Privacy Policy & Data Protection Statement

Last updated: February 2026

At Driiven, we take the protection of your personal data extremely seriously. This Privacy Policy explains which personal data we collecthow and why we process it, and what rights you have under applicable data protection laws.

1. Responsible Party and Scope of Validity

The data controller within the meaning of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and other applicable national data protection laws is:

Driiven Limited
2 Oaks Pavilion Mews
London, SE19 1QB
United Kingdom

Email: admin@driiven.io
Website: www.driiven.io

This Privacy Policy applies to the website www.driiven.io and all associated subdomains operated by Driiven Limited.

2. Data Protection Officer

The designated Data Protection Officer (DPO) of Driiven Limited is:

Marnie Browne
2 Oaks Pavilion Mews
London, SE19 1QB
United Kingdom

Tel: +44 (0)203 002 7079
Email: admin@driiven.io

3. Data Processing Principles

“Personal data” means any information relating to an identified or identifiable natural person, such as:

  • Name
  • Address
  • Email address
  • Telephone number
  • IP address
  • Online identifiers or usage behaviour

Data that cannot be linked to you personally (or only with disproportionate effort), for example anonymised or aggregated data, does not constitute personal data.

Personal data is processed only:

  • On a valid legal basis, or
  • With your explicit consent

We delete personal data as soon as the processing purpose has been fulfilled and no statutory retention obligations apply.

Where processing occurs for a specific purpose (e.g. purchases, newsletters), you will be informed separately about scope, purpose, legal basis, and retention period.

4. Individual Processing Activities

4.1 Website Access and Use

A. Type and Scope of Processing

When you access our website, our servers automatically collect information transmitted by your browser. This data is temporarily stored in server log files and includes:

  • IP address
  • Date and time of access
  • Requested page or file
  • Referrer URL
  • Browser type and version
  • Device type and operating system
  • Internet service provider

This data is technically required to ensure website functionality, security, and stability.

B. Legal Basis

Article 6(1)(f) GDPR – legitimate interest in operating a secure and functional website.

C. Storage Duration

Data is deleted once no longer required for website operation, unless statutory retention applies. Objection is not possible, as processing is technically necessary.

4.2 Purchase of Goods

A. Type and Scope of Processing

When you purchase products via our website, we process the following data:

  • Salutation
  • Full name
  • Billing and delivery address
  • Telephone number
  • Email address
  • Payment information
  • Shipping method

Payment data is transmitted only to the relevant payment service provider. Shipping data is shared only with logistics partners required to fulfil delivery.

If you provide your email address during a purchase, we may use it to send information about similar Driiven products or services, unless you object.

B. Legal Basis

Article 6(1)(b) GDPR – performance of a contract.

C. Storage Duration

Data is retained for statutory tax and commercial retention periods and deleted thereafter unless you consent to continued use.

4.3 Newsletter Subscription

A. Type and Scope of Processing

When subscribing to our newsletter, we may collect:

  • Salutation
  • Email address
  • Date of birth
  • Product or bicycle category of interest
  • News preferences

We use a double opt-in process. Subscription is only completed once you confirm via the verification email.

No third-party transfer occurs for newsletter distribution.

B. Legal Basis

Article 6(1)(a) GDPR – consent.

C. Storage Duration

Your data is stored until you unsubscribe. After cancellation, your data is deleted unless legal obligations apply.

4.4 Contact Form

A. Type and Scope of Processing

If you contact us via our contact form, we process:

  • Name
  • Email address

This data is used exclusively to respond to your enquiry and is not shared with third parties.

B. Legal Basis

Article 6(1)(a) GDPR – consent.

You may withdraw your consent at any time.

C. Storage Duration

Data is deleted once your enquiry has been fully resolved, unless statutory retention applies.

5. Cookies

A. Use of Cookies

We use cookies to ensure website functionality, performance optimisation, and marketing effectiveness.

Types of cookies used:

  • Essential cookies – required for site operation (checkout, security)
  • Performance cookies – analytics and optimisation
  • Marketing cookies – personalised advertising and social media integration

Cookies do not damage your device, execute programs, or contain viruses.

Cookie Policy

B. Legal Basis

Article 6(1)(f) GDPR (legitimate interest) and, where applicable, Article 6(1)(a) GDPR (consent via cookie banner).

C. Storage Duration

Cookies are deleted once no longer required or according to browser settings.

D. Browser Configuration

You may restrict or disable cookies via your browser settings. This may limit website functionality.

6. Data Transfers

Your personal data is shared only when:

  • You have explicitly consented
  • Required for contract fulfilment
  • Required by law
  • Necessary to protect legitimate business interests or legal claims

7. Tracking & Analytics

We use analytics tools to optimise our website and user experience.

Google Analytics (IP Anonymisation Enabled)

  • IP masking enabled
  • Opt-out available via browser plugin or cookie settings

Google Ads, Conversion Tracking & Remarketing

  • Used to display relevant advertising
  • Cookies can be disabled via browser or Google Ad Settings

8. Social Media & Embedded Content

Social Plugins

Our website may include plugins from:

  • Facebook
  • Google services
  • Twitter
  • Instagram

When activated, these services may collect personal data directly. Driiven has no control over this processing.

Please refer to each provider’s privacy policy for details.

YouTube

Embedded videos may establish a connection with YouTube servers. Logged-in users may have activity associated with their account.

9. Your Rights

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

Requests can be sent to admin@driiven.io.

10. Updates to This Policy

We reserve the right to update this Privacy Policy to reflect legal or operational changes. The current version is always available on our website.

Privacy Preference Center