Privacy Policy

We may collect the following personal data:

1. Information We Collect

• Full name.
• Email address.
• Shipping and billing address.
• Payment information (processed securely through Stripe; we do not store your full card details).
• Login credentials (email and password, or login via Google account).
• Site usage information and cookies (Google Analytics and similar tools).

2. How We Collect Data

• When the user registers on the platform.
• When logging in via Google or email form.
• When placing an order.
• Through cookies and tracking technologies.
• All data is stored in Firebase Authentication and Firestore (Google Cloud).

3. Use of Information

We use the data to:

• Manage your account and allow login.
• Process orders and payments via Stripe.
• Send verification and order confirmation emails.
• Send promotional communications and newsletters (only if the user consents).
• Analyze platform usage (Google Analytics).
• Comply with legal obligations.

4. Communications

We may send you:

• Verification emails upon registration.
• Order confirmations and updates.
• Promotional communications (if you have given consent).

5. Data Sharing

We share information only with:

• Stripe (payment processing).
• Google Firebase / Firestore (authentication and storage).
• Analytics tools (Google Analytics).

6. Data Retention

• We will retain your data while your account is active or as needed to comply with legal and contractual obligations.

7. User Rights

You have the right to:

• Access, rectify, or delete your data.
• Object to the processing of data for promotional purposes.
• Request portability of your information.
• You can exercise these rights by contacting us at: [email protected].
• 8. Security
• We implement technical and organizational security measures to protect your data.

9. Abandoned Cart Reminders

If you provide your email address during checkout and tick the specific consent checkbox, we may send you up to three automated reminders if you do not complete your order. These emails are sent exclusively after your explicit consent.

• Data processed: email address, cart contents (products, quantities, amounts), session language, and your name if provided.
• Legal basis: explicit consent of the data subject (Art. 6.1.a GDPR), collected through a specific checkbox at checkout, separate from general marketing consent.
• Retention period: until you complete the purchase, unsubscribe, or 30 days have passed since the last email was sent, whichever occurs first.
• Processors: Google LLC (Firebase/Firestore for storage) and Google (Gmail SMTP for email delivery).
• Right to object: you can unsubscribe at any time from the link included in every email or by contacting [email protected]. Unsubscribing affects only these reminders and does not block mandatory transactional emails (order confirmation, invoice).

10. Online Payments and Card Data

When you place an order on our website, your payment is processed directly on this page and not on an external Stripe page. The following information explains how this works and which data is shared with our payment processor.

• Card payments are processed using Stripe Elements, a set of payment components hosted by Stripe Inc. and embedded as iframes inside our checkout page. The card form is rendered and operated by Stripe.
• Your card details (number, expiry date and CVV) are captured directly within these Stripe-hosted iframes and transmitted directly to Stripe Inc. They never reach Ride & Rip servers and are not stored by us at any point.
• Billing details (name, address, email and phone) entered at checkout are shared with Stripe to authorize the transaction, verify card ownership and meet anti-fraud and anti-money-laundering obligations.
• For Strong Customer Authentication (SCA) under PSD2, you may be temporarily redirected to your bank's 3D Secure verification page to confirm the payment. Once authenticated, you are automatically returned to our site to complete the order.
• Stripe also automatically collects technical information for fraud prevention through its Radar service: IP address, user agent, browser and device characteristics, and behavioural signals during the payment session.
• When the payment form loads, Stripe sets technical cookies (`__stripe_mid`, `__stripe_sid` and `m`) on your browser. These cookies are functionally necessary to operate the secure payment form and are detailed in the cookies table of this policy.
• International transfer: Stripe Inc. is based in the United States. Transfers are covered by the Standard Contractual Clauses (SCC) adopted by the European Commission (Decision 2021/914). For more information, see Stripe's Privacy Policy at https://stripe.com/privacy.
• Legal basis: performance of the purchase contract (Art. 6.1.b GDPR) and Ride & Rip's legitimate interest in preventing fraud and chargebacks (Art. 6.1.f GDPR).
• Express checkout (Apple Pay, Google Pay, Stripe Link): if you choose to pay with a wallet, payment data is exchanged directly between your device, the wallet provider (Apple Inc., Google LLC) and Stripe. Ride & Rip only receives the transaction confirmation and the billing/shipping data needed to fulfil the order.

Emails and engagement measurement

If you join our list or newsletter, we keep proof of your consent (date, IP address, browser and the exact text you accepted) and we measure how you interact with our emails:

• Opens: emails include an invisible pixel that tells us whether and when they were opened.
• Clicks: links go through a redirect from our email provider (Resend) that records the click before taking you to the page.
• Deliveries, bounces and spam complaints: if an address bounces permanently we stop emailing it; a spam complaint counts as an unsubscribe.
• Segmentation and attribution: with these signals and your purchases we group subscribers by level of interest (for example, active or inactive) to send fewer emails to those who don't open them, and links to our site carry campaign parameters (utm) so we know which email led to a purchase. This does not produce legal effects or decisions that significantly affect you.
• We only use this data to improve our communications and keep the list clean. You can avoid the pixel by blocking images in your email client, and you can unsubscribe at any time from the link in every email.