Last updated: 5 August 2026
This policy explains what personal information Spoke & Sprocket collects when you visit or buy from this website, why we collect it, how we look after it, and what rights you have over it. We have tried to write it in plain English rather than legal boilerplate.
Who we are
Spoke & Sprocket
Registered office
Waldweg 11
37073 Göttingen
Germany
UK office
13 Fairholme Rd
Manchester M20 4WT
United Kingdom
Email: sales@spokesprockete.co.uk
Telephone: +44 7935 275252
We are the controller of the personal data described in this policy. For questions about data protection, contact us at sales@spokesprockete.co.uk and mark your message for the attention of our data protection contact.
What we collect
We collect only what we need to run the shop:
- Order information: your name, billing and delivery address, email address, telephone number, and what you ordered.
- Payment information: handled by our payment providers. We receive a confirmation that payment succeeded plus limited details such as the card type and last four digits. We never see or store your full card number.
- Account information: if you choose to create an account: your email address, a hashed password, and your saved addresses and order history.
- Correspondence: the content of messages you send us and our replies, so we can follow up properly.
- Technical and usage data: IP address, browser and device type, pages visited and referring site, collected through cookies and similar technologies. See our Cookie Policy.
- Marketing preferences: your email address if you subscribe to our newsletter, and whether you have unsubscribed.
We do not knowingly collect data from children, and we do not collect special category data such as health or biometric information.
Why we use it, and our lawful basis
- To process and deliver your order, including sending confirmation, dispatch and delivery emails, and handling returns, because it is necessary to perform our contract with you.
- To provide customer support and answer your questions, performance of a contract, or our legitimate interest in helping people who contact us.
- To prevent fraud and secure the site: our legitimate interest in protecting the shop and our customers.
- To keep accounting and tax records: to comply with our legal obligations.
- To send marketing emails: only with your consent, which you can withdraw at any time.
- To understand how the site is used so we can improve it, with your consent, where non-essential cookies are involved.
Who we share it with
We do not sell your personal data, and we never share it for someone else’s marketing. We do share it with service providers who help us operate the shop, and only to the extent they need it:
- Payment providers, to take payment securely.
- Delivery carriers, to get your parcel to you.
- Our website hosting and email providers, which store data on our behalf.
- Professional advisers and authorities, where the law requires it.
These providers act on our instructions under contracts requiring them to keep your data secure and to use it only for the agreed purpose.
International transfers
We operate from Germany and serve customers in the United Kingdom, so your data may be transferred between the UK and the European Economic Area, and in some cases to providers outside them. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
How long we keep it
- Order and transaction records: retained for as long as tax and accounting law requires, then deleted or anonymised.
- Account data: kept while your account is open. Ask us to close it and we will delete or anonymise it, apart from records we must legally retain.
- Support correspondence: normally kept for up to two years so we have context if you contact us again.
- Marketing data: kept until you unsubscribe, plus a suppression record so we do not email you again by mistake.
Your rights
Subject to the conditions in data protection law, you have the right to:
- ask what personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- ask us to delete data we no longer need;
- object to, or ask us to restrict, certain processing;
- receive data you gave us in a portable format;
- withdraw consent at any time, where we rely on consent.
To exercise any of these, email sales@spokesprockete.co.uk. We will respond within one month. We may ask you to confirm your identity first so we do not disclose your data to someone else.
If you are unhappy with how we have handled your data you can complain to a supervisory authority. In the UK, the Information Commissioner’s Office (ico.org.uk); in Germany, the data protection authority for Lower Saxony. We would appreciate the chance to put things right first.
Security
The site runs over an encrypted HTTPS connection, access to order data is limited to people who need it, and payment details are handled by our payment providers rather than stored by us. No system can be guaranteed perfectly secure, but we take these safeguards seriously and review them.
Changes to this policy
If we change this policy we will update the date at the top of the page. Material changes will be highlighted on the site.