Motocross4U Privacy Policy

Last updated: 18 September 2026

This Privacy Policy explains how Motocross4U Limited collects, uses and shares personal information when you visit motocross4u.com, place an order, contact us or receive our marketing.

Personal information means information that identifies you or can be linked to you.

It covers our online store and related telephone, messaging and trackside customer services, including purchases of motocross parts, riding equipment and children’s electric bikes.

1. Who is responsible for your information?

Motocross4U Limited is the controller of the personal information we use to operate our business. This means we decide why and how that information is used.

Business detail	Information
Legal company name	Motocross4U Limited
Company number	NI674275, registered in Northern Ireland
Registered office	22 Young Street, Lisburn, County Down, Northern Ireland, BT27 5EB
Customer correspondence address	44 The Spires, Dromore, County Down, Northern Ireland, BT25 1QE
Privacy contact	info@motocross4u.com
Telephone	028 9560 1024

Please address privacy enquiries to “Motocross4U — Privacy”.

We handle personal information under applicable data protection laws, including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, as amended. The EU GDPR also applies where our activities fall within its scope, including relevant services offered to customers in Ireland.

[EDITOR: confirm whether an EEA representative is required and insert their name, address and contact details here if applicable. Remove this instruction before publication.]

2. What personal information do we collect?

Depending on how you interact with us, we collect:

• Contact and account information: your name, email address, telephone number, billing and delivery addresses, and customer account details.

• Order information: products purchased, order numbers, payment status, transaction references, delivery instructions, tracking information, returns and refunds.

• Support information: your enquiries and correspondence, information about a fault, and photographs, videos or product serial numbers you provide for support or warranty enquiries.

• Preferences and marketing information: your interests, subscription choices, consent records and, where permitted, interactions with our messages.

• Website information: your IP address, device and browser information, pages viewed, products viewed, searches and shopping-basket activity, subject to the cookie choices described below.

Payment details entered at checkout are processed by the payment provider you select. We receive transaction information needed to manage your order, such as payment confirmation and refund records. Please do not send full card details or card security codes by email or messaging.

Information comes directly from you, from your use of our website, and from providers involved in your transaction, such as payment companies, suppliers and delivery carriers. If someone orders a gift for you, we may receive your delivery details from that purchaser.

Information marked as required is needed to provide the relevant service. Without necessary order, payment or delivery details, we may be unable to complete your purchase. Marketing subscriptions are optional.

3. Why do we use your information?

We use an appropriate lawful basis for each purpose:

Purpose	Lawful basis
Take requested steps before a purchase, process orders and payments, arrange delivery and provide order updates	Performance of a contract
Administer contractual returns, refunds and warranty support	Performance of a contract
Keep accounting records and meet tax, consumer and other legal requirements	Legal obligation
Answer general enquiries, provide proportionate product advice and collect service feedback	Legitimate interests in helping customers and improving service
Deliver to a gift recipient named by the purchaser	Legitimate interests in fulfilling the purchaser’s order
Protect accounts, investigate suspected fraud, handle chargebacks and establish or defend legal claims	Legitimate interests in protecting customers and our business
Send marketing messages	Consent, or legitimate interests where a permitted customer marketing exception applies, as explained below
Use optional analytics, advertising tracking and related personalisation	Consent
Record and respect privacy and marketing objections	Legal obligation

Where we rely on legitimate interests, we consider the impact on you and whether your rights override those interests.

4. Who do we share information with?

We share relevant information with organisations needed to provide the services described in this policy:

• Shopify: hosting our store, customer accounts, checkout and order management.

• Payment providers: including Shopify Payments, PayPal, Klarna and Clearpay, depending on the payment option selected.

• Suppliers and delivery companies: to fulfil orders, send replacement parts, arrange collections and manage warranty enquiries. Relevant carriers may include APC Overnight, DPD, Parcelforce and Palletforce.

• Klaviyo and messaging providers: to manage customer communications, subscription preferences and permitted marketing.

• Google: for website analytics and advertising, subject to the relevant permissions.

• Review service providers: to administer customer feedback and reviews.

• Technical and professional advisers: including authorised website support, marketing support, accountants and legal advisers who need access for their work.

• Authorities, insurers and other relevant parties: where necessary to meet a legal duty, resolve a dispute or protect legal rights.

For orders dispatched directly by a supplier, we share the recipient’s name, address, contact details and relevant order information with that supplier. Carriers may receive contact details for delivery updates and proof-of-delivery services.

Reviews you choose to publish can be seen by others. Avoid including private contact details in review text.

Providers acting on our instructions must protect information and use it for the agreed services. Some providers also act as independent controllers, including for payment, fraud-prevention or regulatory purposes. Their own privacy notices explain those activities.

Shopify’s consumer services may process information across Shopify stores to provide shopping features and, where permitted, personalisation or advertising. Read the Shopify Consumer Privacy Policy and use Shopify’s privacy portal for its privacy controls.

5. How do email, SMS and WhatsApp marketing work?

We use Klaviyo to manage email subscriptions and communications. Where SMS or WhatsApp marketing is offered, the relevant subscription choices apply separately.

We send promotional messages when you have consented to the relevant channel. For UK email customers, we may also use the permitted “soft opt-in” where we obtained your details during a purchase or genuine negotiations to buy, promote our own similar products, and offered an opt-out both when collecting your details and in every message. For customers elsewhere, we use consent unless the applicable local marketing exception is met.

Browsing the website or sending a support message does not, by itself, give permission for marketing. Abandoned-basket, checkout and browsing reminders are treated as marketing and must meet the relevant permission requirements.

You can object to direct marketing at any time, including profiling connected with that marketing.

Use the unsubscribe link or opt-out instructions in a message, or email info@motocross4u.com. Necessary order, delivery and support messages may continue after you unsubscribe.

Where permitted, messaging tools record delivery, opens and clicks to measure campaigns. Tracking that requires consent is used only with that consent; permission to receive marketing does not automatically authorise all tracking.

If you contact us through WhatsApp, your number, profile information and messages are handled through the relevant WhatsApp/Meta and messaging services so we can respond.

6. How do we use cookies and tracking technologies?

Cookies and similar technologies can store or access information on your device. We use them for:

• Essential functions: shopping baskets, checkout, security and remembering privacy choices.

• Optional analytics: understanding website use and identifying improvements.

• Advertising and personalisation: measuring campaigns and showing relevant products or adverts.

Our approach is to request consent before activating optional analytics and advertising tracking. You can decline optional tracking and change your choices later. Essential technologies needed to provide requested services may operate without consent.

Google Analytics, Google Ads and marketing tools may receive device identifiers, browsing activity and purchase events where the relevant tracking is enabled with permission.

Cookie information and controls: [EDITOR: insert the working cookie-settings control or link and a verified list showing each cookie/tracker, its provider, purpose and duration.]

Browser settings can also block or delete cookies, but blocking essential cookies may affect checkout or account functions. Browser controls are additional to the website’s consent controls.

7. Do we use profiling or automated decisions?

We may use purchase history, stated interests and permitted browsing activity to group customers and make marketing more relevant. For example, someone interested in Revvi products may receive relevant product information where marketing permissions allow it.

Fraud and payment services also assess transaction and device information to identify risk. A payment or finance provider may make its own automated decisions; its privacy notice explains the relevant checks and rights.

[EDITOR: confirm whether Motocross4U itself ever rejects or cancels orders solely through automation. Insert the actual position. If significant decisions are automated, explain the main information and logic used, likely consequences, and how customers can obtain human intervention, express their views and challenge a decision.]

Contact us if you believe an order has been incorrectly flagged. We can investigate our handling of the order and explain how to contact the payment provider where its decision is involved.

8. How do we handle information about children?

We sell children’s bikes and equipment, but our purchasing and marketing services are intended for adults.

A parent or carer may provide a child’s approximate age, height or riding experience to help us advise on sizing and suitability. Please provide only what is needed and avoid sending a child’s full date of birth, direct contact details or unnecessary medical information.

We use information supplied for a sizing enquiry to help answer that enquiry. Any additional use requires its own appropriate explanation and lawful basis.

Please contact us if you believe a child has submitted personal information without appropriate adult involvement.

9. Is information processed outside the UK?

Some service providers process information in other countries, including the EEA, Canada and the United States. For example, Shopify describes international processing in its privacy policy.

Where international transfer rules apply, transfers must be covered by the relevant legal mechanism. Depending on the recipient and destination, this may be an adequacy decision or approved contractual safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or EU Standard Contractual Clauses where EU law applies.

We assess the protection required for the relevant transfer. Contact us for information about the safeguards applying to your information or to request a copy, subject to necessary redactions.

10. How long do we keep information?

We keep information for the relevant purpose and applicable legal requirements, rather than automatically keeping every customer record indefinitely.

Our retention decisions take account of:

• Accounting and tax records: normally six years from the end of the company financial year they relate to, with longer retention where legally required.

• Orders, returns and warranty enquiries: fulfilment, the duration of support obligations, unresolved disputes and the time needed to establish or defend relevant legal claims.

• Customer accounts: whether the account remains in use and whether particular records are still needed for orders, support or legal obligations.

• Marketing information: your subscription status, consent or other permitted basis, engagement and any withdrawal or objection.

• Suppression records: a limited record of an unsubscribe or objection for as long as needed to prevent unwanted marketing.

• Cookie, analytics and security records: the purpose, configured expiry or retention period, and any active security investigation.

Records of privacy requests and consent may be retained to demonstrate how we met our obligations. When information is no longer needed, we delete it or make it genuinely anonymous.

11. How do we protect your information?

We use appropriate technical and organisational measures, including restricting access to people who need it and using security controls provided by our service providers.

No online service can guarantee complete security. Keep account access details private and contact us promptly if you suspect unauthorised use.

12. What are your data protection rights?

Depending on the circumstances, you can ask us to:

• Provide access to your personal information.

• Correct inaccurate or incomplete information.

• Delete information where there is no lawful reason to retain it.

• Restrict particular uses of your information.

• Provide eligible information in a portable format.

• Stop processing based on legitimate interests where your circumstances justify an objection.

• Provide applicable safeguards for significant automated decisions.

Your right to stop direct marketing is unconditional.

You can withdraw consent at any time. Withdrawal does not affect processing that was lawful before you withdrew it.

Contact info@motocross4u.com or use the contact details in section 1. We may need proportionate information to verify your identity. We normally respond within one month, subject to legally permitted extensions or pauses, and explain these where relevant. Requests are normally free.

Some rights have exceptions. For example, deleting an account does not require us to delete records needed for tax obligations or an ongoing legal claim.

13. How can you make a privacy complaint?

Please contact us using the details in section 1 and explain your concern. We will acknowledge a data protection complaint within 30 days, investigate it, keep you informed of progress and tell you the outcome without undue delay.

You can also complain to the Information Commissioner’s Office, the UK data protection regulator.

Where EU GDPR applies, you may complain to the relevant supervisory authority, including the Data Protection Commission in Ireland, or the authority where you live, work or believe a breach occurred.

14. Changes to this policy

We may update this policy when our services, processing activities or legal requirements change. The latest version will appear on this page with its updated date. Where a change requires notice or fresh consent, we will provide that notice or request consent as appropriate.