Privacy Policy

1. Who is responsible for your data?

Enduro-Ride LTD is responsible for the personal data described in this policy in connection with enduro tours, buggy tours, motorcycle rental and race assistance offered through enduro-ride.com.

Company identifier supplied: BG205653785
Address: Stefan Karadzha 3, Gabrovo 5300, Bulgaria
Email: enduroridebg@gmail.com

Contact us at this address about your information or to exercise your privacy rights.

2. Information you provide

When you request a reservation, we collect your name, email address, chosen tour, experience level, group size and preferred arrival and departure dates. You can also provide a phone or WhatsApp number and a message about your group or preferences.

Contact enquiries may include your name, contact details and message. Later booking correspondence may include flight details, accommodation preferences, billing information and payment confirmations needed to arrange your trip.

Please provide only information relevant to your enquiry. Do not send payment-card details, passport copies or medical documents through the general enquiry form. If you provide information about another traveller, make sure they know that you are sharing it and can read this policy.

Required form fields allow us to assess and respond to your request. Without this information, we may be unable to arrange the requested service.

3. How and why we use information

• Enquiries and reservations: to answer questions, check availability, prepare an offer and arrange services you request. The basis is steps before a contract or performance of a contract, Article 6(1)(b) GDPR.
• Business records: to meet applicable accounting, tax and other legal duties, Article 6(1)(c).
• Security and service administration: to prevent misuse, maintain the website and manage disputes, based on our legitimate interests under Article 6(1)(f), balanced against your rights.
• Optional marketing or non-essential tracking: where consent is required, Article 6(1)(a). A tour enquiry does not itself sign you up for marketing.

Submitting the reservation form sends an availability request. It does not take a payment or automatically confirm your booking. Requests are reviewed by our team.

4. Who may receive your information

The reservation form sends your request by email to the Enduro-Ride team. Information may be handled by authorised staff and service providers supporting our website, hosting, email and business administration.

Where needed to deliver your booking, relevant details may be shared with accommodation providers, transfer providers, guides and rental or race-support partners. We limit this to information needed for the relevant service. Accountants, professional advisers and public authorities may also receive information where necessary for legal duties or claims.

Information is not made public simply because you contact us. Links to other brands do not by themselves authorise sharing your booking information with those businesses.

5. Payments and payment providers

The website reservation form does not collect card details or charge you. Payment arrangements follow our availability check and booking correspondence. Current payment options include bank transfer, PayPal and Revolut.

The bank or payment service you use processes payment information under its own privacy notice. We may receive transaction references, payer details, amounts and payment status for booking administration and accounting. Check your chosen provider’s notice before making a payment.

6. Website data, cookies and external content

Delivering and protecting the website may involve technical information such as your IP address, browser, device information, requested pages and access times in hosting or security logs.

Cookies and similar technologies may support website functions. Non-essential analytics and advertising technologies require consent where applicable; continued browsing is not a substitute for that consent. Browser controls allow you to remove or limit cookies, although blocking essential cookies can affect functions.

Our page designs use Google Fonts. Where fonts load directly from Google, your browser connects to Google and sends technical information such as your IP address. Social-media and brand links take you to external websites whose privacy notices apply when you visit them. Embedded content, if enabled, may also communicate with its provider.

See our Cookie Policy for information about the technologies used on the website.

7. International data transfers

External providers may process information outside the European Economic Area. Where such a transfer occurs, an appropriate GDPR transfer mechanism is required, such as a valid adequacy decision or contractual safeguards with any necessary additional protections. You can contact us for information about recipients and safeguards relevant to your booking or enquiry.

8. How long we keep information

Retention depends on the purpose of the record. Enquiry correspondence is kept while we handle your request and any necessary follow-up. Confirmed booking and payment records are kept for the periods required by applicable accounting and tax rules, and where needed to resolve claims.

Technical logs are kept only as needed for operation, security and investigation. Backup copies follow the relevant backup cycle. When information is no longer needed and no legal reason requires retention, it should be deleted or anonymised. Contact us for the retention period or criteria applicable to a specific record.

9. Your privacy rights

Depending on the circumstances, you can ask for access to your personal data, correction, deletion, restriction of processing or a portable copy. You can object to processing based on legitimate interests and to direct marketing. Where processing depends on consent, you can withdraw it without affecting earlier lawful processing.

Email enduroridebg@gmail.com with your request. We may ask for proportionate information to verify your identity. We normally respond within one month; permitted extensions for complex requests will be explained. Some rights have exceptions, including where records must be retained by law.

You can complain to the Bulgarian Commission for Personal Data Protection or the competent supervisory authority in your country of residence, work or the alleged infringement. See the Bulgarian authority’s website for current complaint procedures.

10. Updates and related policies

We may update this notice when our services or data practices change. The revision date appears at the top of this page. Changes to this notice do not themselves provide consent for new uses of your information.

This policy explains personal-data handling. Booking, payment and cancellation conditions are explained separately in our Terms & Conditions and your confirmed booking documents.