Big Maggy's Privacy Policy & Cookies

Last updated: September 2026

At Big Maggy’s, we take your privacy seriously. This policy explains what personal information we collect, why we collect it, how we use it and the choices and rights you have.

We aim to keep this straightforward. We only want the information we genuinely need to run our business, look after our customers and provide our services.

Who we are

Big Maggy’s is the trading name used by I.W.T.M. Limited.

For the purposes of the Data Protection (Jersey) Law 2018, I.W.T.M. Limited is the data controller for the personal information covered by this policy.

Big Maggy’s
IFC 5, The Esplanade
St Helier, Jersey
JE2 3BY

Telephone: 01534 729900
Email: sales@bigmaggys.com

What information we collect

Depending on how you interact with us, we may collect information including:

• your name
• email address and telephone number
• billing and contact information
• details of orders and purchases
• products and bikes you own or have purchased from us
• servicing, repair and warranty history
• communications between you and Big Maggy’s
• information associated with your customer account
• marketing preferences
• information generated when you use our website, such as technical, device and cookie information

When you make a payment, payment information may be processed by our payment provider. We do not need or intend to retain your full payment-card details ourselves where those payments are handled securely by a payment provider.

How we use your information

We use personal information where necessary to operate Big Maggy’s and provide our products and services.

This includes using information to:

• process and manage online Click & Collect orders
• let you know when an order is ready
• manage payments, refunds and cancellations
• maintain your customer and purchase history
• provide servicing, repairs and workshop support
• administer warranties and communicate with manufacturers or distributors where necessary
• answer enquiries and provide customer support
• operate customer accounts and relevant customer benefits or rewards
• maintain appropriate financial and business records
• prevent fraud and protect our business and customers
• improve our website and services
• send marketing communications where we have an appropriate lawful basis to do so

Our lawful bases for using your information

Under Jersey data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract — where processing your information is necessary to fulfil an order, provide a service or take steps at your request before entering into a contract.

Legal obligation — where we need to keep or use information to comply with legal, accounting, tax or regulatory requirements.

Legitimate interests — where it is reasonably necessary for running and protecting our business, providing good customer service, maintaining appropriate records or improving our services, provided those interests do not override your rights and interests.

Consent — where you have specifically given us permission, for example for certain types of marketing or optional cookies. Where we rely on consent, you can withdraw it.

Jersey's OIC requires businesses to identify and document an appropriate lawful basis for each processing activity.

Email marketing

If you choose to join our mailing list, we may send you occasional emails about Big Maggy’s, new products, events, offers, rides and other things we think may be of interest.

You can unsubscribe at any time using the link included in our marketing emails or by contacting us.

Unsubscribing from marketing will not stop us sending you messages which are necessary to deal with an order, service, warranty, account or other transaction with us.

Who we share information with

We don't sell your personal information.

We may share information with trusted organisations where reasonably necessary to operate our business or provide a service to you. These may include:

• our ecommerce, point-of-sale and customer-management providers
• payment processors
• IT, website, hosting and communications providers
• email and marketing platforms
• accountants and professional advisers
• manufacturers, distributors and suppliers where required for an order, warranty or customer-support matter
• public authorities where we are legally required to provide information

These organisations may act as processors working on our behalf or, in some circumstances, as independent data controllers with their own legal responsibilities.

We require organisations processing personal information on our behalf to handle it appropriately and securely. Jersey controllers remain responsible for selecting appropriate processors and putting suitable contractual arrangements in place.

CitrusLime and our ecommerce system

Our website and ecommerce services use technology supplied by Citrus-Lime Limited.

Information you provide when creating an account, placing an order or otherwise using our online store may therefore be processed through systems provided by Citrus-Lime on our behalf.

Other third-party services may also be integrated with our website from time to time, such as payment, analytics or marketing services.

Cookies and website information

Our website may use cookies and similar technologies to make the site work, remember preferences, understand how the website is used and, where applicable, support marketing.

Some cookies are necessary for the website to operate. Others should only be used where appropriate consent has been obtained.

More information about the cookies used by the website should be available through our Cookie Policy or cookie settings.

How long we keep information

We don't keep personal information for longer than we reasonably need it.

Different information may need to be retained for different periods depending on why it was collected. For example, we may retain transaction, accounting, warranty and service information where necessary to meet legal obligations, deal with future enquiries or establish the history of a product or customer transaction.

When information is no longer reasonably required, we will delete, anonymise or securely dispose of it as appropriate.

The Jersey OIC specifically requires controllers to establish appropriate retention periods rather than retaining personal information indefinitely.

Keeping your information secure

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Access to customer information is limited to people and service providers who reasonably need it for their work.

No system can guarantee absolute security, but we regularly review the systems and services we use and expect our technology providers to maintain appropriate security measures.

Information processed outside Jersey

Some of the technology and service providers we use may process or store information outside Jersey.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate level of protection and any safeguards required by Jersey data protection law are in place.

Your rights

Under the Data Protection (Jersey) Law 2018, you have a number of rights concerning your personal information. Depending on the circumstances, these may include the right to:

• ask what personal information we hold about you and obtain a copy
• have inaccurate information corrected
• ask us to erase certain information
• ask us to restrict how information is processed
• object to certain processing
• receive certain information in a portable format
• withdraw consent where processing is based on consent
• raise concerns about automated decision-making, where applicable

Not every right applies in every situation, and in some circumstances we may have a lawful reason or obligation to retain information.

Jersey's OIC confirms these rights and requires businesses to make it easy for individuals to exercise them.

To exercise your rights, please contact us at sales@bigmaggys.com.

We may need to verify your identity before providing or changing personal information.

Complaints

If you're unhappy with how we've handled your personal information, please contact us first and we'll try to resolve the issue.

You also have the right to raise a concern or complaint with the Jersey Office of the Information Commissioner (JOIC), Jersey's independent data protection regulator.

Jersey Office of the Information Commissioner

Changes to this policy

We may update this Privacy Policy as our website, services or legal obligations change.

The latest version will always be published on our website, with the date of the most recent update shown at the top.

Contact us

If you have any questions about this policy or how Big Maggy’s uses your personal information, please contact:

Big Maggy’s
IFC 5, The Esplanade
St Helier, Jersey
JE2 3BY

Email: sales@bigmaggys.com
Telephone: 01534 729900