Your data, plainly.

This site, swellbike.com, is operated by Beach Bike LLC, doing business as Swell Bike Co., 239 Main St. Suite B, Destin, FL 32541 ("we", "us"). This policy explains what personal information we collect, why, who we share it with, and the choices you have. It applies to this website only; Beach Bike and our other brands run their own sites and their own policies.

• Order information: name, email, phone, shipping and billing address, the items you buy, and your order history. We need this to fulfil and support your order.
• Payment information: card details are entered directly into a form provided by Stripe, our payment processor, and never touch our servers. We receive only a confirmation, the last four digits, and the card brand.
• Contact and fleet enquiries: whatever you type into the fleet-quote form, plus your email and phone if you give them.
• Marketing email: your email address, if you tick the opt-in box at checkout.
• Technical data: IP address, browser and device type, pages visited, and the cookies described below, collected automatically when you browse.

• To process, ship, and support your orders, including order confirmation and tracking emails.
• To answer your messages and quotes.
• To send marketing email, only if you opted in. Every email has an unsubscribe link.
• To keep the site secure and detect spam and fraud.
• To meet legal obligations such as tax and accounting records.

We do not sell your personal information and we do not use it for third-party advertising.

We share data only with service providers who need it to do their job for us, under contracts that restrict their use of it:

• Stripe, Inc. — payment processing.
• Shipping carriers and Shippo, Inc. — creating labels and delivering your order (name, address, phone).
• Resend — sending transactional email such as order confirmations.
• Vercel, Inc. and Supabase, Inc. — hosting for this site and for the order-management system that stores your order.

Because our sister brands share the same order-management system, if you have bought from more than one of them your customer record may be merged so we can support you across brands. We may also disclose information when required by law or to protect our rights.

We use strictly necessary cookies and browser storage only: your shopping bag (stored in your browser), checkout contact details saved for the current tab session so you do not have to retype them, and the Stripe cookies needed for payment security. We do not currently run advertising or analytics cookies. If that changes, this policy will be updated first.

Order and payment records are kept for 7 years for tax, accounting, and warranty purposes. Contact-form messages are kept for 2 years. Marketing email addresses are kept until you unsubscribe. Technical logs are kept for 2 years.

• Unsubscribe from marketing email at any time using the link in any email or by writing to us.
• Ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it.
• Residents of California and other states with privacy laws have additional rights, including the right to know what we collect and the right not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising.

To exercise any of these, email email us. We will verify your identity and respond within the time the applicable law requires.

This site is not directed at children under 16 and we do not knowingly collect their information.

Payments are handled by Stripe over encrypted connections; our own systems use access controls and encryption in transit. No method is perfectly secure, and we will notify you and the relevant authorities as required by law if a breach affects your data.

We will post any changes here with a new effective date. Material changes will be flagged on the site or emailed to customers where required.