BE Cycles Mobile Bike Repair

Payment Security & Data Protection Policy

Effective Date: August 5, 2026

1. Introduction

BE Cycles is committed to protecting the security and privacy of your payment information. This Payment Security & Data Protection Policy outlines how we handle customer payment data and maintain compliance with Payment Card Industry Data Security Standard (PCI DSS) requirements.

2. Payment Processing

BE Cycles partners with Stripe, a leading third-party payment processor, to handle all customer payment transactions. When you make a purchase on our website, your payment information is securely transmitted directly to Stripe's PCI-compliant servers.

Key Points:

  • Credit card data is NOT stored on BE Cycles' servers
  • Payment processing is handled exclusively by Stripe's secure payment infrastructure
  • Stripe is PCI DSS Level 1 certified

3. Data Security Measures

BE Cycles implements comprehensive security measures to protect customer data:

  • HTTPS/SSL Encryption: All website traffic is encrypted using 256-bit SSL/TLS encryption
  • Secure Cookie Handling: Session cookies include Secure and HTTPOnly flags to prevent unauthorized access
  • Strong SSH Authentication: Server access is protected with strong cryptographic algorithms
  • Regular Security Scanning: Our website undergoes regular vulnerability assessments and PCI compliance scans
  • Firewall Protection: Network-level security controls restrict unauthorized access attempts

4. PCI DSS Compliance

BE Cycles is committed to maintaining full compliance with the Payment Card Industry Data Security Standard (PCI DSS). By using Stripe as our payment processor and implementing the security measures outlined above, we ensure that:

  • Payment cardholder data is protected against unauthorized access
  • Data transmission is encrypted and secure
  • Security vulnerabilities are regularly assessed and remediated
  • Staff with access to payment systems are trained on security best practices

5. Customer Data Collection

When you make a purchase or schedule a service, BE Cycles collects the following information:

  • Name and contact information (email, phone number)
  • Service/product details and order information
  • Delivery address (for physical orders)
  • Payment method (handled by Stripe, not stored by BE Cycles)

We do NOT collect or store:

  • Full credit card numbers, expiration dates, or CVV codes
  • Sensitive payment authentication data

6. Data Privacy & Retention

BE Cycles respects your privacy and commits to:

  • Using your personal information only for order fulfillment and customer service
  • Not sharing your data with third parties without your consent (except payment processors and shipping partners)
  • Retaining data only as long as necessary for business purposes and legal compliance
  • Allowing you to request access to, correction of, or deletion of your personal data

7. Security Incident Response

In the unlikely event of a security incident or suspected data breach affecting customer payment information, BE Cycles will:

  • Immediately investigate the incident
  • Notify affected customers in accordance with applicable laws and regulations
  • Take corrective action to prevent future incidents
  • Cooperate with law enforcement and regulatory authorities as required

8. Third-Party Service Providers

BE Cycles uses the following trusted third-party services for business operations:

  • Stripe (Payment Processing) - PCI DSS Level 1 Certified
  • Google Analytics & Ads (Analytics & Marketing) - No payment data shared
  • Beeline Connect (Appointment Scheduling) - No payment data stored

All third-party service providers are contractually required to maintain security standards equivalent to or exceeding BE Cycles' own standards.

9. Questions & Contact Information

If you have questions about this Payment Security & Data Protection Policy, your personal information, or our security practices, please contact us at:

BE Cycles Mobile Bike Repair
Contact via becyclesrepair.com

10. Policy Updates

BE Cycles reserves the right to update this Payment Security & Data Protection Policy at any time. Changes will be posted to our website and will be effective immediately upon posting. Your continued use of our website and services indicates your acceptance of any updated policy.

This policy is effective as of August 5, 2026, and reflects BE Cycles' commitment to protecting customer payment security and privacy.