Privacy policy
This policy explains how Bikren uses personal information when you browse, open a wholesale account, or buy from us. It is written for Shopify’s privacy-policy field and for the UK GDPR and the Data Protection Act 2018. It also covers the Privacy and Electronic Communications Regulations (PECR) for cookies and email.
The controller is [Add your registered company name], trading as Bikren, [Add the warehouse street, postcode and city in Germany], Germany. Email [Add your customer email]. ICO registration: [Add your ICO registration number]. If we are not established in the United Kingdom, our Article 27 UK representative is [Add your UK GDPR Article 27 representative, if you are not established in the United Kingdom].
What personal information we collect
- Identity and contact data: name, email, telephone, delivery address, and any UK correspondence address you give us.
- Wholesale data: company name, job title, Companies House or VAT number, and trade references.
- Order data: products, size, width, transaction amount, and the last digits of a card. Shopify Payments or the payment provider named at checkout collects the full card number. We do not store it.
- Technical data: IP address, browser, device, and cookie identifiers collected by Shopify.
- Support data: messages you send us, including return requests.
- Marketing preferences, if you join the newsletter or VIP list.
On this preview, the bag, wish list and newsletter address stay in local storage on your device. They are not sent to a server until the Shopify store is the live shop.
How we use personal information
- Contract: to take an order, dispatch it from Germany, handle a return, and run a wholesale account.
- Legal obligation: tax, customs paperwork, and accounting records.
- Legitimate interests: preventing fraud, answering a question, and keeping the site secure, where those interests are not overridden by your rights.
- Consent: marketing email where we need consent, and non-essential cookies.
If you have bought from us, PECR may allow us to email you about similar goods and to offer an opt-out in every message. Otherwise we email marketing only with your consent. You can unsubscribe in the message or by writing to us.
Sharing personal information
We share information with processors who act on our instructions:
- Shopify, for the online store, checkout, and (if you turn them on) customer accounts and inboxes.
- The payment provider shown at Shopify Checkout.
- The carrier that collects the parcel from our warehouse in Germany, so they can deliver it and handle customs data.
- Our accountant, and HMRC or a German tax authority, where the law requires a record.
- A professional adviser, insurer, or a buyer of the business, under a duty of confidence.
We do not sell personal information. We disclose it if a court, HMRC, customs, or the ICO requires it.
Behavioural advertising and cookies
Shopify and any analytics or advertising app you enable may use cookies to measure visits or to show ads. Non-essential cookies run only after consent, through Shopify’s customer privacy banner (Settings → Customer privacy). Essential cookies, including those needed for the bag and for checkout, do not need consent.
You can refuse non-essential cookies in the banner and in your browser. If you block essential cookies, the bag and checkout may not work.
Do not track
The site does not respond to a browser Do Not Track signal, because there is no settled standard. The cookie banner is the control that applies.
International transfers
Orders are fulfilled in Germany. The UK adequacy decision for the EEA, and the EU adequacy decision for the UK, cover that transfer. Shopify may process data in the United States or elsewhere. Where that happens we rely on the UK–US data bridge, the EU–US Data Privacy Framework where it applies to the processor, or the UK International Data Transfer Agreement or Addendum, as Shopify’s data processing addendum describes.
Your rights
You can ask us to:
- Give you a copy of your personal information (access).
- Correct it, or complete it.
- Delete it, where the law allows.
- Restrict how we use it.
- Provide it in a portable format.
- Object to use based on legitimate interests, and object to direct marketing at any time.
- Withdraw consent, which does not affect use that happened before you withdrew it.
We do not make solely automated decisions that produce a legal effect, other than fraud checks a payment provider may run, which you can ask to be reviewed by a person.
Write to [Add your customer email] and we will respond within one month. You can complain to the Information Commissioner’s Office at ico.org.uk, and, where the establishment is in Germany, to the competent German supervisory authority. We would like the chance to put a problem right first.
Data retention
We keep order and tax records for six years after the end of the tax year they relate to, which is the usual UK accounting period. Wholesale account details are kept while the account is open and then for up to six years. Marketing data is kept until you unsubscribe. Server logs kept by Shopify follow Shopify’s retention, which is described in their privacy notice.
Children
The shop is aimed at adults buying for themselves or for a business. We do not knowingly collect personal information from anyone under 13. Kids’ footwear is sold to adults.
Changes
We will post changes on this page. This version is dated 23 October 2026.
Contact
Privacy questions: [Add your customer email]. Postal address: [Add the warehouse street, postcode and city in Germany], Germany. UK representative: [Add your UK GDPR Article 27 representative, if you are not established in the United Kingdom].