Privacy Policy
Last Updated: July 8, 2026
This Privacy Policy describes how Buffalo Bicycles Ltd., our affiliates and subsidiaries (“Buffalo Bicycles,” “we,” or “us”) collect, use, and share personal data, and describes the rights and choices you may have with respect to your personal data, and how to assert those rights. This Privacy Policy applies when you visit or interact with our store and website located at https://www.buffalobicycles.com/ (“Site(s”)); or access any other websites, pages, information, content, features, tools, products and services, features, or content owned and operated by us that direct to this Privacy Policy (collectively, the “Services”).
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your personal data as described in this Privacy Policy, and you agree to the practices and terms set forth in our Terms of Service. If you are not comfortable with any part of this Privacy Policy or do not agree with the Terms of Service, please immediately discontinue access or use of the Services.
We may modify this Privacy Policy from time to time and will indicate any such modifications by changing the “Last Updated” date at the top of this page. If we make any material changes, we will notify you using the email address or contact information that we have on file for you, or as otherwise required by law.
Personal Data We Collect or Process
When we use the term “personal data,” we are referring to information that identifies or can reasonably be linked to you or another person. The definition of personal data (used interchangeably with “personal information”) depends on the applicable law based on your country of residency. Only the definition that applies to your residency will apply to you under this Privacy Policy. We may collect or process the following categories of personal data depending on how you interact with the Services, where you live, and as permitted or required by applicable law.
Information You Voluntarily Provide Us
Personal data that we or service providers performing services on our behalf may collect from you include the following:
Account Registration. Certain part of our Services requires registration of a user account. When you register an account with us, we may collect your first and last name, email address, phone number, mailing address, and marketing preferences, so that we may communicate with you and provide you with the Services.
Payment Information. If you purchase a product, subscribe to our service, or order a gift card through our Services, you will need to provide us with a credit card for payment, including billing information such as your billing address, phone number, and name on the payment card. Under circumstances, we may also collect tax identification information where required.
Customer Support. When you engage with our support team and customer support providers, we may collect records, copies of your correspondence (including email addresses), or additional information you choose to share with us.
Promotional. If you choose to participate in a promotion through our Services, we will collect and store the personal data you provide in connection with your participation in the promotion, which may include, your name, date of birth, address email address, phone number, and/or other personal data identified in the terms relating to that promotion. We use the information you provide to administer our promotions. We also may use the information to communicate with you about our products, services, and other promotions.
Newsletters and Alerts Sign Up. You may be able to sign up through the Site to receive electronic newsletters, marketing and promotional emails from us including exclusive offers, discounts, and wellness updates. To sign up, we may ask you for information such as your email address. You can choose at any time not to receive such communication from us by clicking on the unsubscribed link within our marketing emails.
Product Reviews. If you post information on public areas of the Services that information may be collected and used by Buffalo Bicycles, other users of the Services, and the public generally. We strongly recommend that you do not post any information through the Services that allows strangers to identify or locate you.
Information We Automatically Collect
To the extent permitted under applicable law, we may automatically collect certain types of personal data about you when you use or interact with the Services.
Usage Data. When you browse our Sites or Services, we automatically collect log data such as your web request, Internet Protocol (“IP”) address, browser type, domain names, referring and exit pages and URLs, pages viewed and the order of these page views, the date and time you access our servers, and other diagnostic data.
Device Information. When you use your desktop or mobile devices to access our Services, we may be able to identify your device’s unique device identifier, MAC address, operating system, and your mobile device’s advertising ID.
Location Information. When you use our Services, we may infer the generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings. For example, your IP address may indicate your general geographic region. You may choose not to share your location details with us by adjusting your mobile or desktop device’s location services settings. For instructions on changing the relevant settings, please contact your service provider or device manufacturer.
Cookies, Pixels, and Similar Tracking Technologies. We may use various tracking technologies to collect and store information about your use of our Services. We use these tools to ensure that you receive a personalized experience, to provide you with certain functions on our Services, to keep your account safe, and to improve and optimize our Services.
Information From Third Parties
From time to time, we may obtain information about you from third party sources as required or permitted by law. These sources may include:
Social Media. We may offer you the opportunity to engage with our content on or through third-party social networking websites, plug-ins and applications. When you engage with our content on or through third-party social networking websites, plug-ins and applications, you may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture, gender) to deliver the content or as part of the operation of the third-party website, plug-in or application. When you provide information from your social media account, we may use this information to personalize your experience on our Services and on the third-party social networking websites, plug-ins and applications, and to provide you with other products or services you may request.
Third Party Partners. Unless prohibited by applicable law, we may obtain your personal data from marketing partners, analytics providers, Promotion providers, and other third-party partners to market to you, including to match custom audiences or create lookalike audiences on social media or other marketing platforms so that we can better understand which of our Services may be of interest to you, market our Services to you, and to provide us information necessary to improve our Services.
How We Use Your Personal Information
Depending on how you interact with us or which of the Services you use, we may use your personal data for the following purposes:
Provide the Services. We use your personal data to provide you with the Services, including to provide you the Services you requested, to process your payments, to fulfill your orders, t, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, and to enable you to post reviews.
Service-Related Communications. We may send you administrative and account-related notification or communication to you, such as privacy policy and terms updates, security updates, confirmations of your account actions or transactions, or other relevant service-related information. Service-related communications are not promotional in nature and you cannot unsubscribe from these as you will miss important developments relating to your account or the Services.
Marketing and Advertising. We may use your personal data for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
Security and Fraud Prevention. We use your personal data to authenticate your account, to provide secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
Provide Customer Support. When you contact us for customer services, we may use your personal data to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you. Without your personal data, we cannot respond to you or ensure your continued use and satisfaction of the Services.
Infer Your Interest and Personalize Your Experience. We may process your personal data to personalize the Services for you, and to present products, services, and offers tailored to you.
Research and Develop our Services. We may process your personal data and derive analytical and statistical data to better understand the way you use and interact with our Services, including by carrying out data analysis, audits, internal quality assurance, developing new products, enhancing, improving or modifying our Services, identifying usage trends, auditing use and functionality of our Services, determining the effectiveness of our promotional campaigns, and operating and expanding our business activities.
Administer Promotional Events. When you participate in Promotions, we may process your personal data to administer such activities (each of which may have additional rules and could contain additional information about how we process your personal data). You have the right to decline to provide your consent and, if consent is provided, to withdraw it at any time.
Facilitate Corporate Acquisitions, Mergers and Transactions. We may process any personal data regarding your account and your use of our Services as is necessary in the context of corporate acquisitions, mergers, or other corporate transactions.
Legal Reasons. We use your personal data to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.
With Your Consent. For any other purpose disclosed to you prior to you providing us your personal data or which is reasonably necessary to provide the Services or other related services requested, with your permission or upon your direction.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal data to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
Within Our Organization. We may share your personal data within our organization, including to our parent, subsidiary and affiliated companies to facilitate the Services as well as for the purpose of management and analysis; however, we will require that your personal data still be handled in the manner described herein.
Vendors and Service Provider. We may disclose your personal data to vendors and service providers we retain in connection with our business such as: website hosting, online store hosting (i.e., Shopify), data analysis, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, credit card processing, tax and financial advisers, legal advisers, accountants, auditing services, fraud prevention, identity verification, risk assessment, marketing, and network maintenance. These third-party service providers may have access to or process your personal data only for the purpose of providing services to us.
Analytics and Interest-based Advertising Partners. We use third-party analytics, advertising, and marketing providers to collect information about your use of the Sites, see the overall patterns of usage on the Sites, deliver advertisements to your social media account based on email addresses, optimize ad performance, and determine whether our advertising is effective. Where permitted by applicable law, we may share your personal data with business and marketing partners to provide marketing services and advertise to you.
With Your Consent. When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
Change of Ownership. We may disclose and transfer your personal data to a subsequent owner, co-owner, or operator of Buffalo Bicycles or the Services, in connection with a business transaction such as a merger, acquisition, reorganization, sale of substantially all or part of our interests and/or assets, or bankruptcy proceeding. That subsequent owner, co-owner, or operator of Buffalo Bicycles or the Services may use and disclose personal data for purposes similar to what is described in this Privacy Policy. We may also disclose personal data with prospective purchasers to evaluate the proposed transaction.
Legal Obligation and Safety We may share your personal data if it is reasonably necessary to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.
Cookies and Other Similar Tracking Technologies
We and our third-party partners and service providers (such as advertisers and analytics providers) may use cookies and similar digital tracking technologies (such as pixels, web beacons, and tags) (collectively, “Tracking Technologies”) on our Sites and other online services to gather information when you interact with our Services. These Tracking Technologies help us operate our Services, understand your usage, improve functionality, and, depending on your choices and where you live, deliver and measure advertising.
Tracking Technologies can be placed on our Sites by us or by third-party partners we engage for our purposes. Third-party cookies may also be deployed on our behalf on third-party websites (e.g. to measure the effectiveness of ads).
Types of Tracking Technologies
We may use the following types of tracking technologies on our Sites and Services:
Required. These Tracking Technologies are required for the operation of Sites and Services. These Tracking Technologies do not gather information about you for marketing purposes.
Personalization. These Tracking Technologies are used to recognize you when you return to Sites and Services. They remember the choices you make (such as your username, or the region you are in) and the changes you make to text size, fonts and other features you can customize. While these Tracking Technologies can be disabled, this may result in less functionality during your use of our Sites and Services.
Analytics. These Tracking Technologies allow us and our analytics service providers/processors to count visits and traffic sources, or test new features, so that we can measure and improve the performance of our Sites and Services, including as part of our analytics practices to improve the content offered. They help us understand how visitors use our Sites and Services, which site or page the user came from, the number of each user’s visits and how long a user stays on the Sites and Services.
Marketing. Targeting Tracking Technologies may be set through our Sites and Services by our advertising partners to deliver content, including ads, that are relevant to your interests across your devices, based on how you interact with our advertisements or content. They may be used by our advertising partners to build a profile of your interests and to show you relevant ads on other sites. They do not store directly personal data but are based on uniquely identifying your browser and internet device. If you do not allow these Tracking Technologies, you will experience less targeted advertising.
Why We Use Tracking Technologies
We may use these Tracking Technologies for the following purposes:
to enable basic functioning of our Sites or to fix any technical issue through gathering relevant technical data;
for web analytics to improve our Sites (structure, features, accessibility and usability, content) or to fix any technical issue through gathering relevant technical data;
to enable certain basic functions of online browsing and shopping with us (for example, save information you generated or provided on our website such as preferred items, items placed in the cart, billing address to save time and effort when you next return to our Sites or shop with us);
to monitor the effectiveness of our online ads and marketing (by recording your interactions with our ads on third-party websites, our social media platforms or our marketing emails);
to learn more about your preferences and Internet browsing tastes to provide you with tailored advertising (you certainly don't want to hear from us about something you are not interested in); and
to collect information around abandoned shopping carts.
How to Manage Your Tracking Technologies Preferences
Cookies Settings. You may consent to or withdraw your consent to sharing your personal data via Tracking Technologies at any time by clicking the “Cookies Settings” link in the website footer and changing your preferences.
Browser Controls. Alternatively, you can set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our Sites although your access to some functionality and areas may be restricted. If you want to understand your browser’s cookie default setting, or learn to modify your browser’s cookie settings, please use the “Help,” “Tools” or “Edit” menu in your browser or review the instructions provided by the following browsers:
Opting-out of Third-Party Analytics. We may use third-party service providers to monitor and analyze the use of our online, web-based, and mobile-based Services, such as Google Analytics. Google Analytics is an analytics service offered by Google LLC (“Google”) that tracks and reports website traffic. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en. To opt out of Google Analytics or to prevent your data from being collected and used by Google Analytics, please visit: https://tools.google.com/dlpage/gaoptout.
Disabling Certain Interest Based Advertising. Many advertising companies that collect information for interest-based advertising are members of the Digital Advertising Alliance (DAA), which maintain websites where people can opt out of interest-based advertising from their members. To opt out of website interest-based advertising provided by each organization’s respective participating companies, visit the DAA’s opt-out portal available at http://optout.aboutads.info.
Third Party Websites and Links
The Services or communications may provide links to other websites or services that not owned or controlled by us, including links to social media platforms. Links to other websites do not constitute or imply an endorsement of recommendation by use of the linked website and/or content. This Privacy Policy only applies to information collected by our Sites and Services. We are not responsible for the privacy or security practices of other websites or social media platforms or the information they may collect. You should refer to such third parties’ privacy policies on their website to determine their privacy practices.
Security and Retention of Your Information
We use commercially reasonable administrative, technical, and physical safeguards to help protect and secure your personal data from unauthorized access, modification, disclosure, or destruction. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. You should take special care in deciding what information you send to us via our Services or when you communicate with us through email, SMS/texts, chat, or other modes of communication. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on our Services or those on third-party websites. Protecting your personal data is also your responsibility and we urge you to take precautions to protect your personal data. If you have reason to believe that your account or any interaction with us is no longer secure please let us know immediately by contacting customer support or as indicated below in the contact section of this Privacy Policy.
How long we retain your personal data depends on business needs and legal requirements, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies. We will keep your personal data for as long as is reasonably necessary for the purposes for which it is collected, for other purposes described in the Privacy Policy, or as may be required by applicable law.
Your Privacy Rights
Depending on applicable law where you reside or are located, you may be able to assert certain rights identified below with respect to your personal data. Your rights in relation to your personal data are not absolute. Depending upon the applicable law, access to your rights under the applicable law may be denied: (a) when denial of access is required or authorized by law; (b) when granting access would have a negative impact on another's privacy; (c) to protect our rights and properties; or (d) where the request is frivolous or vexatious, or for other reasons.
We may ask you to identify which country you are located in when you use or access some of the Services, or we may rely on your IP address to identify which country you are located. To assert your privacy rights, please email privacy@buffalobicycles.com and indicate which rights you would like to exercise. To protect your privacy, we must be able to verify your identity to confirm that the request came from you before we can process your request to exercise any of the rights that you may be entitled. We may contact you to verify your request. Depending on your request, we will ask for information such as your username, an e-mail address, or a phone number you have used with us.
Right to Access. You may have the right to obtain a copy of your personal data that we hold about you, as well as other supplementary information, such as the purposes of processing, the categories of personal data that we process, the entities to whom we disclose your personal data, etc.
Right to Rectification. You may have the right to request us correct any of your personal data in our files.
Right to Erasure. Under certain circumstances, you may have the right to request erasure of your personal data that we hold about you. To note, this right is not absolute, and we may refuse your right to erasure if there are compelling legitimate grounds for keeping your information.
Right to Restriction. You have the right to request that we restrict our processing of your personal data in certain circumstances. For instance, this right is available if you contest the accuracy of the personal data, or if you have objected to our processing.
Right to Object to Processing. You have the right to object to our processing of your personal data at any time and as permitted by applicable law if we process your personal data on the legal bases of consent or legitimate interests. However, we may continue to process your personal data if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.
Right to Portability. Under certain circumstances, you may have the right to receive personal data we hold about you in a structured, commonly used, and machine-readable format so that you can provide that personal data to another controller.
Right to Withdraw Consent. To the extent the processing of your personal data is based on your consent, you may withdraw your consent at any time. Your withdrawal will not affect the lawfulness of our processing based on consent before your withdrawal.
Right to Object to Automated Decision-Making. We do not make any decisions based solely on algorithms or other automated processing that significantly affect you.
Right to Lodge a Complaint. You may have the right to lodge a complaint with your local data protection authority about our processing of your personal data.
International Transfers
Please note that we may transfer, store and process your personal data outside the country you live in. Where required by applicable law, we may obtain your consent to transfer your personal data outside the country where it was collected and/or implement recognized transfer mechanisms, such as standard contractual clauses, equivalent data transfer agreements, or other appropriate safeguards. These measures may not be required where the transfer is to a country, territory, or recipient that has been determined under applicable law to provide an adequate level of protection for personal data.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, you may contact us by email at privacy@buffalobicycles.com. or you may contact a local contact listed here.