Privacy Notice

This Privacy Notice explains how BikeSlot (the "Seller", "we", "us") collects, uses, and shares personal data in connection with the BikeSlot booking platform.

1. Who is the data controller

BikeSlot is the data controller for personal data that you, as a workshop owner or staff member, provide to us when you sign up and use the service. When you add your customers' details into BikeSlot to manage bookings, you are the controller of that customer data and BikeSlot acts as your processor.

2. Categories of personal data we collect

• Account data: name or business name, email address, password (stored hashed), phone, address, working hours.
• Workshop data: logo, brand settings, staff names, staff PIN hashes.
• Booking data: customer name, customer phone, booking notes, bike type, photos you upload, status of bookings.
• Support messages you send to us.
• Usage and telemetry: pages visited, actions taken in the app, error reports.
• Device and network data: browser type, device identifiers, IP address.
• Cookies and local storage used to keep you signed in and to remember preferences (e.g. selected plan, active staff identity).

We do not store payment card numbers. Payment information is collected and processed by Stripe (see "Data sharing" below).

3. Purposes and legal bases

• To create and operate your account and provide the booking service (legal basis: performance of a contract).
• To process payments and manage your subscription via Stripe (legal basis: performance of a contract; legal obligation for tax/invoicing).
• To keep the service secure and prevent fraud or abuse (legal basis: legitimate interests).
• To improve the product through aggregated usage analytics and error monitoring (legal basis: legitimate interests).
• To provide customer support when you contact us (legal basis: performance of a contract / legitimate interests).
• To send service-related communications such as verification emails or billing notices (legal basis: performance of a contract).
• To comply with legal obligations, including responding to lawful requests (legal basis: legal obligation).

4. Data sharing

We share personal data only with the following categories of recipients:

• Stripe, our payment processor. Stripe handles the sale of subscriptions, payment processing, subscription management, tax compliance, invoicing, and refunds. When you check out, your billing details are collected by Stripe under their own terms and privacy policy.
• Hosting and infrastructure providers that store and run BikeSlot on our behalf.
• Email delivery, analytics, and error-monitoring tools used to operate and improve the service.
• Professional advisers such as legal and accounting providers, where reasonably required.
• Public authorities where disclosure is required by law.

We do not sell your personal data, and we do not share it for third-party advertising.

5. International transfers

Personal data may be transferred to, and stored in, countries outside your own. Where required by law (for example for users in the UK or EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent adequacy mechanisms.

6. Data retention

We keep account and booking data for as long as you maintain an active account, and for a limited period afterwards to handle legal, accounting, and dispute-resolution obligations. When data is no longer needed we delete or anonymise it. Billing records held by Stripe are retained under their own retention policy.

7. Your rights

Subject to local law, you have the right to access the personal data we hold about you, to request correction or deletion, to restrict or object to certain processing, to receive a portable copy of your data, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local data protection authority.

To exercise these rights, email us at miles@bikeslot.co.nz. We will respond within the timeframe required by applicable law (one month under GDPR).

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and hashed credentials. No system is perfectly secure, but we work to keep the risk as low as reasonably possible.

9. Cookies

BikeSlot uses cookies and similar storage to keep you signed in, remember your preferences, and measure how the service is used so we can improve it. Essential cookies are required for the service to function; you can control non-essential cookies through your browser settings.

10. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated by email or in-app. The "last updated" date at the top of the page reflects the most recent revision.