eBike Exchange: PRIVACY & DATA PROTECTION POLICY

*Last Updated: March 2026*

1. DATA CONTROLLER AND PRINCIPLES

1.1. Data Controller: The eBike Exchange is the Data Controller for all information processed through the platform.

1.2. Data Minimization: We only collect the specific personal data necessary to verify the legitimacy of a transaction and prevent fraud.

1.3. Purpose Limitation: Your sensitive identification data is used exclusively for the verification of your identity and ownership of listed eBikes.

2. SENSITIVE IDENTIFICATION DATA (VERIFIED SELLERS)

2.1. What We Collect: To maintain a "Verified" marketplace, we require Sellers to provide:

A high-resolution, unedited and uncropped copy of a Government-Issued Photo ID (Passport or Driver's License).

A "Possession Selfie" (a photograph of the Seller with the bike while holding the ID) to prove physical possession.

A Statutory Declaration of ownership containing name, address, and occupation.

2.2. Secure Storage: All sensitive documents are stored in encrypted private vaults. Access is restricted to a limited number of authorised eBike Exchange administrators via timed, secure links.

2.3. Purge Policy (The Right to be Forgotten):

ID Documents: Sensitive photo identification is automatically purged from our active storage 6 months after a transaction is completed or if an account is closed, unless a legal dispute is active.

Transaction Metadata: We retain basic transaction records (names, dates, frame numbers) for 7 years to comply with UK financial and tax regulations.

3. DIGITAL TITLES AND LOGBOOKS

3.1. Secure Records: Upon successful sale, we generate a Digital Ownership Title. This record contains the bike’s technical specs and frame number.

3.2. Anonymisation: While the title record is permanent, we ensure it does not publicly display your private residential address or contact details. Only the current owner and the platform can view the full history.

4. DATA SHARING AND THIRD PARTIES

4.1. Payment Facilitators: We share necessary details with our Payment Facilitators to ensure Secure Funds can be processed and paid out to your bank account.

4.2. Law Enforcement: We reserve the right to share all verification data, including IDs and selfies, with UK police authorities if a listed bike is reported as lost or stolen.

4.3. No Marketing Sale: We never sell your data to third-party advertisers. Your information is only shared to facilitate the specific transaction you have initiated.

5. YOUR RIGHTS UNDER UK GDPR (2026)

5.1. Right of Access: You may request a copy of all data we hold about you at any time.

5.2. Right to Erasure: You may request that we delete your account and associated data once all active escrow transactions are finalized.

5.3. Right to Complain: In accordance with the Data (Use and Access) Act 2025, you have a formal right to lodge a complaint regarding our data practices. We will acknowledge any complaint within 30 days.

6. COOKIES AND TRACKING

6.1. Essential Cookies: We use only essential functional cookies to manage your secure login session and the "Verified" status of your listings. No non-essential tracking is performed without your explicit consent.