1. Introduction
AcconRiaff ("we", "our", or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (acconriaff.com) or use our bike rental services.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and contact details (email address, phone number, postal address)
- Date of birth and age verification
- Payment information (processed securely through third-party payment processors)
- Government-issued ID for bike rental verification
- Emergency contact information
- Communication preferences
2.2 Technical Information
We automatically collect certain technical information:
- IP address and browser type
- Device information and operating system
- Website usage data and analytics
- Cookies and similar tracking technologies
- Location data (with your consent)
3. How We Use Your Information
We use your personal information for the following purposes:
- Processing bike rental bookings and payments
- Verifying identity and eligibility for bike rentals
- Communicating about your bookings and our services
- Providing customer support and responding to inquiries
- Sending marketing communications (with your consent)
- Improving our services and website functionality
- Complying with legal obligations and preventing fraud
- Conducting analytics and research to enhance user experience
4. Legal Basis for Processing
Under GDPR, we process your personal data based on:
- Contract performance: Processing necessary for bike rental services
- Legitimate interests: Improving services, fraud prevention, and analytics
- Consent: Marketing communications and non-essential cookies
- Legal obligation: Compliance with applicable laws and regulations
5. Information Sharing and Disclosure
We may share your information with:
5.1 Service Providers
- Payment processing companies
- Website hosting and cloud storage providers
- Customer support platforms
- Email marketing services
- Analytics and advertising platforms
5.2 Legal Requirements
We may disclose information when required by law, court order, or to:
- Comply with legal processes or government requests
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Enforce our terms of service
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal, tax, and accounting requirements (typically 7 years)
- Resolve disputes and enforce our agreements
- Pursue legitimate business interests
7. Your Rights Under GDPR
As a data subject, you have the following rights:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Objection: Object to certain types of processing
- Withdraw consent: For consent-based processing
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences and settings
- Analyze website traffic and user behavior
- Provide personalized content and advertisements
- Improve website functionality and security
You can manage cookie preferences through our cookie banner or browser settings. For more information, please see our Cookie Policy.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and staff training
- Secure payment processing systems
- Regular backups and disaster recovery procedures
10. International Data Transfers
Your data may be transferred to and processed in countries outside the UK/EEA. When this occurs, we ensure adequate protection through:
- Adequacy decisions by the relevant authorities
- Standard contractual clauses
- Certification schemes and codes of conduct
- Other appropriate safeguards as required by law
11. Children's Privacy
Our services are not intended for children under 16 years old. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes by:
- Posting the updated policy on our website
- Updating the "last updated" date
- Sending email notifications for material changes
- Displaying prominent notices on our website
14. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
15. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with the law: