In brief
Ride On uses personal data to manage customer relationships, bikes, bookings and workshop services. We use this information to identify each bike's owner, carry out agreed work, provide quotes and contact customers when a bike or order is ready.
We do not sell personal data, use it for profiling or share it with others for their marketing. The website uses cookieless visitor statistics from Cloudflare Web Analytics, but no marketing tracking.
Who is responsible?
Ride On AS, Norwegian organisation number 834 742 802, is the data controller.
Address: O.H. Bangs vei 51, 1363 Høvik, Norway
Email: [email protected]
Phone: 67 14 15 15
Information we process
Depending on what you order or ask us about, we may process:
- your name, phone number and email address
- your address when required for delivery, invoicing or a specific order
- information about the bike, such as brand, model, size, serial number and owner
- a description of faults, requested work, quotations, parts, service history and job status
- orders, purchases, payments and communication connected to the customer relationship
- technical security logs, such as timestamps and IP addresses, when required for secure and reliable operation
Please do not send us health information or other sensitive personal data.
Why we use the information
- Bookings and servicing: to register the customer and bike, plan the work, provide quotes, document completed work and tell you when the bike is ready. The legal basis is taking steps to enter into or perform our contract with you.
- Customer and service history: to retrieve details of previous work, handle complaints and provide safer, more accurate service. The legal basis is our legitimate interest in responsible customer service and documentation.
- Accounting and statutory records: to comply with bookkeeping, tax and VAT rules. The legal basis is a legal obligation.
- Enquiries: to answer questions and follow up possible bookings. The legal basis is a contract or our legitimate interest in responding to the enquiry.
- Security: to prevent misuse and troubleshoot our services. The legal basis is our legitimate interest in secure operation.
BikeDesk and booking
Ride On uses BikeDesk, supplied by BikeDesk/Customers 1st in Denmark, as its customer, workshop and booking system. Customer details, bike information, bookings, service history and necessary communication are stored there. BikeDesk processes this information on Ride On's behalf as a data processor.
BikeDesk loads automatically when you open the workshop page. This creates a direct connection between your browser, BikeDesk and the service's technical subprocessors, even before you enter or submit a booking.
Information in the booking system
The fields shown depend on what you book. BikeDesk may process:
- your phone number and information connected to SMS verification
- your name, email address and other contact details requested during booking
- the selected service, preferred date and time, and your description of what you need
- bike details such as brand, model, size and serial number where relevant
- booking status, service status, service history and messages connected to the job
- technical information such as IP address, browser, device and time where required for operation and security
- payment and transaction status if payment is offered for the relevant booking
The first step in a BikeDesk booking is entering your phone number and confirming it by SMS. We use the number to verify the booking and send necessary messages about the appointment, its status and the completed bike. It is not used for marketing without a separate valid legal basis.
reCAPTCHA and payment
BikeDesk uses Google reCAPTCHA to protect bookings from misuse. When the workshop page and booking window load, Google may receive technical information from the browser, such as the IP address, browser and device information, security signals and necessary identifiers. Google's processing is also described in Google's Privacy Policy.
The booking window also loads a payment component from Reepay. When payment is available, the payment provider processes the payment information. Ride On should normally receive only the information needed to confirm whether payment has been completed and does not store full card details.
Ride On is responsible for ensuring that its use of BikeDesk is governed by a data processing agreement. The agreement and service configuration must cover security, subprocessors, deletion, storage location and any transfer of information outside the EU/EEA.
Contact forms
The test-ride form collects your name, phone number, email address, height, preferred Canyon model, description, date and time. The information is sent through Ride On's website server to Ride On's internal server, stored in the test-ride calendar and used to manage the booking. Once received, Ride On sends a transactional confirmation to the email address provided, containing the appointment date, time, model and practical information. The confirmation is sent through Ride On's Gmail service.
The general contact form collects your name, email address, optional phone number, subject and message. Messages are sent through Ride On's internal server and Gmail service to [email protected]. A limited queue copy is stored on Ride On's server for reliable delivery and duplicate protection. Google processes the email as the provider of Ride On's email service.
Both forms use a random submission ID to stop double-clicks or network retries from creating duplicate enquiries. The website also uses a hidden anti-spam control, limits repeated attempts and processes the IP address briefly for security. The IP address is not stored with the form content.
Cloudflare Turnstile and misuse protection
When enhanced misuse protection is enabled, Ride On's forms use Cloudflare Turnstile to distinguish ordinary visitors from automated misuse. When such a form is displayed or submitted, Cloudflare may process the IP address, browser and device information, time and technical security signals. This check is used only for security, not advertising or analytics. The result is validated on the server before a submission is accepted. See Cloudflare's Privacy Policy.
To limit repeated attempts, the website server creates an anonymous cryptographic key based on the network address. Ride On does not store the raw IP address in this counter. The key and timestamp are used only for misuse protection and are deleted continuously, or at the latest according to the same retention schedule as other technical security logs.
Using the forms is voluntary. You can also contact us by phone or email. Fields that are not necessary for the relevant enquiry are optional.
Who has access?
Access is limited to Ride On employees who need the information for customer service, sales, workshop service or administration. Information may also be processed by providers operating BikeDesk, SMS, email, payment, accounting or the website server. They must process it only under contract and Ride On's instructions.
Information may be disclosed to public authorities when Ride On is legally required to do so.
Retention and deletion
- Enquiries that do not result in a customer relationship are normally deleted within 12 months. A technical queue copy sent from the contact form is automatically deleted from Ride On's server after 30 days. The email copy follows Ride On's inbox deletion routines.
- Customer records, bike details and service history are retained for as long as needed for follow-up, warranties, complaints and documentation, normally up to five years after the last completed job.
- Accounting records are retained for the period required by bookkeeping rules, normally five years after the end of the financial year.
- Technical security logs are normally deleted or anonymised within 30 days unless an incident requires further investigation.
Information is deleted sooner when it is no longer necessary and there is no statutory or documented reason to retain it.
Cookies and tracking
Ride On's own pages do not use cookies for analytics, personalisation or marketing. We do not build advertising profiles or track visitors across websites.
We use Cloudflare Web Analytics to understand how many people visit the website, which pages are used and how the pages perform in the browser. This cookieless measurement may include page views and visits, the page address without query parameters, referring website, country, device type, browser, operating system and technical performance measurements. The purpose is to improve content, reliability and speed. The legal basis is our legitimate interest in understanding and improving the public website. Cloudflare states that Web Analytics does not use the data to identify or track individuals across websites. See Cloudflare Web Analytics and Cloudflare's Privacy Policy.
When you open the workshop page, BikeDesk loads automatically. The booking service, Google reCAPTCHA and Reepay's payment component may then use necessary local storage, cookies or similar technology for booking, security and any payment, including before you interact with the form.
Children
The website and booking service are not specifically directed at children. A parent or guardian should book on behalf of a child who cannot enter into the agreement themselves. If Ride On learns that information about a child has been registered without a valid legal basis, we will delete it as soon as legally and practically possible.
Your rights
You may request access to the information we hold about you and ask for correction, deletion, restriction or portability where the relevant conditions are met. You may also object to processing based on legitimate interests.
Contact [email protected]. We may ask for the information needed to confirm your identity. You may complain to the Norwegian Data Protection Authority if you believe your personal data has been processed unlawfully.
Security and changes
Ride On uses access controls, updated systems, backups and other appropriate measures to protect the information. This notice is updated if we change the information we collect, our purposes or our providers.