Privacy policy

Last updated: November 9, 2026

This privacy policy describes the processing of personal data through the website wrapmybike.eu, the online shop, the forms and communication with Wrap My Bike, in accordance with Regulation (EU) 2016/679 (GDPR). The person whose data is processed is referred to below as “the data subject”.

1. Controller

no handlebars Co BV, trading as Wrap My Bike (hereinafter “Wrap My Bike”), is the controller.

Registered office: Bruanestraat 90A, 8800 Roeselare, Belgium

Company number: 0543.461.997

Email: [email protected]

2. Personal data processed

  • Identification and contact data: name, address, email address, phone number.
  • Business data: company name, VAT number.
  • Order data: products, amounts, payment status, delivery, invoices.
  • Request data: data entered in the request form.
  • Account data: login details, order history.
  • Communication: emails and chat messages.
  • Technical data: IP address, browser, device, pages visited, cookies.

Card and bank details are processed directly by the payment service provider. Wrap My Bike has no access to them. Personal data is obtained from the data subject or the data subject’s device. The VAT number is checked through VIES, the European Commission’s database.

3. Purposes and legal bases

  • Performance of the contract or pre-contractual measures: handling orders, requests and assignments, delivery, customer service.
  • Legal obligation: invoicing, accounting, tax obligations.
  • Legitimate interest: security and proper operation of the website, prevention of fraud and spam, error detection, improvement of services, follow-up of requests.
  • Consent: analytics and advertising cookies. Consent may be withdrawn at any time.

Providing personal data is necessary to perform an order or request. Without this data, performance is not possible.

4. Recipients

Personal data is disclosed only as far as necessary for the purposes above. Recipients belong to the following categories:

  • hosting and infrastructure providers;
  • payment service providers, including Stripe and Klarna;
  • carriers and shipping platforms;
  • providers of invoicing and accounting software, and the accountant;
  • providers of email, form, chat, customer management and planning software;
  • providers of AI tools, for processing messages and requests;
  • providers of security, spam filtering, error detection and cookie management;
  • providers of analytics and advertising services, including Google.

Processors act solely on behalf of Wrap My Bike. Payment service providers, carriers, the accountant and Google (for advertising purposes) act in part as independent controllers. Their own privacy policies apply to that processing.

Personal data is also disclosed when required by law or by a public authority. In a takeover or merger, personal data may be transferred.

5. Transfers outside the European Economic Area

Certain recipients are located outside the European Economic Area, including in the United States. In that case, the transfer is based on an adequacy decision or the standard contractual clauses of the European Commission.

6. Retention period

Invoices and accounting records are kept for the statutory retention period. Other personal data is kept for as long as necessary to perform the order, the request or the customer relationship, or to handle a dispute.

7. Security

Wrap My Bike takes appropriate technical and organizational measures to secure personal data. In the event of a data breach, the competent authority and the data subject are notified when the law requires it.

8. Rights of the data subject

The data subject has the right to:

  • access the personal data and its recipients;
  • rectification of inaccurate data;
  • erasure of data;
  • restriction of processing;
  • data portability;
  • object to processing based on legitimate interest, including follow-up emails;
  • withdraw consent.

Requests may be sent to [email protected]. Wrap My Bike responds within one month and may ask for proof of identity. Data that must be kept by law cannot be erased.

9. Complaints

The data subject may file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, [email protected], www.gegevensbeschermingsautoriteit.be, or with the supervisory authority of the Member State where the data subject lives.

10. Cookies and third-party content

The use of cookies is described in the cookie statement.

The website may contain third-party content, such as videos and social media posts. When this content is viewed, those third parties may process personal data and place cookies. Their own privacy policies apply to that processing.

11. Minors

The website is not intended for persons under the age of 16. Wrap My Bike does not knowingly collect their personal data.

12. Changes

Wrap My Bike may amend this privacy policy. The date at the top shows the most recent change.