1. HOME/
  2. PRIVACY POLICY
  1. HOME/
  2. PRIVACY POLICY

Privacy Policy

Overview

#

This Privacy Policy explains what personal data Backyard Design GmbH processes when you visit this website, configure a kit, place an order or contact us — and on what legal basis. It applies to all users of backyarddesign.co.uk and to customers ordering through our configurator.

This policy implements the EU General Data Protection Regulation (Regulation (EU) 2016/679 — GDPR), the UK GDPR and the UK Data Protection Act 2018, the German Federal Data Protection Act (BDSG), and applicable ePrivacy rules.

Data Controller

#

The data controller for the processing described in this policy is:

Backyard Design GmbH

Margarete-von-Wrangell-Straße 11, 63457 Hanau, Germany

Email: info@backyarddesign.co.uk

Full company information is set out in our Legal Notice.

Data We Collect

#

Depending on how you interact with us, we may collect:

· Account and order data — name, email address, billing and shipping address, phone number (if provided), order history, design preferences.

· Payment data — handled by our payment service providers (Stripe, PayPal, Klarna). We never see or store your full card number.

· Uploaded content — files (images, logos, vectors) you upload via the configurator, plus the metadata described below in the IP Enforcement section.

· Technical data — IP address, browser user-agent, device type, language, timestamps, pages visited, referrer URL, basic interaction events.

· Communications — emails and messages you send us, along with our replies, for support and quality purposes.

Why We Process Your Data

#

We process your data on the following legal bases under Article 6 (1) of the GDPR:

· Contract (Art. 6(1)(b)) — to take pre-contractual steps at your request, process orders, accept payment, manufacture and ship your kit, handle returns and warranty claims.

· Legal obligation (Art. 6(1)(c)) — to comply with German and UK tax, accounting, e-commerce and IP-law obligations, including statutory information duties under § 19 of the German Trade Mark Act (MarkenG) and § 101 of the German Copyright Act (UrhG).

· Legitimate interest (Art. 6(1)(f)) — to keep our website secure, prevent fraud and abuse, defend against IP infringement claims, monitor unauthorised use of our own assets (see Disclaimer), and improve our services. We balance our interest against your rights case by case.

· Consent (Art. 6(1)(a)) — for non-essential cookies, marketing communications and any other processing where we ask you to opt in. You can withdraw consent at any time.

Cookies and Tracking Technologies

#

We use cookies and similar technologies for three purposes:

· Strictly necessary cookies — required to operate the configurator, basket, login and checkout. No consent required (Art. 5(3) ePrivacy Directive / § 25 (2) TDDDG).

· Analytics cookies — measure how the site is used in aggregate. Set only with your consent.

· Marketing cookies — enable personalised advertising on partner platforms. Set only with your consent.

Where consent is required, we ask via a cookie banner on first visit. You can change your selection any time via the cookie settings link on the site.

Newsletter and Marketing

#

If you subscribe to our newsletter, we process your email address and any details you provide to send you product news, drop announcements and rider stories. Legal basis: your consent under Art. 6 (1) (a) GDPR.

Every newsletter contains an unsubscribe link. You can also email us to be removed. Withdrawal is free and does not affect lawfulness of earlier sends.

Payment Service Providers

#

Payments are processed by:

· Stripe Payments Europe Ltd (Ireland) — cards, Apple Pay, Google Pay.

· PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg).

· Klarna Bank AB (publ) (Sweden).

Each provider receives the data needed to take payment and perform fraud and credit checks (where applicable). Each is an independent data controller under its own privacy policy. We never receive or store full card numbers — Stripe tokenises them under PCI-DSS Level 1.

Shipping Partner

#

Every order ships FedEx Express. We share the recipient's name, address, contact phone (where provided), order weight and the customs declaration with Federal Express Corporation / FedEx Express International B.V. for the purpose of dispatch and customs clearance under Art. 6 (1) (b) GDPR.

FedEx is an independent data controller for the carriage and tracking data it generates.

Analytics

#

We use Google Analytics 4 (Google Ireland Limited) — only if you consent. GA4 processes pseudonymised event data including device, browser, region (country level), pages and interactions. IP addresses are truncated before they reach Google's servers.

We have a data-processing agreement in place with Google. Where data is transferred to the United States, the EU-US Data Privacy Framework and Standard Contractual Clauses apply.

Social Media Integrations

#

Our pages may embed content from third-party social networks (Instagram by Meta, YouTube by Google, X / Twitter, and similar). Embedded content sets cookies and may transmit data to the network operator. Operators act as joint or independent controllers under their own privacy policies.

Where embeds are used, they are loaded only after you give consent or interact with the placeholder.

Customer-Uploaded Content and IP Enforcement

#

When you upload a logo, image or other content via our configurator, we store the file together with technical metadata that allows us to fulfil our statutory and contractual obligations:

· Customer ID or email

· IP address and browser user-agent string at the time of upload

· Upload timestamp (UTC)

· SHA-256 hash of the uploaded file

· Reference to the version of the Custom Logo Upload Declaration you accepted

· Timestamp of the declaration acceptance

· Digital proof image and approval timestamp

· Production status events (printed / dispatched / cancelled)

Legal bases: Art. 6 (1) (b) GDPR (contract — production of the kit you ordered) and Art. 6 (1) (c) and (f) GDPR (compliance with information duties under § 19 MarkenG and § 101 UrhG, and our legitimate interest in defending against third-party IP claims). This audit log is retained for the periods set out in the Retention section below.

Hosting and Infrastructure

#

This website is hosted on infrastructure operated by Vercel Inc. (USA) with the Backyard Design configurator and content managed via Payload CMS. Standard server logs (IP, time, request) are processed for security and reliability under Art. 6 (1) (f) GDPR.

Where data is transferred to the United States, Standard Contractual Clauses and supplementary measures apply.

International Transfers

#

Some of our processors are based in countries outside the EU and the UK. Where personal data is transferred to such countries, we rely on:

· Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office;

· EU-US Data Privacy Framework adequacy decision for transfers to certified US processors;

· UK adequacy regulations where applicable.

Data Retention

#

We keep your data only as long as necessary for the purpose it was collected:

· Order and invoicing data — 10 years under § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO).

· Customer-account data — for the lifetime of the account; deleted on closure unless statutory retention applies.

· Uploaded files and IP-enforcement audit log — up to 10 years on the basis of Art. 17 (3) (e) GDPR (defence of legal claims) and the regular three-year limitation period under § 195 BGB.

· Newsletter data — until you unsubscribe.

· Server logs — typically 30 days.

· Marketing/analytics data — varies by provider, see the relevant section above.

Your Rights

#

Under the GDPR and UK GDPR you have the right to:

· Access — request a copy of the data we hold about you (Art. 15).

· Rectification — correct inaccurate data (Art. 16).

· Erasure — ask us to delete data where conditions apply (Art. 17).

· Restriction — limit our processing in specific cases (Art. 18).

· Portability — receive your data in a structured, common, machine-readable format (Art. 20).

· Object — to processing based on legitimate interest, including for direct marketing (Art. 21).

· Withdraw consent — at any time, with no effect on prior lawful processing.

Send any request to info@backyarddesign.co.uk. You also have the right to lodge a complaint with a supervisory authority — the Hessian Commissioner for Data Protection and Freedom of Information in Germany, the UK Information Commissioner's Office (ICO) in the United Kingdom, or the authority of your habitual residence.

Children

#

This website is not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe a child has provided data to us, contact us and we will delete it.

Changes to This Policy

#

We update this Privacy Policy when our processing changes — for example when we add a new payment provider or change a retention period. The current version date appears at the top of the live page on the website. Material changes are flagged at sign-in or via email where required.

Contact and Complaints

#

Questions or requests regarding this Privacy Policy: info@backyarddesign.co.uk.

Supervisory authority addresses are listed in the Your Rights section above. You can complain to a supervisory authority without contacting us first.

sign up for our newsletter

Sign up to be the first to receive the latest news and exclusive offers from Backyard Design.

41593 Winchester Rd. Temecula, CA, 92590
info@backyarddesignusa.com
1.1Motocross1.2Street Bike1.3Cars
2.1About Us2.2Welcome to Our Office2.3BYD International2.4Team Offroad2.5Team Street2.6Our Vinyl2.7Wholesale

© 2026 BACKYARD DESIGN · ALL RIGHTS RESERVED

Legal NoticePrivacy PolicyCookie PolicyTerms & ConditionsDisclaimerIP Takedown

Powered by Teacode

3.1Contact Us
3.2How to Apply Graphics
3.3FAQ
3.4Shipping & Delivery
3.5Payment Methods
3.6Reorder & Reprints
3.7Return & Refund
4.1Legal Notice4.2Privacy Policy4.3Cookie Policy4.4Terms & Conditions4.5Disclaimer4.6IP Takedown
  • Sale
  • Motocross
  • Enduro / Offroad
  • Adventure
  • Street
  • Car
About UsBlogSupport
South AfricaZA/ZAR