Privacy policy

Ride Iberia is a motorcycle rental and tour operator based in Porto, Portugal and Vigo, Galicia, Spain. We are the data controller of the personal information you provide through ride-iberia.com, by email, by WhatsApp, or in person at our garage.

Contact:

• Email: Info@ride-iberia.com
• Phone / WhatsApp: +351 913 462 674 (Porto) · +34 659 94 56 21 (Vigo)
• Address: Porto, Portugal · Vigo, Galicia, Spain (full registered address available on request)

For privacy-specific matters, write to the email above with “Privacy” in the subject line. We respond within 30 days as required by EU GDPR.

We collect only the data we need to plan, deliver and bill your motorcycle rental.

When you book: name, email, phone number, country of residence, riding experience level, trip preferences (dates, group size, route choices), and payment card details (handled by WooPayments / Stripe — we never see the full card number).

At pickup: a copy or sighting of your passport or national ID, your motorcycle licence, and your International Driving Permit if applicable. We record the document number and expiry date.

During the rental: photographs of the motorcycle at handover and return (for damage documentation), incident reports if anything happens, and roadside-assistance call logs.

When you contact us: the content of your emails, WhatsApp messages and form submissions, plus any metadata (timestamp, IP address).

When you visit our website: minimal anonymous analytics — pages visited, approximate location (country), device and browser type, referring source, via Jetpack Stats.

If you subscribe to our newsletter: email address and consent timestamp.

Under EU GDPR Article 6, we process your data only when we have a lawful basis. Ours are:

• Performance of a contract (Art. 6(1)(b)): to confirm your booking, collect payment, deliver the bike, provide roadside support.
• Legal obligation (Art. 6(1)(c)): to identify the driver to the Spanish traffic authority (DGT) for fines, to keep accounting records for the Spanish tax authority (Hacienda).
• Legitimate interest (Art. 6(1)(f)): for documenting bike condition at handover (damage protection), for fraud prevention on payments.
• Consent (Art. 6(1)(a)): for marketing emails. You can withdraw consent at any time.

We do not sell your personal data. We share only what is necessary:

Payment processing: Stripe / Automattic Inc. (WooPayments). Your card details go directly to Stripe — we never store the full card number or CVV. Stripe is PCI-DSS Level 1 certified.

Website hosting and email: Automattic Inc. (WordPress.com) hosts ride-iberia.com. Jetpack and MailPoet handle transactional emails and the newsletter.

Motorcycle insurer: our insurance partner, for claims processing.

Spanish authorities: the DGT (fines), the Hacienda (tax records), and the police if legally required.

Roadside assistance partners: in case of breakdown, accident or theft.

We never share your data with marketing partners, data brokers, or advertising networks.

• Booking and rental records: 6 years from the rental end date (Spanish tax law).
• Identity document references: 6 years.
• Photographs at handover: 12 months, longer if there is an open damage claim.
• Email correspondence: 3 years from last contact.
• Newsletter subscriptions: until you unsubscribe.
• Marketing consent records: 5 years after withdrawal.

We use a small number of cookies to make the site work. No advertising cookies or third-party tracking pixels.

Strictly necessary: shopping cart, checkout session, login state, security tokens.

Analytics: Jetpack Stats — anonymous, aggregated visit counts.

Clear cookies at any time via your browser settings.

Our website and email systems are hosted by Automattic in EU and US data centres. Payment processing happens at Stripe (EU and US). Transfers outside the EU/EEA are covered by Standard Contractual Clauses and the EU–US Data Privacy Framework where applicable.

If you are in the EU or EEA, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid. aepd.es.

To exercise any right, email Info@ride-iberia.com with “Privacy request” in the subject. We respond within 30 days.

Ride Iberia rents motorcycles only to riders aged 23 or older. Our services and website are not directed at children under 16.

We take reasonable technical and organisational measures: HTTPS across the entire site, encrypted database storage, role-based access controls, two-factor authentication on admin accounts, PCI-DSS Level 1 payment processing through Stripe. If we discover a breach affecting your personal data, we will notify you and the AEPD within 72 hours as required by GDPR Article 33.

Our site links to third-party websites. Once you leave ride-iberia.com, this policy no longer applies.

We may update this Privacy Policy from time to time. Material changes will be flagged on this page.

Last updated: June 2026.