Privacy Policy
Main Street Surron Bikes LLC (“Main Street Surron Bikes,” “we,” “us”) operates mainstreetsurronbikes.com. This policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have. By using our site, you agree to this policy.
1. Information we collect
Information you provide directly:
- Order information: name, shipping and billing address, email, phone number, and order details
- Account information: name, email, password (stored hashed — we never see it), order history
- Communications: emails, contact-form submissions, call notes, and warranty claim details (including photos/videos you send)
- Reviews: name and content you choose to publish
Payment information: processed directly by our PCI-DSS-compliant payment processors (Shopify Payments/Stripe, PayPal, and our financing partners). We never see or store your full card number.
Information collected automatically:
- Device and usage data: IP address, browser type, pages viewed, referring site, and general location (city/region level), collected via cookies and similar technologies
- Shopping behavior on our site: products viewed, cart contents, searches
Information from third parties: shipping carriers (delivery status), payment/fraud-screening providers (transaction risk signals), and financing partners (application approval status only — we never receive your credit details).
2. How we use your information
- Fulfill orders: process payment, arrange shipping, send order and delivery notifications, schedule freight delivery calls
- Customer support: respond to inquiries, process returns and warranty claims
- Legal compliance: tax records, fraud prevention, responding to lawful requests
- Marketing (with your consent): email newsletters and abandoned-cart reminders — every email includes a one-click unsubscribe
- Advertising: with your cookie consent, we use Google Ads and Meta advertising tools (including remarketing) to show relevant ads. You can opt out — see Sections 5 and 6
- Site improvement: analytics (Google Analytics 4) to understand how the site is used
We do not sell your personal information for money. Some advertising cookies may constitute "sharing"/"selling" under California law — Section 6 explains your opt-out right.
3. Who we share information with
Only as needed to run the store:
- Shipping & freight carriers (e.g., FedEx, UPS, R+L Carriers): name, address, phone for delivery
- Payment processors & fraud screening (Shopify Payments/Stripe, PayPal)
- Financing providers (e.g., Affirm/Klarna) — only when you choose financing at checkout; their own privacy policies apply to your application
- E-commerce & email platforms (Shopify, Klaviyo) that host our store and send our emails
- Analytics & advertising (Google, Meta) per your cookie choices
- Manufacturer/distributor — serial number and purchase date only, for warranty registration and safety recalls
- Legal authorities when required by law
All service providers are contractually limited to using your data only to provide services to us.
4. How long we keep information
- Order and transaction records: 7 years (tax and warranty obligations)
- Account data: until you delete your account, then removed within 30 days (except records we must keep by law)
- Marketing lists: until you unsubscribe
- Support correspondence: 3 years after the case closes
5. Cookies
We use:
- Essential cookies (cart, checkout, security) — always on
- Analytics cookies (Google Analytics 4) — with consent
- Advertising cookies (Google Ads, Meta Pixel) — with consent
Manage preferences anytime via the "Cookie Settings" link in our footer, or through your browser. You can also opt out of Google's personalized ads at adssettings.google.com and learn about industry opt-outs at aboutads.info.
6. Your privacy rights
All customers can access, correct, or delete their data, and unsubscribe from marketing, by emailing privacy@mainstreetsurronbikes.com.
California residents (CCPA/CPRA): you have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of “sale”/”sharing” (including cross-context behavioral advertising); and to non-discrimination for exercising these rights. Use the “Do Not Sell or Share My Personal Information” link in our footer or email us. We honor Global Privacy Control (GPC) browser signals.
Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other state-law residents: you have equivalent rights of access, correction, deletion, portability, and opt-out of targeted advertising, and (where applicable) the right to appeal a refused request.
EU/UK visitors (GDPR): we primarily serve the US, but if GDPR applies to you, you have rights of access, rectification, erasure, restriction, portability, and objection, and may lodge a complaint with your supervisory authority. Our legal bases are contract performance (orders), legitimate interests (fraud prevention, support), consent (marketing, cookies), and legal obligation (tax records).
We respond to verified privacy requests within 30 days (45 for CCPA where permitted, with notice).
7. Security
TLS/SSL encryption sitewide, PCI-compliant payment handling, access controls limiting staff data access to what their role requires, and hashed password storage. No system is 100% secure; if a breach affects your data, we will notify you as required by law.
8. Children
Our products and website are intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us data, email privacy@mainstreetsurronbikes.com and we will delete it.
9. Do Not Track
Browser "Do Not Track" signals have no industry standard, so we do not respond to them — but we do honor GPC opt-out signals (Section 6) and our cookie banner choices.
10. Changes to this policy
We'll post updates here with a new "Last updated" date; material changes will be highlighted on this page or by email for account holders.