Privacy policy SheRidez

Introduction

Welcome to SheRidez, the ultimate destination for empowering women motorcyclists. Through a supportive community, meaningful connections, knowledge sharing, and exhilarating riding experiences, we aim to inspire and unite women riders worldwide. Our mission is to create a vibrant space where women can share their passion for motorcycling, exchange ideas, and embark on thrilling adventures—all while breaking stereotypes and overcoming barriers.

SheRidez is committed to complying with the General Data Protection Regulation (GDPR) to safeguard the privacy and security of our users’ personal data.

Effective Date: 20.06.2026

1. Legal Basis for Processing Personal Data

We process personal data based on the following legal grounds:

• Consent of the data subject (Article 6(1)(a) GDPR)

• Performance of a contract (Article 6(1)(b) GDPR)

• Legal obligation (Article 6(1)(c) GDPR)

• Legitimate interest (Article 6(1)(f) GDPR)

The processing of your phone number for SMS verification is based on our legitimate interests in protecting the integrity and safety of the SheRidez community and in preventing misuse of our services. We do not rely on consent for phone number collection unless we intend to use the number for purposes unrelated to verification (e.g., optional service notifications), in which case separate consent will be explicitly obtained.

2.  Data Controller Information

The personal data controller responsible for processing personal data on this website is:

• Name: SheRidez Operation ApS, CVR: 45318877
• Address: Rumæniensgade 6, 2300 Copenhagen, Denmark
• Contact Information: [email protected]

3. Data Retention Period

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations.

Phone numbers collected for SMS verification will be retained only as long as necessary to provide the verification and security of your account or in accordance with applicable law. When an account is deleted, associated phone number data will be deleted within 14 days unless retention is required for compliance with legal obligations.

4. User Rights

As a data subject, you have the following rights under the GDPR:

• The right to access your personal data.

• The right to rectify inaccurate or incomplete data.

• The right to erase your data (right to be forgotten).

• The right to restrict processing under certain conditions.

• The right to data portability.

• The right to object to processing based on legitimate interests or direct marketing.

• The right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]

5.  Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or disclosure. These measures include encryption, access control, and secure data storage practices.

6.  Third-Party Data Sharing

We do not sell or rent personal data to third parties. However, we may share personal data with third-party service providers to facilitate our services, comply with legal obligations, or protect our legitimate interests. Any third-party processors are contractually obligated to handle data securely and in compliance with applicable data protection laws.

7. Copyright Notice

All content available on this website, including but not limited to text, graphics, logos, and software, is the intellectual property of SheRidez Operations ApS and is protected by copyright laws and trademark. Unauthorized use, reproduction, or distribution of any content is strictly prohibited.

8. Disclaimer for Advertisements

We are not responsible for the content, accuracy, or reliability of third-party advertisements displayed on our website. Any claims or disputes related to advertisements should be directed to the respective advertisers.

For more information, please contact us at [email protected]

9. Information We Collect

9.1. Personal Data

We collect and process the following personal data:

• Personal Identification Data: Name, surname, and email address. Age is optional and can be provided by users, but is not required.

• Location Data: We use location services to allow users to find nearby events, locate other women riders, and view real-time status on the app, such as whether they are available for a ride (using a green light). We also collect location data for tracking the route during an event or ride.

• Usage Data: We collect information about how often you use the app, how long you use it, and how many users are active on the platform.

• Profile Data: Profile creation includes the possibility of adding profile pictures and motorcycle images, but we do not collect those media as they are not essential for our purposes.

• Account Information: When you register for a SheRidez account, we collect information such as your name, email address, and password to create and manage your account.

• Profile Information: You may choose to provide additional information to personalise your profile, such as your motorcycle preferences, riding style, and interests. This includes voluntary responses to the riding profile questionnaire completed during or after onboarding, covering categories such as riding experience, community role preferences, group size preferences, skills, availability, gear preferences, and lifestyle indicators. For a full description of this data, its legal basis, and your rights in relation to it, see Section 9.3

• Communication Data: We may collect information when you communicate with us or other users, including messages, posts, and interactions within the SheRidez community.

• Device Information: We automatically collect certain information about your device, such as device type, operating system, and unique device identifiers, to optimize your experience on the SheRidez app.

• Location Data: With your consent, we may collect and process location data to provide location-based features and services, such as finding nearby events or routes and other users

9.2. Non-Personal Data

We may also collect non-personal data, such as aggregated usage statistics, to analyse trends, improve our services, and enhance the user experience. This data does not identify you personally and is used for statistical purposes only.

9.3. Riding Profile Preference Data

During the onboarding process and at any time thereafter, users may voluntarily complete a multi-step profile questionnaire. This questionnaire collects self-selected preference data across the following categories: riding experience level and frequency; preferred riding types and typical ride duration; preferred community role and riding interests; preferred group format and group size; skills the user is willing to share with the community and skills the user wishes to develop; self-assessed mechanical competence level; music and ambient sound preferences during rides; availability for rides; and helmet, gear, and travel readiness preferences.

This data is provided voluntarily. Each screen in the questionnaire includes a “Skip for now” option, and no category is mandatory for account creation or continued use of the app.

Legal basis and classification. Where preference responses are stored in association with a user account, they constitute personal data within the meaning of Article 4(1) GDPR, as they relate to an identifiable natural person. Such data is processed on the legal basis of the user’s freely given, specific, and informed consent (Article 6(1)(a) GDPR), and for the purpose of delivering a personalised community experience — including matching users with compatible riders, facilitating group formations, and surfacing relevant events and learning opportunities within the SheRidez platform.

Where preference responses are aggregated, anonymised, and de-linked from individual accounts in a manner consistent with Recital 26 GDPR — such that no individual can reasonably be identified — the resulting data is processed as non-personal statistical data. This aggregated data is used solely for the purposes of platform analytics, community feature development, and service improvement, and does not constitute personal data processing within the scope of GDPR

Retention and control. Users may review, update, or delete their riding profile preference data at any time through the app’s profile settings. Preference data associated with a user account is deleted upon exercise of the right to erasure in accordance with Article 17 GDPR, subject to the conditions and exceptions set out in Section 12 of this Privacy Policy.

SheRidez does not use riding profile preference data for automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Article 22 GDPR.

9.4. Phone Number and SMS Verification

We collect your mobile phone number during the registration process to provide user identity verification for security, fraud prevention, and to help safeguard the SheRidez community. Your phone number is used solely to verify your account via a one-time code (OTP) sent by SMS and to help prevent fake, abusive, or scam accounts from accessing the platform.

We process your phone number based on our legitimate interest (Article 6(1)(f) GDPR) in maintaining community safety and trust. We do not use your phone number for marketing purposes unless you have given explicit consent.

Your phone number is stored securely, with restricted access only by authorized personnel and third-party processors who support the SMS verification process. You may contact us any time to access, correct, or request deletion of this data in accordance with your rights under GDPR.

10. How We Use Your Information

We use the information we collect for the following purposes:

• User Account Management: To create and manage your SheRidez account, personalize your experience, and provide access to our services.

• Connecting Users: We use personal and location data to enable you to find and connect with other women riders nearby. This includes helping users find events, join rideouts, and track their routes.

• Event Management: The location and route-tracking features are used to facilitate real-time event management and enhance user participation in events.

• Community Engagement: To facilitate communication and interaction within the SheRidez community, including messaging, sharing content, and connecting with other users.

• Location-Based Services: To provide location-based features and services, such as finding nearby events, routes, or riding companions.

• Personalized Experience: We may use your riding preferences and interests to match you with other users who share similar riding styles or interests.

• Analytics and Improvements: To analyse usage patterns, monitor performance, and optimize the SheRidez app for better user experience.

• Marketing and Promotions: With your consent, to send you promotional materials, offers, and updates about SheRidez and affiliated partners.

11. Data Sharing and Disclosure

We may share your information with third parties in the following circumstances:

• Service Providers: We may engage third-party service providers to perform functions on our behalf, such as hosting, data analysis, marketing, and customer support.
• Affiliated Partners: With your consent, we may share your information with affiliated partners for marketing, promotional, or research purposes.
• Legal Compliance: We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of SheRidez, its users, or others.

12. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: You have the right to access and receive a copy of your personal data held by SheRidez.
• Rectification: You can request to correct or update any inaccurate or incomplete information we hold about you.
• Erasure: You can request the deletion of your personal data from our systems, subject to certain exceptions.
• Restriction: You have the right to restrict the processing of your personal data under certain circumstances.
• Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
• Users have the right to access, rectify, erase, restrict, and port their personal data. Detailed instructions for exercising these rights are provided, and SheRidez responds to requests within one month.

13. Data Compliance

Data may be disclosed to comply with legal requirements or protect the rights, property, or safety of SheRidez and its users.

14. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.SheRidez implements technical and organizational measures to protect user data. Users are encouraged to maintain strong passwords and avoid sharing login credentials.

15. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA) where data protection laws may differ from those in your jurisdiction. By using the SheRidez app, you consent to such transfers.

16. Children’s Privacy

The SheRidez app is not intended for children under the age of 18. We do not knowingly collect personal data from children without parental consent. If you become aware that a child has provided us with personal data, please contact us immediately.

17. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. We encourage you to review this Privacy Policy periodically for any updates or changes.

18. Push Notifications

18.1. Push Notifications Consent and Compliance

With the explicit consent of our users, SheRidez sends push notifications, which are messages displayed on users’ screens, devices, or browsers, even when our online services are not actively in use.

18.2. User Consent and Documentation

To receive push messages, users must confirm their browser or device’s request for push notifications. This consent process is documented and stored, maintaining records of user consent. This storage is essential to ascertain whether users have consented to receive push notifications and to provide evidence of their consent. For this purpose, a pseudonymous identifier of the browser (known as a “push token”) or the device ID of a terminal device is stored.

18.3. Legal Basis for Processing

Push messages may be necessary for fulfilling contractual obligations, such as providing technical and organizational information relevant to the use of our online offer. Otherwise, push messages are sent based on user consent. Users have the option to change their push notification settings at any time using the notification settings of their respective browsers or end devices.

18.4. Processed Data Types

The processed data types include usage data (e.g., websites visited, interest in content, access times), meta, communication, and process data (e.g., IP addresses, time information, identification numbers, consent status), and location data (information on the geographical position of a device or person).

18.5. Purposes of Processing

The purposes of processing include the provision of our online services and usability, web analytics (e.g., access statistics, recognition of returning visitors), and direct marketing (e.g., by email or postal).

18.6. Commercial Push Messages and Location-Based Delivery

Commercial push messages are sent based on user consent. The content of push messages is described in detail in the context of consent to receive commercial push messages. Additionally, push notifications can be displayed depending on the users’ location, based on transmitted location data from the device used.

18.7. Analysis and Performance Measurement

We statistically evaluate push messages to identify if and when they were displayed and clicked on. This information is used for the technical improvement of our push messages and is based on user consent. Users can object to the analysis and performance measurement by unsubscribing from push messages.

18.8. Third-Party Service Provider

SheRidez utilizes Leanplum for sending and managing push notifications with automation and personalization of content and marketing information, as well as campaigns, remarketing, A/B testing, messaging, and web analytics. Leanplum is compliant with GDPR regulations and utilizes the EU-US Data Privacy Framework (DPF) for third-country transfers.

19.  Newsletter and Electronic Communication

19.1. Newsletter and Electronic Communication Consent and Compliance

At SheRidez, we send newsletters, emails, and other electronic communications (“newsletters”) only with the recipient’s consent or legal permission. The content of the newsletter, as described during registration, is decisive for user consent. Our newsletters typically contain information about our services and offerings.

19.2. Subscription Process

To subscribe to our newsletters, users typically need to provide their email address. Occasionally, we may request additional information, such as a name, for personalization or to fulfil the newsletter’s purposes.

19.3. Double Opt-In Procedure:

Newsletter registration generally follows a Double Opt-In procedure, where users receive an email after registration requesting confirmation. This confirmation ensures that registrations are valid and prevents unauthorized sign-ups.

19.4. Data Logging and Retention

Registrations for the newsletter are logged to comply with legal requirements. This includes storing login and confirmation times, as well as IP addresses. Unsubscribed email addresses may be stored for up to three years based on legitimate interests before deletion, limited to defence against claims.

19.5. Legal Basis for Processing

The processing of newsletter data is based on user consent (Article 6 (1) (a) GDPR) or legitimate interests (Article 6 (1) (f) GDPR). Users can opt-out of newsletters at any time, either through the unsubscribe link in each newsletter or by contacting us directly.

19.6. Processed Data Types

Data types processed include inventory data (e.g., names, addresses), contact data (e.g., email, telephone numbers), meta, communication, and process data (e.g., IP addresses, time information, identification numbers), and usage data (e.g., websites visited, interest in content, access times).

19.7. Content

Newsletter content typically includes information about our services, promotions, offers, and topics related to motorcycles, touring, and travel.

19.8. Measurement of Opening and Click Rates

Our newsletters may contain web beacons to measure opening and click rates. This technical information helps improve newsletter content based on user behaviour. Measurement and processing are based on user consent.

19.9. Opt-Out and Performance Measurement

Unfortunately, a separate objection to performance measurement is not possible. Users must cancel or object to the entire newsletter subscription. In such cases, stored profile information is deleted.

19.10. Third-Party Service Provider

SheRidez uses Leanplum for message delivery and management across various channels. Leanplum operates under legitimate interests (Article 6 (1) (f) GDPR) and complies with the EU-US Data Privacy Framework (DPF) for third-country transfers.

20. Web Analysis, Monitoring, and Optimization

At SheRidez, we employ web analysis to assess visitor traffic on our website, evaluating user behaviour, interests, and demographic information as pseudonymous values. This analysis helps us identify peak usage times, frequently accessed content, and areas requiring optimization.

20.1. Usage of Data

Profiles, or aggregated data for usage processes, may be created and stored in browsers or terminal devices unless otherwise stated. This data includes visited websites, technical information, and, if consented, location data.

20.2. Processed Data Types

We process usage data (e.g., websites visited, access times) and meta, communication, and process data (e.g., IP addresses, consent status).

20.3. Purpose of Processing

Our primary purposes for processing include web analytics (e.g., access statistics), creating user profiles, and enhancing the provision of our online services.

20.4. Security Measures

To protect user privacy, we utilize IP masking (pseudonymization of IP addresses).

20.5. Legal Basis

Processing activities are conducted based on user consent (Article 6 (1) (a) GDPR).

20.6. Third-Party Service Providers

We use Google Firebase and Google Analytics for web analysis, monitoring, and optimization purposes.

• Google Firebase: This platform offers features for testing, monitoring, and optimizing apps. Data processing is based on user consent.
• Google Analytics: We utilize Google Analytics to analyze user behavior on our online services. Data is collected based on pseudonymous user identification. IP addresses are pseudonymized, and data processing is conducted with user consent.

Google Tag Manager:

This solution allows us to manage website tags and integrate services into our online offerings. It does not create user profiles or store cookies. The IP address of the user is transmitted to Google for Tag Manager operation.

21. Online Marketing and Promotions

Users have clear options to opt-in or opt-out of marketing communications.

At SheRidez, we engage in online marketing activities to promote our services and products. This may include displaying advertisements or other content tailored to users’ potential interests and measuring their effectiveness.

21.1. Data Processing

For online marketing purposes, we create and store user profiles in cookies or similar files. These profiles contain information such as viewed content, visited websites, and technical details like browser type and usage times. IP addresses are also stored, but they are pseudonymized to protect user privacy.

21.2. User Profiling

User profiles are mainly pseudonymous, meaning they don’t contain identifiable information like email addresses or names. We and our marketing partners utilize this data to deliver targeted content and ads to users based on their interests and behaviour.

21.3. Data Storage

Profile information is typically stored in cookies or similar tracking technologies. These cookies may be read and analysed across various websites that use the same marketing technology.

Exceptions

In some cases, clear data may be associated with user profiles, especially when users are members of social networks integrated with our marketing technology.

21.4. Performance Analysis

We primarily access summarized information regarding the performance of our advertisements. Conversion tracking helps us understand which marketing activities lead to user interactions or conversions.

21.5. Retention Period

Unless stated otherwise, cookies are generally stored for a period of two years.

21.6. Processed Data Types

We process various types of data, including content data, usage data, meta, communication, and process data, event data, and contact data.

21.7. Purposes of Processing

Our processing activities include web analytics, targeting, conversion tracking, affiliate tracking, marketing, creating user profiles, and improving the usability of our online services.

21.8. Security Measures

To safeguard user privacy, we employ IP masking (pseudonymization of IP addresses).

21.9. Legal Basis

Our processing activities are based on user consent (Article 6 (1) (a) GDPR) and legitimate interests (Article 6 (1) (f) GDPR).

21.10. Opt-Out

Users can opt out of online marketing activities through various means, including adjusting browser settings or using opt-out tools provided by service providers.

21.11. Third-Party Service Providers

We collaborate with several service providers for online marketing purposes, including Meta Platforms, Google, Branch Metrics, and Leanplum. Each provider operates in compliance with GDPR regulations and offers opt-out mechanisms for users.

21.12. Google Ads, IP-Based Measurement, and Personalisation (effective on or shortly after 3 August 2026)

We use Google Ads to display, measure, and personalise advertisements within the SheRidez app for users located in the European Economic Area (EEA), the United Kingdom, and Switzerland. In connection with this service, Google may process device and advertising identifiers, IP addresses, and app interaction and usage data, as further described in Section 21.6 of this Policy.

On or shortly after 3 August 2026, Google will begin using IP addresses that it receives through its integration with the SheRidez app for IP-based ads measurement and ads personalisation solutions in the EEA, the UK, and Switzerland. To support these solutions, Google has updated its registration under the IAB Europe Transparency and Consent Framework (TCF) to include Feature 3, “Identify devices based on information transmitted automatically.”

The use of cookies, mobile identifiers, or similar technologies for ads personalisation, and the processing of IP addresses for the purposes described above, is carried out only on the basis of your freely given, specific, and informed consent (Article 6(1)(a) GDPR, read together with the applicable national implementation of the ePrivacy Directive). This consent is obtained through the app’s consent mechanism before any non-essential identifier is accessed or shared with Google, and may be withdrawn at any time, with the same ease with which it was given, through the app’s privacy or consent settings, without affecting the lawfulness of processing carried out before withdrawal.

For further information on how Google processes end-user data, including in connection with Google Ads and the IP-based measurement and personalisation solutions described above, please see Google’s Business Data Responsibility page: https://business.safety.google/privacy/.

22. Profiles in Social Networks (Social Media)

22.1. Social Media Profiles

SheRidez maintains active online presences across various social networks to engage with users and provide information about our services. It’s important to note that user data may be processed outside the European Union, which could pose risks for users in terms of enforcing their rights.

22.2. Data Processing

Within social networks, user data is processed for communication purposes and to offer information about SheRidez. This includes creating user profiles based on behaviour and interests for market research and advertising.

22.3. User Profiles and Cookies

User profiles are created based on behaviour and interests, which are then used for targeted advertising within and outside the social networks. Cookies are typically used to store user behaviour and interest data.

22.4. Cross-Device Data Storage

Data may be stored in user profiles across different devices, especially if users are members of the respective social networks.

22.5. Opt-Out and Rights

For detailed information about processing methods, opt-out options, and exercising data subject rights, users should refer to the respective data protection declarations provided by the social network providers.

22.6. Processed Data Types

We process various types of data, including contact data, content data, usage data, and meta, communication, and process data.

22.7. Purposes of Processing

Our processing activities include contact requests and communication, collecting feedback via online forms, and marketing.

22.8. Legal Basis

Our processing activities are based on legitimate interests (Article 6 (1) (f) GDPR) in maintaining effective communication and marketing efforts.

22.9. Service Providers

We utilize social media platforms such as Instagram, Facebook Pages, and YouTube. Each platform operates in compliance with GDPR regulations and provides privacy policies and opt-out mechanisms for users.

23. Ride-Out Chat Functionality

SheRidez now offers a new chat feature designed to facilitate connections between women riders who wish to coordinate ride-outs or events. This chat functionality allows users to communicate with one another to agree on riding plans. However, it is important to note that all chat messages are temporary and are automatically deleted after 24 hours. SheRidez does not monitor the content of the chat nor collect or store any data exchanged within these conversations. The chats are solely provided for the purpose of connecting riders and do not retain any personal information after the 24-hour window. This feature aims to provide a safe and temporary space for communication, empowering women riders to connect and plan their next adventure without concern for long-term data retention.

24. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at [email protected]

25. Policy Changes

We may update this Privacy Policy from time to time. In case of significant changes to the policy, users will be notified via email at the email address associated with their account. Continued use of the app after such changes implies acceptance of the updated policy.

26. Acceptance of this Privacy Policy

By using the SheRidez app, you signify your acceptance of this Privacy Policy. By using the SheRidez app, users expressly consent to the collection, processing, and sharing of their personal data in accordance with the privacy policy. If you do not agree with the terms of this Privacy Policy, please do not use the SheRidez app.

27. Admin Rights and Regulations:

In Sheridez app, administrators hold crucial responsibilities and permissions related to the management of user data and ensuring compliance with privacy regulations. Their duties encompass overseeing data collection, storage, and processing practices within the app. They are empowered to monitor user interactions to safeguard user privacy and maintain a secure environment. Additionally, administrators are tasked with promptly addressing any user concerns or privacy-related issues, ensuring transparency and accountability in data management practices.