Privacy Policy

Last updated: September 18, 2026

At Travel-Riders, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

1. Information We Collect

From all users:

  • Personal identification information (name, email address, phone number)
  • Account credentials managed via Auth0
  • Payment information processed by Stripe
  • Travel preferences and communication preferences

From riders making a booking: We collect a full traveler profile to share with the tour operator so they can prepare for your trip. This includes your address, passport number, T-shirt size, blood group, allergies, medication, emergency contact details, driving license number, and motorcycle make and model. If you are travelling with a pillion passenger, the same details are collected for them.

From tour operators: We collect your business name, NIF (tax identification number), contact email and phone number, business address, Stripe Connect account ID (for payout processing), and any images you upload (logo, hero image, tour photos).

From Riders' Tales authors: If you are an approved author, we collect the profile you choose to show with your stories: your display name, avatar picture, a short bio, your country, and up to five links to your own website or social profiles. This profile is public by design — it is shown on every story you publish and is included in the page data we make available to search engines, so the links you add can be found and followed from your stories. You can edit or remove any part of it yourself at any time from the My Stories area of your account. We also send a transactional email to your account address when one of your stories is published for the first time.

Signup origin: At the moment you create your account, we record how you reached us: the campaign parameters in the web address you arrived on (source, medium, campaign, ad content and search term), the advertising click identifier if there was one, and whether you were on a desktop or a mobile device. This record is stored on our servers against your account identifier only — nothing is placed on your device for this purpose, and none of these values are shared with tour operators.

We use it for one purpose: to know how many accounts each advertising campaign produces. The legal basis is our legitimate interest in measuring the effectiveness of our own advertising (Article 6(1)(f) GDPR). Because it relies on no cookies and no access to your device, it is recorded independently of your cookie banner choices — you may still object to this processing, and the record is included in your data export and erased when you delete your account.

2. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our services
  • Process your bookings and payments
  • Share your traveler profile with the tour operator solely to fulfil your confirmed booking
  • Display your author profile and links on the stories you publish (approved authors)
  • Communicate with you about your bookings and our services
  • Improve our website and services
  • Comply with legal obligations

3. Data Shared With Tour Operators

When you book a tour, your full traveler profile (including sensitive personal data such as passport details, medical information, and emergency contact) becomes accessible to the tour operator managing that tour. This sharing is necessary for the operator to prepare for your safety and logistics on the trip.

Tour operators are contractually bound under our Seller/Operator Agreement to use this data only to fulfil the booked tour and to comply with applicable data protection law (including GDPR) as data processors. They may not retain your data beyond the completion of the booking.

4. Third-Party Services

We use the following third-party services, each of which processes data on our behalf:

  • Auth0 — authentication, user role management, and storage of account metadata (such as TOS acceptance timestamp and operator identity)
  • Stripe & Stripe Connect — payment processing for riders; operator payouts are routed via each operator's own Stripe Connect account using Stripe destination charges
  • Mapbox, Google Maps, GraphHopper — map rendering and route optimization; your IP address may be processed by these services
  • Mixpanel — product analytics and session recording (100% of sessions are recorded); data is stored on EU regional servers (api-eu.mixpanel.com) and persisted in your browser's localStorage
  • Google Analytics 4 & Google Tag Manager — aggregated usage analytics and event tracking
  • CookieYes — cookie consent management
  • Cloudflare Turnstile — bot and spam protection on forms
  • Resend — transactional email delivery (booking confirmations, payment requests, operator notifications)
  • Google Cloud Storage — storage of media files uploaded by operators (logos, hero images, tour photos)

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our infrastructure runs on Google Cloud Platform in the EU (europe-west1 region).

6. Your Rights

Under GDPR you have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your information
  • Object to processing of your information
  • Request data portability
  • Withdraw consent for analytics and session recording at any time via the cookie banner
  • Edit or remove your public author profile and links yourself, at any time, from the My Stories area (approved authors)

7. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: privacy@travel-riders.com
Pragmatic Pyramid, Unipessoal Lda
Address: Urb Jardim da Amoreira, Av Amalia Rodrigues Nr12 4A, 2620-521 Ramada - Odivelas, Portugal