Privacy policy

Who we are

Steel Guru, Rytu g. 13, Kretinga, Lithuania. Questions about your data: info@steel-guru.eu.

Browsing the site

You can browse without giving us anything. Strictly necessary cookies keep the site working (your cart, your saved bike, your cookie choice). We don't sell data. We do keep site statistics, as explained under Site statistics below.

Analytics and advertising cookies

We use the Google tag from Google Ireland Limited for Google Ads, with Google Analytics linked through the same tag, to measure how pages perform and which ads bring riders here. The tag loads on every page, for every visitor. Google may also transfer data to Google LLC in the USA, relying on the EU–US Data Privacy Framework.

If you see our cookie banner (EU/EEA, UK, Switzerland and Canada), then until you click "Accept all", or if you click "Reject", the tag runs in Google Consent Mode: it sets no Google cookies and ads aren't personalised. It can still send Google basic signals without cookies or identifiers — for example, that a page was viewed or an order was placed — which Google uses to estimate statistics and ad conversions in aggregate. The legal basis is our legitimate interest in measuring how our ads perform (Art. 6(1)(f) GDPR). You can object at any time by emailing info@steel-guru.eu.

If you click "Accept all", Google sets its cookies and we share device and usage data with Google (pages and products viewed, items added to cart, checkout started, approximate location and device type), and ads may be personalised. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time in cookie settings.

Outside those regions there's no banner, and the Google tag works as after "Accept all" from your first visit. The legal basis is our legitimate interest in measuring how our ads perform (Art. 6(1)(f) GDPR). You can switch it off in cookie settings, or object by emailing info@steel-guru.eu.

When you've allowed marketing (by clicking "Accept all", or outside those regions as long as you haven't clicked "Reject"), the order confirmation page reports your purchase to Google Ads with the order value, the products and your contact details from checkout (email, phone, name and address), which the Google tag hashes before sending ("enhanced conversions"). If you came from a Google ad, our server also reports the purchase to Google Ads with the ad click ID, the order value and your email address in hashed (one-way encrypted) form.

Site statistics

We use PostHog (PostHog, Inc., USA) to see how the site is used and what to improve. Our PostHog project runs on PostHog's EU cloud, so the data is stored in the EU. It records the pages you view, clicks and other actions (such as adding to cart, starting checkout, sending a sketch or the contact form, or saving your bike), the site and campaign (UTM) tags that brought you here, your browser and device type, an approximate location worked out from your IP address, and technical errors on the page. We keep this data for up to 12 months.

If you see our cookie banner (EU/EEA, UK, Switzerland and Canada), then until you choose, or if you click "Reject", PostHog sets no cookie and stores no ID on your device. Your visit is counted anonymously: PostHog's servers turn your IP address and browser details into a code (a hash) that changes every day, so you can't be recognised on a later day. No sessions are recorded. We do this because we have a legitimate interest in understanding how the shop is used and improving it (Art. 6(1)(f) GDPR). You can object at any time by emailing info@steel-guru.eu.

If you click "Accept all", PostHog stores a random ID in a cookie and in your browser's local storage (names start with ph_, kept for up to 12 months) to recognise your browser on later visits. It may also record your sessions — how you move through and use the pages — with anything you type into form fields masked. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time in cookie settings; PostHog's cookie is then deleted straight away.

Outside those regions there's no banner, and PostHog works as after "Accept all" from your first visit. The legal basis is our legitimate interest in understanding how the shop is used and improving it (Art. 6(1)(f) GDPR). You can object at any time by turning it off in cookie settings (from then on you're counted anonymously, as described above) or by emailing info@steel-guru.eu.

When you place an order

We collect your name, email, phone number, shipping and billing address, order contents and any custom build specifications. We need this to make the bars, ship them, invoice you and handle warranty or returns. Card details are entered directly with Stripe, our payment processor — we never see or store your card number.

Sketches, reviews and contact forms

If you submit a sketch we store the files you upload plus your name, email and the notes you write. If you leave a review we store your name, the bike, your rating and text, and publish it on the site. Contact form messages reach us by email. We use these only to reply to you or to display your review.

Who we share it with

Only the services needed to run the shop: Stripe (payments), our hosting and database provider, our email delivery provider, the courier that delivers your order, and PostHog (site statistics). Google receives ad and site measurement data, as described under Analytics and advertising cookies. Nobody else, ever — we don't sell or rent your data.

PostHog processes data for us under a data processing agreement. Some of its subprocessors, such as Cloudflare, may process data outside the EU; those transfers rely on the EU–US Data Privacy Framework or the EU standard contractual clauses. When you pay for an order, our server sends PostHog a purchase event with the order value, currency, order number and campaign tags. If you clicked "Accept all", or you're outside the cookie-banner regions, it also includes your email address, to link the order to your visit.

How long we keep it

Order and invoice records are kept as long as EU accounting law requires (10 years). Sketches, enquiries and unanswered messages are deleted within 24 months. Published reviews stay until you ask us to remove them.

Your rights

Under the GDPR you can ask for a copy of your data, correct it, delete it, restrict how we use it, or object to it being used. Email info@steel-guru.eu and we'll respond within 30 days. You can also complain to the Lithuanian State Data Protection Inspectorate (VDAI).

Changes

If we change how we handle data, we'll update this page. Last updated 29 September 2026.