Privacy notice
Version 1 · 29 July 2026
Who controls your information
PermitGrid, operated by Bike Clinique, Unit 1, The Swan Centre, Rosemary Road, London SW17 0AR. Contact: hello@permitgrid.co.uk.
What we collect
Contact and company details; site address and postcode; project, equipment, supply and load information; MPAN if supplied; correspondence; and PDF/image evidence you choose to upload. Do not send passwords, payment-card details, identity documents or unrelated personal information.
Why we use it
To assess a requested job, identify evidence gaps, prepare and review a document pack, communicate about scope and price, protect the service from misuse, keep an audit record and meet legal obligations. Our lawful bases are steps requested before a contract, performance of a contract, legitimate interests in operating and securing the service, and legal obligation where applicable.
Who receives it
Access is limited to authorised PermitGrid operators, contracted infrastructure providers and an assigned qualified reviewer where needed. A minimal case-reference notification is sent to our private operations board. We do not sell your information. Nothing is sent to a DNO or authority unless separately agreed.
Storage and retention
Data is stored on access-controlled OVHcloud infrastructure with encrypted web transport, restricted operator access and encrypted backups. Abandoned enquiries are deleted after 30 days. Working uploads are deleted 90 days after a case is delivered or closed. The minimum case and transaction record may be retained for up to six years where needed for contract, accounting or legal obligations. Deletion tombstones contain no customer details.
Your rights
You may ask for access, correction, deletion, restriction, portability or object to processing, subject to legal exceptions. You may complain to the UK Information Commissioner’s Office at ico.org.uk.
Security and incidents
Uploads are type- and size-limited, stored outside the public web directory and available only through authenticated operator routes. No internet service can be guaranteed risk-free; we investigate suspected incidents and notify affected people or regulators where legally required.