Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your full name, email address, phone number, and password. If you register as an organizer, we also collect your organization name, contact person name, and website.

Booking information: When you book a track day, we collect your motorcycle model, racing number, and any additional details required by the event organizer.

Payment information: Payment processing is handled by Stripe. We do not store your credit card details on our servers. Stripe processes and stores your payment information in accordance with PCI-DSS standards.

Communications: We collect information you provide when contacting our support team, submitting feedback, or subscribing to our newsletter.

Automatically collected data: We automatically collect your IP address, browser type and version, device information, operating system, referring URLs, pages visited, time spent on pages, and cookie identifiers.

2. How We Use Your Information

We use your personal information to provide and maintain our services, including processing bookings, managing your account, and facilitating communication between riders and event organizers.

We use your data to send transactional emails such as booking confirmations, account verification codes, password reset links, and important service updates.

With your consent, we may send you marketing communications about new track day events, special offers, and platform updates. You can unsubscribe at any time.

We use anonymized and aggregated data to analyze platform usage, improve our services, detect fraud, and ensure the security of our platform.

3. Information Sharing

Event organizers: When you book a track day, we share your name, email, phone number, motorcycle details, and racing number with the event organizer so they can manage the event and communicate with you.

Payment processors: We share necessary payment information with Stripe to process transactions. Stripe acts as an independent data controller for payment data.

Service providers: We may share your data with trusted third-party service providers who assist us in operating our platform, such as email delivery services (Resend) and cloud hosting providers (Vercel).

Analytics providers: If you accept analytics cookies, we share usage data with Google Ireland Limited, which provides Google Analytics on our behalf. This includes the pages you visit, the searches you run, and the bookings you complete, together with a randomly generated identifier and an approximate location derived from your IP address. We do not send your name, email address, phone number, or any other information that directly identifies you.

Advertising providers: If you accept marketing cookies, we share the same kind of usage data with Meta Platforms Ireland Limited through the Meta pixel. This lets us show our events to people who have visited BookREVS and measure whether our advertising leads to bookings. It carries a randomly generated identifier for your browser, not your name or email address. Declining marketing cookies prevents it entirely, and is a separate choice from analytics.

Legal requirements: We may disclose your information if required by law, legal process, or governmental request, or to protect the rights, property, or safety of BookREVS, our users, or the public.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze how our platform is used. You can manage your cookie preferences through the Cookie Settings panel accessible from any page.

Necessary cookies are essential for the website to function and cannot be disabled. They handle authentication, security, and basic site functionality.

Analytics cookies help us understand how visitors interact with our platform. We use Google Analytics 4 for this. The data is pseudonymous rather than anonymous: it is not labelled with your name, but it is tied to a randomly generated identifier that lets us recognise the same browser across visits, and where you are signed in, to your account identifier. It therefore remains personal data under the GDPR and we only collect it with your consent. Marketing cookies may be used to deliver relevant advertisements and measure campaign effectiveness. Both require your explicit consent.

No analytics or marketing cookies are set, and no Google script is loaded, until you accept them. You can withdraw your consent at any time through the Cookie Settings panel, which stops further collection and deletes the analytics cookies already stored on your device.

5. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data under certain circumstances.
Right to restrict processing: Request that we limit how we use your data.
Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
Right to object: Object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, contact us at privacy@bookrevs.com. We will respond within 30 days of receiving your request.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

6. Data Retention

We retain your account data for as long as your account is active. Booking records are retained for 7 years to comply with tax and financial reporting obligations. Support ticket data is retained for 3 years after resolution.

When you delete your account, we anonymize or delete your personal data within 30 days, except where retention is required by law.

7. Data Security

We implement industry-standard security measures to protect your personal data, including encryption in transit (TLS), hashed passwords (bcrypt), and secure authentication tokens.

While we take all reasonable precautions, no method of electronic storage or transmission is 100% secure. We encourage you to use a strong, unique password for your BookREVS account.

8. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA) where our service providers operate. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data during international transfers.

Stripe, our payment processor, and Vercel, our hosting provider, both maintain EU-compliant data processing agreements and adhere to applicable data protection standards.

Where you accept analytics cookies, Google Analytics data is collected by Google Ireland Limited and may be transferred to and stored on servers operated by Google LLC in the United States. Those transfers rely on the EU-US Data Privacy Framework and on Standard Contractual Clauses. Declining analytics cookies prevents this transfer entirely.

The same applies to marketing cookies and Meta Platforms Ireland Limited, whose data may be transferred to Meta Platforms, Inc. in the United States under the same frameworks. Declining marketing cookies prevents that transfer, independently of your analytics choice.

9. Children's Privacy

BookREVS is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.

We encourage you to review this policy periodically. Where a change requires your consent, we will ask for it separately rather than infer it from your continued use of the platform.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact the data controller:

DIGIFIT, spletna prodaja, d.o.o. — data controller
Cesta na Brdo 70, 1000 Ljubljana, Slovenia
Email: privacy@bookrevs.com
Website: bookrevs.com