Part P1 Privacy notice
Version 2026-10-16 · Last updated 16 October 2026
Who we are
Himmy Swap is run by Jim Rowe, trading as Himmy Swap, Southwell, Nottinghamshire, UK. Jim is the "controller" of your personal data under UK data protection law (UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, PECR). Questions or requests: hello@himmyswap.com.
What we collect and why
- "Tell Hilda" (wanted) form: name, email, the part you want, your bike and year, country, rough location, max price and currency, whether you have parts to sell, and your answer to our fee question. We use this to deal with your request and to tell you if a matching part turns up.
- "List a part" (listing) form: name, email, part details, bike, condition, asking price and currency, country, location, optional photos and notes. We use this to match your part with riders who want it and, with your agreement, put you in touch.
- Contact form: name, email, subject and message, used only to reply to you.
- Where you came from: if you arrived from an ad or link, the campaign tags (utm_source, utm_medium, utm_campaign, utm_content) and the referring web address are sent with your form, so we know which ads work.
- Consent record: which boxes you ticked and the version of this notice (consent_version), so we can prove what you agreed to.
Our lawful bases
- Your request and match alerts (emails about your own want or listing, and "someone in your country wants a part like this"): necessary to provide the service you asked for (contract), or our legitimate interests in running a useful parts swap. Every alert email has an unsubscribe link.
- Marketing (Hilda's monthly Top Wanted round-up and occasional offers, including affiliate picks): only with your consent, given by ticking the optional box. It's never pre-ticked, and you can withdraw consent any time.
- Replying to messages and ad source tracking: legitimate interests.
Who handles your data for us
- Netlify, Inc. (USA) hosts this website and stores form submissions.
- Brevo (Sendinblue SAS, France) will send our emails and keep our mailing lists once we start using it.
These are "processors": they act only on our instructions. Where data goes to the US, it's protected by the UK–US Data Bridge or the UK International Data Transfer Addendum to standard contractual clauses. We never sell your details. We share your contact details with a matched buyer or seller only with your agreement.
How long we keep it
Wants, listings and contact messages: up to 12 months after your last activity, or sooner if you ask us to delete them. Marketing list: until you unsubscribe; after that we keep only your email on a suppression list so we don't email you again. Consent records are kept as long as we need to show what you agreed to.
Unsubscribing
Click "unsubscribe" in any email, or reply to any email from us, or write to hello@himmyswap.com. Unsubscribing from marketing doesn't stop emails about your own want or listing unless you ask.
Affiliate links
Some links in our emails and on the site may be affiliate links. If you buy through one, we may earn a small commission at no extra cost to you. We'll label affiliate picks clearly.
Cookies
We don't use cookies. If you arrive from an ad, the campaign tags and referring address are kept in your browser's session storage (cleared when you close the tab) so they can be added to your form. When you submit a form, your browser also keeps your bike type, country and email in local storage on your device so they are filled in next time. This stays on your device; clear it any time with the "Not you? Clear" link under the email field, or by clearing your browser data. Our fonts are loaded from Google Fonts, which sees your IP address as part of delivering them.
Your rights
You can ask to access, correct or delete your data, to restrict or object to how we use it, to take a copy (portability), and to withdraw consent at any time. Email hello@himmyswap.com; we'll reply within one month.
Riders in the US and Australia
We're a small UK project and apply this notice to everyone. US riders: we don't sell or "share" personal information for targeted advertising, and every marketing email carries an unsubscribe link as the CAN-SPAM Act requires. Australian riders: we aim to handle your information in line with the Australian Privacy Principles, and send marketing only with consent and an unsubscribe option as the Spam Act 2003 requires. You can raise concerns with the OAIC (oaic.gov.au).
Complaints
Please talk to us first at hello@himmyswap.com. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes
If we change this notice we'll update the version and date above, and we'll ask again before using your details in a new way.