Cairn&Crank

Privacy Policy

BBD Bikes Group Ltd (Cairn&Crank and BBD Bikes) Customer Privacy Policy

This privacy policy tells you what to expect us to do with your personal information.

  • Contact details
  • What information we collect, use, and why
  • Lawful bases and data protection rights
  • Where we get personal information from
  • How long we keep information
  • How to complain

Contact details

Post

49 Forfar Road, KIRRIEMUIR, Angus, DD8 5BX, GB

Telephone

07548232264

Email

info@cairnandcrank.co.uk

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

  • Names and contact details
  • Addresses
  • Purchase or account history
  • Payment details (including card or bank information for transfers and direct debits)
  • Website user information (including user journeys and cookie tracking)
  • Information relating to compliments or complaints

We collect or use the following information for the operation of customer accounts and guarantees:

  • Names and contact details
  • Addresses
  • Payment details (including card or bank information for transfers and direct debits)
  • Purchase history
  • Account information, including registration details
  • Information used for security purposes
  • Marketing preferences

We collect or use the following information for service updates or marketing purposes:

  • Names and contact details
  • Addresses
  • Marketing preferences
  • Recorded images, such as photos or videos
  • Purchase or viewing history
  • Website and app user journey information
  • Records of consent, where appropriate

We collect or use the following information to comply with legal requirements:

  • Name
  • Contact information

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Address
  • Payment details
  • Account information
  • Purchase or service history
  • Correspondence

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for legal requirements are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

Where we get personal information from

  • Directly from you

How long we keep information

Information is kept only as long as is needed under the conventions of why we collect data as outlined in this policy.  In most instances, this will be for a period of no longer than 18 months to cover warranty timelines and for marketing purposes.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:      

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated

06 Feb 2026

Data controller: Michael Davie

Sales Terms and Conditions

TERMS OF SERVICE

1 RETURN POLICY

–

Please contact info@cairnandcrank before cancelling any items.

You have the right to cancel the product within 30 days of purchase. Any and all deposits are non refundable. Make sure to include contact information with the cancellation and if possible, please provide us with a brief description of your case.

–

2. REFUND POLICY

Our refund policy lasts 30 days. If 30 days have gone by since your purchase, unfortunately we can’t offer you a refund of any deposit paid. We will, however, endeavour to find another suitable tour for you if possible.

–

2.1 REFUNDS

If you are approved, then your refund will be processed, and a credit will automatically be applied to your credit card or original method of payment, within 7 working days.

–

2.2 LATE OR MISSING REFUNDS

If you haven’t received a refund yet, first check your bank account again. Then contact your credit card company, it may take some time before your refund is officially posted. Next contact your bank. There is often some processing time before a refund is posted. If you’ve done all of this and you still have not received your refund yet, please contact us at: info@cairnandcrank.co.uk.

2.3 EXCHANGES

If you need to exchange/ change dates, send us an email at info@cairnandcrank.co.uk

3. PRIVACY POLICY

3.1 WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our website, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.

When you browse our website, we also automatically receive your computer’s IP address in order to provide us with information that helps us learn about your browser and operating system.

–

3.2 EMAIL MARKETING

With your permission, we may send you emails about our website, new products and other updates.

–

3.3 CONSENT

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

–

3.4 CONSENT WITHDRAWAL

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at online-info@cairnandcrank.co.uk or mailing us at: Cairn&Crank, 49 Forfar Road, Kirriemuir, DD8 5BX,

–

3.5 DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

–

3.6 Fasthosts.co.uk

Our website is hosted by Fasthosts.co.uk. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Fasthost.co.uk’s data storage, databases and the general Fasthosts.co.uk application. They store your data on a secure server behind a firewall.

–

3.7 PAYMENT

If you choose a direct payment gateway to complete your purchase, then our third-party payment gateway might use your credit card info for that purpose. See 3.8.

–

3.8 THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located. Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

–

3.9 LINKS

When you click on links on our website, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

–

3.10 SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption.

–

3.11 AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

–

4 CHANGES TO THESE TERMS OF SERVICE

We reserve the right to modify our terms of service at any time, so please review it frequently.

Changes and clarifications will take effect immediately upon their posting on the website.

If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.