Privacy policy

What we process, why, who receives it, for how long — and what you can require of us

Last updated: August 31, 2026

1. Who is responsible for your data

The controller is CARTHANET, 60 rue François Ier, 75008 Paris, France. For any question about your data, or to exercise your rights, write to privacy@roamride.fr.

We have not appointed a data protection officer: our activity falls under none of the cases where article 37 of the Regulation requires one. We process your data under Regulation (EU) 2016/679 and French data protection law.

2. What we process

We collect only what the service needs in order to work. In practice:

Your account — First and last name, email address, hashed password, phone number and photo if you add one, display language. If you sign in with Google, the identifier Google passes to us.Your bookings — The activity, the date, the number and category of travellers, the language chosen, the meeting point you were given, any note you leave for the operator, and a billing address if you provide one.Your payments — The amount, currency, date, payment status and refunds. We neither receive nor store your card number: it is entered directly with our payment provider.What you publish — Your reviews, your messages to operators and any photos you attach. This content is visible to its recipients, and reviews are public.Technical data — IP address, browser type, pages viewed and error logs, needed for security and for the site to work. Audience measurement is added to this only if you accept it.

We process no special category data within the meaning of Article 9. If an activity requires health information — a contraindication for a dive, say — give it to the operator directly rather than through this site.

3. Why, and on what basis

Each processing operation serves a stated purpose and rests on an identified legal basis.

Performing your booking — basis: the contract — Creating and running your account, holding the seats, taking payment, issuing the voucher and the invoice, telling you about a change, passing the operator what they need to receive you. Without this data the booking cannot complete.Meeting our obligations — basis: the law — Keeping accounting records and invoices, combating payment fraud, answering requests from authorities entitled to make them.Running and securing the service — basis: our legitimate interest — Preventing abuse and intrusion attempts, diagnosing errors, stopping one promotional code being used past its limit, measuring operators' service quality. You may object at any time.Measuring audience and writing to you — basis: your consent — Audience measurement and the newsletter work only if you have accepted them, and are withdrawn as easily as they are given.

4. Who receives this data

We neither sell nor rent your data. It is passed to three kinds of recipient, and to nobody else.

The operator of your activity — They receive what they need to welcome you: your name, the number of travellers, the date, the language and your notes. They have no access to your payment data. They become a controller of that data for their own purposes.Our payment provider — Stripe processes payments and payouts to operators, acting as a controller for its own regulatory obligations.Our technical providers — Hosting, email delivery, photo storage (Cloudinary), maps and geocoding (Mapbox), error monitoring (Sentry). They act on our instructions and may not use your data for anything else.Our translation providers — Activity descriptions and reviews are machine-translated (DeepL, OpenAI). Only the published text is sent to them, never your account or payment data.Our audience measurement tool — Google Tag Manager and the tags it loads, only after you have accepted and never before.

When you are redirected to a catalogue partner's site to complete a purchase, that partner's own privacy policy applies from the click onwards.

5. Transfers outside the European Union

Some of our providers are established outside the European Union, notably in the United States. Those transfers rely on the European Commission's standard contractual clauses or, where applicable, on an adequacy decision.

You may ask us for a copy of the safeguards in place at privacy@roamride.fr.

6. For how long

Nothing is kept indefinitely. The periods below run from the last relevant event.

Account — For as long as it is active, then three years after your last sign-in. We warn you before anything is deleted.Bookings, invoices and accounting records — Ten years, the statutory retention period for accounting documents. These records outlive the closure of your account, which is also why erasure takes the form of anonymisation.Messages and reviews — Messages exchanged with an operator are kept for three years. A published review stays online until it is withdrawn, detached from your account on erasure.Technical logs — Twelve months at most for security and error logs. Cookie lifetimes are listed on the dedicated page.

7. Your rights

You have the following rights, exercisable at privacy@roamride.fr or from your account. We answer within one month.

Access and portability — Obtain a complete copy of your data in a machine-readable format. This export is automated: you get it without waiting for a case to be handled.Erasure — Your account is anonymised: name, email address, phone, photo and description are cleared, your sessions revoked, your newsletter subscription removed. Your bookings and invoices survive in anonymous form, because accounting law requires us to keep them — we would rather say so than promise a deletion we cannot perform.Rectification — Correct inaccurate data, directly from your profile for most of it.Objection and restriction — Object to processing based on our legitimate interest, withdraw a consent you gave, or ask for processing to be frozen while a dispute is resolved.Complaint — Refer the matter to the French supervisory authority, the CNIL (3 place de Fontenoy, 75007 Paris, cnil.fr), or to the authority of your own country, if our answer does not satisfy you. You may do so without writing to us first.

We may ask you to prove your identity where reasonable doubt remains — that is a protection against requests made in your name by someone else.

8. How we protect it

Traffic to and from the site is encrypted. Passwords are stored as hashes and cannot be read back, including by us. Access to production data is restricted to the people who need it, and sensitive actions are logged.

No arrangement is infallible. In the event of a breach likely to result in a high risk to your rights, we notify the supervisory authority within 72 hours and tell you directly.

9. Cookies and audience measurement

A cookie is a small file a site stores in your browser. Some are essential for the site to work — without them you could not stay signed in from one page to the next. Others measure audience, and those are not essential.

Our rule is simple: nothing serving audience measurement is loaded before you have accepted it. Until you answer the banner, no connection is made to any measurement tool. Refusing takes one click, exactly like accepting.

10. Strictly necessary cookies

These are set without your consent, as the rules allow, because the service cannot work without them. There are only three.

accessToken — lifetime: 1 hour — Keeps you signed in from page to page. Without it, every click would send you back to the sign-in screen. Set only after you sign in.refreshToken — lifetime: 24 hours — Renews the one above without asking for your password every hour. It is what makes a session last a day. Set only after you sign in.roamride.consent — kept until you choose again — Remembers your answer to the banner so it is not put to you on every page. Technically this is local storage rather than a cookie: your answer stays in your browser and is sent to no server, ours included.

None of these three is used to follow you across other sites, or for advertising.

11. Audience measurement

If you accept, we measure how the site is used to understand what works and what gets in the way — which pages are read, at which step a booking is abandoned.

What is loaded — Google Tag Manager and the measurement tags it fires, which set cookies of their own (notably those whose names begin with _ga).When — Only after you click Accept. Before that, nothing is downloaded from Google: no script, no image, no request.Lifetime — Up to thirteen months, in line with the French supervisory authority's recommendation. These cookies are set by Google and governed by its own policy.

12. Changing your choice

Your answer is not final and changes in one move.

From this site — The « Cookie preferences » link at the bottom of every page reopens the banner and lets you answer differently. A withdrawal takes effect immediately.From your browser — You can delete cookies already stored and block future ones in your browser settings. Deleting our sign-in cookies simply signs you out.

Blocking strictly necessary cookies prevents signing in at all: that is not a restriction we impose, it is what they are for.

13. Third-party services

Some pages call on outside services that may set cookies of their own: our payment provider during checkout, our mapping provider on pages that show a map.

When you follow a link to a partner's site to complete a purchase, you leave RoamRide: from that click, their cookies and their policy apply, and we have no control over them.

14. Changes

This policy may change as the service does. The date it was last updated is at the top of the page, and any substantial change is flagged to you before it takes effect. If new processing rests on your consent, it will be asked for separately.

15. Contact us

For any question about this policy or to exercise your rights: privacy@roamride.fr. For a question about a booking in progress, contact@roamride.fr will be quicker.

Exercise your rightsWrite to privacy@roamride.fr — we answer within one month.