling certain cookies may affect website functionality.
Third-Party Websites
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or policies of third-party websites.
Children’s Data
Our Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority in their jurisdiction.
Security and Retention
We implement reasonable administrative, technical, and organisational safeguards to help protect personal information. However, no security system can be guaranteed to be completely secure.
We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements and policies.
Your Rights and Choices
Depending on your location and applicable law, you may have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Request data portability
- Object to or restrict processing
- Withdraw consent at any time
- Opt out of marketing communications
You may unsubscribe from marketing emails by using the unsubscribe link included in communications we send.
Complaints
If you have concerns about how we process your personal information, please contact us using the details below.
If you are in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk. If you are in the EEA, you may contact your local data protection authority.
International Transfers
Your personal information may be transferred to, stored in, or processed in countries outside your country of residence.
Where required by applicable law, we rely on recognised transfer mechanisms, including Standard Contractual Clauses, to safeguard international data transfers.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs.
Any updates will be posted on this page with a revised “Last updated” date.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Email: info@controlbmx.com
Phone: 01227 500388
The data controller responsible for your personal information is:
Control BMX Limited
Company number 16828416
Ddau Gae Farm, Gwrhyd Rd
Rhiwfawr
Cwmllynfell
SA9 2RY
United Kingdom