Privacy policy

Who processes your data

Ride Adventure LTD, Stara Zagora, is the data controller under Regulation (EU) 2016/679 (GDPR).

Data enquiries: office@rideadventure.bg

What we collect

When you order: first and last name, email, phone, delivery address and optionally company invoicing details. These are necessary to perform the contract — without them we cannot deliver your order.

When you register: email and password (stored only as a cryptographic hash, never in readable form).

Automatically: IP address and browser information when an order is placed, for fraud protection.

We do not store card details. Card payments are handled entirely by Stripe.

Why, and on what basis

Purpose	Legal basis
Fulfilling your order	Performance of a contract
Issuing invoices	Legal obligation
Accounting records	Legal obligation
Email newsletter	Consent (withdrawable at any time)
Fraud protection	Legitimate interest

Who we share with

• Couriers (Econt, Speedy) — name, phone and address, to deliver the parcel
• Stripe — to process card payments
• Resend — to send email
• Our accountant — for invoices, as required by law

We do not sell or rent personal data to third parties.

How long we keep it

• Order and invoice data: 10 years (Accountancy Act)
• Account data: until you delete your account
• Newsletter subscription: until you unsubscribe

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Email office@rideadventure.bg — we respond within 30 days.

You may also complain to the Commission for Personal Data Protection (kzld.bg).

Cookies

We use only strictly necessary cookies: session, cart and language. We do not use tracking or advertising cookies without your consent.