Privacy Notice
Last updated 29 September 2026
In plain English: we only collect what we need to deal with your enquiry or order. We don’t sell it, and this website sets no cookies and uses no advertising trackers.
Who is responsible for your data
John Stainsby trading as RJSXtreme, King's Lynn, Norfolk, is the data controller. Contact: [email protected].
What we collect
- Forms (bike reservations, workshop bookings, used-bike and part-exchange enquiries, and accessory enquiries): your name, email address and phone number, the bike, service or item you’re interested in, your preferred date and drop-off or collection choice, and any message you write.
- Accessory orders: Stripe collects your payment on its secure checkout. We receive your name, email, delivery address, phone number (if given) and order details. We never see or store your full card details.
- Emails and messages you send us.
- Abuse prevention: when a form is sent, we record a one-way hash of your IP address and your browser type.
Why we use it, and our lawful basis
- To reply to your enquiry or reservation, and to take the steps you ask for before a sale: contract (UK GDPR Art. 6(1)(b)).
- To process, deliver and support your order, and to deal with returns and warranty: contract.
- To keep the tax and accounting records the law requires: legal obligation (Art. 6(1)(c)).
- To prevent spam and abuse of our forms: legitimate interests (Art. 6(1)(f)).
We don’t use your details for unrelated marketing and we never sell them.
Who we share it with
- Cloudflare hosts this website and our form backend (Cloudflare Pages Functions and a D1 database), handles our email routing, and provides our cookie-free, aggregated visitor statistics (Cloudflare Web Analytics). See cloudflare.com/privacypolicy.
- Stripe processes accessory payments. See stripe.com/gb/privacy.
- Our accessory supplier receives your name, delivery address and phone number so it can ship your order direct to you. Our supplier may be based outside the UK. Where that happens, we share only what’s needed to deliver your order.
- Couriers receive the delivery details needed to get your order to you.
- We may also share information where the law requires it.
How the forms work
When you send a form, it goes securely to our website backend, where it is stored so we can reply, and an email notification is sent to us. A backup copy of your reservation is also kept in your own browser’s local storage, on your device only. If our server can’t be reached, the reservation form may open your email app with a pre-filled message instead.
Cookies and tracking
This website sets no cookies and uses no advertising trackers. We use Cloudflare Web Analytics to count visits in aggregate: a small script records the page viewed, the referring site, browser and device type, the approximate country and page-load speed. It sets no cookies, doesn’t use local storage, doesn’t fingerprint you or follow you across other websites, and we only see totals, not individual visitors. If you pay for accessories, Stripe’s checkout pages (on stripe.com) use their own cookies to process the payment securely and prevent fraud.
How long we keep it
- Enquiries and reservations that don’t lead to a sale: deleted within 12 months.
- Customer, order and workshop records: 6 years, for tax, accounting and warranty purposes.
Your rights
You can ask us to give you a copy of your data, to correct it or delete it, to restrict or object to how we use it, or to withdraw any consent you gave. Email [email protected]. We’ll reply within one month.
If you’re not happy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first.
Changes
If we change this notice, we’ll update it here and change the date at the top.