Privacy policy

The company identified under “Who we are” below is the data controller. Privacy questions: community@hoponroues.com.

Booking data — lead traveller name, email, phone, country, traveller counts (and, where a venue requires it, traveller names): to perform the booking contract (GDPR art. 6(1)(b)).

Payment data — processed by our payment provider; card numbers never touch our servers.

Support data — messages you send us: legitimate interest in answering you (art. 6(1)(f)).

Technical data — server logs (IP, user agent) for security and fraud prevention: legitimate interest.

We do not sell personal data, run third-party advertising trackers, or profile you. Marketing email is sent only if you explicitly opt in, and every message contains an unsubscribe link.

We use vetted processors to run the service: cloud hosting and content delivery (Vercel), database hosting (Neon), media storage, payment processing and transactional email providers. Where a processor is outside the EEA, transfers rely on adequacy decisions or standard contractual clauses.

Booking records are kept for the period required by French commercial and tax law (up to 10 years for accounting documents). Support correspondence is kept for 3 years after the last exchange. Server logs rotate within 90 days.

You can request access, correction, deletion, restriction, portability, or object to processing at any time by emailing community@hoponroues.com. You may also lodge a complaint with the CNIL (cnil.fr) or your local supervisory authority.

Hop on Roues Private Limited · 12 Rue des Abbesses, 75018 Paris · RCS Paris 923 456 789 · VAT FR42 923456789
Travel operator licence: Atout France IM075260012
Professional liability: Hiscox RCP · Financial guarantee: APST