We understand that your privacy and the security of your personal information is extremely important. We take this responsibility seriously. This policy explains what types of personal information we collect from you, how we will use it, if and how we share it with others and how you can contact us.
There are many ways in which you can be in contact us. These include phone, email, live chat, social media, post and by interaction with our staff in our stores.
CMC Chesterfield Ltd is made up of multiple branches around the UK. CMCBikes.com is the website owned and run by CMC Chesterfield ltd. VAT Registration Number GB 780 1807 31 Company Registration Number: 04330784
We also own and operate buymybike.co.uk. Your personal information is shared amongst the companies in the CMC Chesterfield group of companies. When we refer to “us” or “we” in this policy we are referring to CMC Chesterfield Ltd or one of our group companies.
Our data protection officer is
You can contact him at firstname.lastname@example.org or
via post to CMC Bikes Ltd, High Street, Clay Cross, Chesterfield S45 9DP.
We take any issues very seriously and will investigate any correspondence.
The information which we process is usually provided directly to us by you for a number of reasons: -
You are visiting with the intention of purchasing from us, or have made a purchase.
You have made a complaint or enquiry.
You have attended or plan to attend an event.
You have opted into our newsletter / marketing.
You have applied for a job within our company.
You represent a company.
You are employed by the company.
Your details have been provided as a next of kin, an emergency contact, guarantor or referee
Your details have been captured on our CCTV cameras, which operate both outside and inside our company for security purposes.
You have provided information through our website, email or social media
Under the data protection law, you have rights that we need to make you aware of:-
Your right of access. You can ask us for a copy of your personal information. This is called a subject access request.
Your right to rectification. If you think that the information, we hold about you is incorrect you have the right to request us to correct or complete the information.
Your right to erasure. In certain circumstances you have the right to ask us to delete your information. This is also known as the right to be forgotten. There are certain exceptions. You can read about these on the website: ico.or.uk
Your right to restriction of processing. In certain circumstances you can ask us to restrict the processing of your information. We may however have a legitimate reason for this processing.
Your right to data portability. This applies to the information you have given to us. You have the right to ask that we transfer the information you provide us from us to another company or to give it to you.
If you wish to exercise any of these rights or have any queries or concerns, we ask that you do so in writing to the data protection officers so that we have an audit trail of your requests. Please state clearly the nature of your request. We will need to verify your identity before we can fulfil any of your rights under data protection law.
We will only collect data that enables us to carry out the contract you have requested or have entered into a discussion regarding the purchase. We will only hold this information for as long as deemed necessary or if required by law.
The information we may request may include all or some of the following: -
Your name and date of birth
Your phone number or mobile number
Your email addresses
Bank account and financial details
Information about your vehicle which will include its Registration number, service and MOT history, Make, Model, registration date, warranty expiry date.
Information about any contracts you have entered into with us – such as the purchase information and financial transactions.
We record our telephone calls.
CCTV both inside and outside our stores for security purposes.
Other information that you may provide during the course of transacting with us.
We may share your information with: -
HMRC, DVLA or other government departments for regulatory purposes
Our manufacturer partners
Our compliancy software provider
Our finance providers
Our staff in the course of their job roles
Marketing software such as Mailchimp or Survey Monkey.
Insurance brokers or companies where we are offering an insurance-based product.
Other IT software providers – Catalyst computer systems
Third parties, should we choose to acquire other business or merge with them. If a change happens the new company will have the same rights over the data as laid out in this policy.
Our solicitors in the event of enforcement actions.
Other bikes repairers / MOT providers.
All information you provide to us may be transferred to countries outside the European Economic Area (EEA). By way of example, this may happen where any of our group companies are incorporated in a country outside of the EEA or if any servers or those of our third-party service providers are from time to time location in a country outside of the EEA. These countries may not have similar data protection laws to the UK.
If we transfer your information outside of the EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights countries to be protected as outlines in this policy. These steps include imposing contractual obligations on the recipient of your personal information or ensuring that the recipients are subscribed to international frameworks that aim to ensure adequate protection. Please contact us using the details at the end of this policy for more information about the protections that we put in place and to obtain a copy of the relevant documents.
If you use our services whilst you are outside the EEA, your information may be transferred outside the EEA in order to provide you with those services.
We will not sell your data to any third parties.
Our purpose for processing information will be based on being necessary to perform a contract or take the steps prior to entering into a contract. This may include asking for your proof of identity, qualifications, driving licence, email address, bank details, and emergency contacts.
Consent: where you have told us that you are happy for us to process your personal information for a specific purpose. We will send you target marketing and may rely on a soft opt in to send you marketing materials. You can notify us at any time if you wish to withdraw the consent.
Legitimate interest: The processing is necessary for us to conduct our business, but not where your interests are overridden by your interests or rights.
We may use your details to make contact with you: -
Legal or Regulatory Reasons: Where we need to process your information to meet with our legal duty, for example to register your bike with the DVLA or provide VAT information to HRMC. Also, where the processing is necessary for the exercise or defence of a legal claim or whenever the courts are acting in their judicial capacity. This will also cover fraud and/or money laundering.
Vital Interest: The processing of your personal information is necessary to protect you or someone else’s life – For example where there is a recall on your motorbike.
Public Information: Where we process personal information, which is already available in the public domain.
To provide our products and services. We need to use your personal information to make our products and services available to you. Also, to process payment for those goods and services.
We may provide information from a list of suppliers about additional products or services, such as GAP insurance, Tyre insurance, and extended warranties. We will share your information with these suppliers with your consent to complete the purchase of these products.
We may provide information during the course of a purchase with our manufacturer partners, for example with the purchase of a new bike. They may use your personal information to contact you regarding customer service and use the information to improve service levels.
If you have chosen to finance the purchase of a bike we act as a finance broker and will forward your personal information to enable them to provide finance to cover the purchase of the bike or service.
We will follow up purchases of a product or service with targeted marketing – such as service reminders, end of warranty information, information relating to lifetime warranties.
We will only keep your information for as longer as necessary. If you have purchased a bike from us or transacted with us through the service department in most cases, we will keep your data for 7 years after the end of the relationship with us.
Where we have obtained your information during the negotiation for the purchase of a bike, we will retain your information for 18 months.
There are some reasons why we may retain it for a different time period. This will include any legal requirements.
If there are any changes to your personal data, please keep us informed. You also have the right to object to the processing of your data (see rights above).
You can ask for your data to be updated, amended or removed and withdraw your consent where this has been previously provided.
We take protecting your personal information seriously and are continuously developing our security systems and processes. Some of the controls we have in place:
Physical access to certain areas of our business
Technology controls such as firewalls, user verification, strong data encryption and separation of roles, systems and data.
We utilise industry “good practice” standards to support the maintenance of a robust information security management system
Need to know policy for access to any data or systems.
We use automated decision making, including profiling in certain circumstances such as when it is in our legitimate interest to do so, or where we have a right to do so because it is necessary for us to enter into, and perform a contract with you. We use profiling to enable to give you the best service from CMC Chesterfield LTD, including specific marketing that we believe you will be interested in. You have the right not to be subject tot a decision based solely on automated processing including profiling which has legal effects for you or affects you in any other significant way. If you are seeking to exercise this right, please contact our data protection officer listed above.
14. Where we provide Wi-fi for the use of visitors. We will provide you with the address and password. We have no responsibility or control over your use of the internet whilst on our site and we do not ask you to provide any of your information to use our Wi-fi
15. We do not provide services directly to children or collect their personal information.
Our free email newsletter is packed full of exclusive deals, offers and events.
Don't worry, you can unsubscribe any time you like and we will NEVER share your email address with anyone else.