Privacy Policy

Last updated: 21.07.2026

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Early Rider Limited Registered office: 2 Butlers Close, Lockerley Romsey, SO51 0LY United Kingdom

Trade name: Early Rider® EU Trading address: Windmill Barn, Hampstead Farm, Henley on Thames, RG9 4LG, United Kingdom Company Number: 05683893 VAT number: GB884 1295 00 / BE0779 819 424 Phone: +44 1189960638 Email: info.eu@earlyrider.com

2. EU Representative (Art. 27 GDPR)

The representative established in the EU pursuant to Art. 27 GDPR is:

Thomas Ball S.A.S Early Rider 606 Route de Saint Martin 74430 Seytroux, France Email: info.eu@earlyrider.com

Data subjects may contact the EU representative in addition to or instead of the controller.

3. What Data We Process and Why

a) Order processing and customer account Data: name, delivery and billing address, email, phone number, order and payment data. Purpose: performance of the purchase contract, delivery, returns, customer service. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

b) Access data / server log files Data: IP address, browser type, operating system, referrer URL, time of access. Purpose: provision and security of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, reliable operation).

c) Email marketing / newsletter (Klaviyo) Data: email address, name, interaction data (opens and clicks). Purpose: sending newsletters and product information. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time via the unsubscribe link or by email.

4. Cookies and Tracking

When you visit our website, strictly necessary cookies are set (legal basis Art. 6(1)(f) GDPR). All non-essential cookies and marketing/analytics services are only used after you give consent via our consent banner (Art. 6(1)(a) GDPR). You can withdraw consent at any time with future effect [insert link to cookie settings].

Strictly necessary cookies (Shopify): _session_id, _secure_session_id, cart, storefront_digest, _shopify_visit, _shopify_uniq.

Services requiring consent:

Service	Purpose	Provider	Data transfer
Meta Pixel	Reach measurement, retargeting, conversion tracking	Meta Platforms Ireland Ltd.	USA (SCCs / EU-US Data Privacy Framework)
Google Ads / conversion tracking	Advertising performance measurement	Google Ireland Ltd.	USA (SCCs / EU-US Data Privacy Framework)
Klaviyo	Email marketing, analytics	Klaviyo Inc.	USA (SCCs / EU-US Data Privacy Framework)
Polar Analytics	Web and store analytics	Polar Analytics Inc.	[verify server location / transfer mechanism]

5. Hosting and Payment Processing

Shopify: Our store is operated by Shopify International Ltd. Shopify processes order, access and payment data on our behalf on secure, PCI-DSS-compliant servers. Legal basis: Art. 6(1)(b) and (f) GDPR, processing under Art. 28 GDPR.

Payment providers: Depending on the payment method chosen, we share the data required for the payment with the relevant provider:

• Shopify Payments (Shopify International Ltd.)

• PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.)

The respective providers' privacy terms apply in addition.

6. International Data Transfers

Your data is transferred to the United Kingdom as part of our group operations. The European Commission has confirmed by adequacy decision that the UK provides an adequate level of data protection. Transfers to the USA (see Section 4) are based on Standard Contractual Clauses or certification under the EU-US Data Privacy Framework.

7. Retention Period

We retain personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations (in particular commercial and tax law). After that, the data is deleted.

8. Your Rights

Under the GDPR you have the right to:

• access (Art. 15)

• rectification (Art. 16)

• erasure (Art. 17)

• restriction of processing (Art. 18)

• data portability (Art. 20)

• object to processing based on legitimate interests (Art. 21)

• withdraw consent with future effect (Art. 7(3))

To exercise your rights or for any privacy-related questions, please contact the controller:

Early Rider Limited Registered office: 2 Butlers Close, Lockerley Romsey, SO51 0LY, United Kingdom Phone: +44 1189960638 Email: info.eu@earlyrider.com

For any queries regarding cancellations, returns, refunds or similar, please contact our team at info.eu@earlyrider.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU Member State of your residence.

9. Age

Our website is not directed at children. Persons under the age of 16 should not submit personal data without the consent of a parent or guardian.

10. Changes to This Privacy Policy

We will update this Privacy Policy where required due to changes in the law or in our processing activities. The current version published here applies.