RidePrivacy policy
Last updated: June 2026. This policy describes how RideParts processes personal data in accordance with the General Data Protection Regulation (GDPR).
Who is responsible?
RideParts is the data controller. You can ask privacy questions via hallo@rideparts.nl.
RideParts · Lageveen Holding B.V. · Ringfeart 22, 8464 PD Sintjohannesga, the Netherlands · KvK 92330290
What data do we process, and why?
| Data | Purpose | Legal basis |
|---|---|---|
| Name, address, place of residence | Delivery of your order | Performance of the contract |
| Email address | Order confirmation, fit-note confirmation, track & trace, customer service | Performance of the contract |
| Phone number (optional) | Delivery updates and contact in the event of delivery problems | Performance of the contract |
| Order details | Processing, guarantee and statutory administration | Contract and legal obligation |
| Fit notes (make, model, measured specifications of your fatbike) | Checking whether a part fits before dispatch | Performance of the contract |
| Email address (newsletter) | Sending the newsletter | Consent (Art. 6(1)(a) GDPR), revocable at any time |
We collect no more than necessary and do not use your data for profiling or automated decision-making.
How long do we keep data?
- Invoices and order details: 7 years, due to the tax retention obligation of the Dutch Tax Authority.
- Fit notes: as long as you are a customer, so we can check faster on a future order; deleted earlier on request.
- Customer service correspondence: a maximum of 2 years after the query is closed.
- Newsletter subscription: until you unsubscribe.
With whom do we share data?
We never sell your data to third parties. We share only what is strictly necessary with processors who help us fulfil the order:
- Our payment provider — processing payments.
- PostNL or DHL — name and address details for delivery and track & trace.
- Vercel Inc. — hosting and technical storage of order details.
With processors we conclude data processing agreements in accordance with the GDPR.
Our hosting partner Vercel Inc. is established in the United States, which means data may (in part) be processed outside the European Economic Area. For that transfer we apply appropriate safeguards in accordance with the GDPR: Vercel is certified under the EU-US Data Privacy Framework, and the transfer is additionally covered by the standard contractual clauses (SCCs) adopted by the European Commission.
Cookies and local storage
Your rights
Under the GDPR you have the right to:
- access to the data we hold about you;
- rectification of inaccurate data;
- erasure ("right to be forgotten"), insofar as no statutory retention obligation applies;
- restriction of processing and objection to processing;
- portability of your data (data portability).
Send your request to hallo@rideparts.nl; we respond within 1 working day and handle requests within the statutory period of one month. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority.