Legal

Privacy Policy

Last updated: 1 May 2026

This policy explains how OnlyKnobblies (a trading name of Freedom Moto Adventures Ltd., company number 14529422) collects, uses, and protects your personal data when you visit our website or place an order. We are the data controller for the personal data we process about you.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data controller: Freedom Moto Adventures Ltd. (company number 14529422).

Registered address: 1 Woodward Terrace, Kent, DA9 9DD, United Kingdom.

Contact: tyres@freedom-adventures.com.

2. Personal Data We Collect

We collect and process the following categories of personal data:

  • Identity and contact data: first name, last name, email address, phone number.
  • Address data: billing and shipping addresses you provide at checkout.
  • Order data: items ordered, prices paid, order references, order status, returns and refund history.
  • Payment data: payment outcome, last four digits of card number, payment provider identifier. We do not store full card details on our servers — payments are processed by Stripe.
  • Account data: hashed password, sign-in timestamps, linked social provider identifiers (if you sign in with Google or Apple).
  • Affiliate data: your referral code, referrals you have made, store credit balance and ledger.
  • Wishlist data: products you have saved.
  • Technical data: anonymous session identifier, browser and device data, approximate location derived from IP address. We use this for site functionality and basic anti-fraud measures.
  • Usage data: pages viewed, products viewed, searches performed, items added to cart. This is logged with your anonymous session ID for product recommendations and service improvement.
  • Communications: any messages you send us by email or WhatsApp.

3. How We Collect Your Data

We collect personal data:

  • directly from you when you place an order or sign up;
  • automatically when you browse the website (technical and usage data);
  • from Stripe when you pay (payment outcome and partial card data);
  • from Google or Apple when you sign in with a social provider (basic profile and email).

4. How and Why We Use Your Data

We process personal data only where we have a lawful basis under UK GDPR. The main purposes and lawful bases are:

  • To process and fulfil your order (lawful basis: performance of a contract). This includes payment, order confirmation, dispatch, delivery, and returns.
  • To create and manage your account (performance of a contract).
  • To send transactional emails such as order confirmation, dispatch notification, password reset, and account creation (performance of a contract).
  • To run the affiliate program and award store credit (performance of a contract).
  • To comply with our legal obligations including tax record-keeping and consumer law obligations (legal obligation).
  • To prevent fraud and secure the site (legitimate interest).
  • To improve our service using anonymous usage analytics (legitimate interest, balanced against your privacy interests).

We do not currently send marketing emails. If we introduce marketing in future, we will only do so with your explicit opt-in consent and you will be able to unsubscribe at any time.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with the processors and service providers we need to run the business:

  • Stripe — payment processing. Stripe is the payment data controller for card details. See stripe.com/gb/privacy.
  • Supabase — database and authentication hosting (data stored in the EU). See supabase.com/privacy.
  • Resend — transactional email delivery. See resend.com/legal/privacy-policy.
  • Vercel — website hosting and content delivery. See vercel.com/legal/privacy-policy.
  • Delivery carriers (such as APC) — we share your shipping name, address, and phone number so they can deliver your order.
  • Suppliers — we share order details (items, your name and shipping address) with our tyre supplier so they can dispatch the order to you directly.
  • Authorities — we will disclose data where required by law, to comply with legal process, or to protect rights, property, or safety.

6. International Transfers

Some of our service providers (notably Stripe, Resend, and Vercel) are based in the United States or operate global infrastructure. Where personal data is transferred outside the UK, we rely on appropriate safeguards under UK GDPR, including the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or adequacy decisions made by the UK government.

7. How Long We Keep Your Data

We keep personal data only as long as we need it for the purpose for which it was collected, or as required by law:

  • Order and tax records: 6 years after the order, to comply with HMRC requirements.
  • Account data: for as long as your account is active. You may delete your account at any time from the account settings page.
  • Anonymous session and usage data: up to 24 months from collection.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data and ask for a copy.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”), subject to records we are required by law to keep.
  • Restrict processing in certain circumstances.
  • Object to processing based on legitimate interests.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent where we rely on consent (you can do this at any time).

To exercise any of these rights, email us at tyres@freedom-adventures.com. We will respond within one month.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113.

9. Security

We use industry-standard measures to protect your personal data, including encryption in transit (HTTPS), access controls on our databases, and password hashing. No internet transmission is fully secure, but we work continuously to maintain appropriate technical and organisational protections.

10. Cookies

We use one essential session cookie to keep you signed in and remember your cart. We do not use third-party tracking or advertising cookies. See our Cookies Policy for full details.

11. Children

Our website and Products are intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe we hold data on a child, please contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent change. If we make material changes, we will notify registered customers by email.

13. Contact Us

For privacy questions or to exercise your rights, contact:

  • Email: tyres@freedom-adventures.com
  • WhatsApp: +44 7342 014 205
  • Address: Freedom Moto Adventures Ltd., 1 Woodward Terrace, Kent, DA9 9DD, United Kingdom

See also our Terms & Conditions and Cookies Policy.

Your Cart (0)
🛒
Your cart is empty
Privacy Policy — OnlyKnobblies