1. Who is responsible for your data

Kevin Ortiz Salce, trading as Solo Bike Trip, with tax ID (RFC) OISK901204532 and registered address at Av. Prolongación División del Norte 4199, L-D, Col. Ex Hacienda Coapa, Alcaldía Tlalpan, C.P. 14308, Oaxaca, Mexico, is the data controller responsible for the personal data described in this notice.

For any question about this notice or about your data, contact Kevin Ortiz Salce at hola@solobiketrip.com .

2. What we collect

When you contact us

Your name, email address, country, the trip and dates you are interested in, group size, riding level, and anything you write in your message.

When you book

Billing details, passport or identity details where a hotel or airline requires them, emergency contact details, your travel insurance policy details, and your height and bike preferences if you rent from us.

Health and dietary information

To run a trip safely we ask about allergies, dietary requirements, medical conditions relevant to riding at altitude, and medication you carry. Under the GDPR this is special category data. We collect it only with your explicit consent, we use it only to keep you safe and fed on the trip, we share it only with the guides and suppliers who need it, and we delete it after the trip ends. You can decline — but tell us, because some of it affects whether we can run the trip safely for you.

When you visit the site

Your IP address, browser and device type, the pages you view and how you arrived. This comes through the analytics and advertising tools in section 5.

3. Why we use it, and on what legal basis

• To answer your enquiry — consent, which you give by ticking the box on the form.
• To provide the trip you booked — performance of our contract with you.
• To keep you safe on the trip — your explicit consent for health data, and our legitimate interest in running trips safely.
• To meet tax and accounting obligations in Mexico — legal obligation.
• To measure and advertise the site — consent, which you can give or refuse through the cookie banner and withdraw at any time.

4. Who we share it with

We share only what each recipient needs:

• Hotels and lodging along the route, for your reservation
• Guides, mechanics and drivers working your departure
• Ground transport and shuttle operators
• Our payment processor, Stripe, for booking payments
• Google and Meta, as described in section 5
• Authorities, where the law requires it

We do not sell your personal data, and we do not share it with anyone for their own marketing.

5. Cookies, analytics and advertising

This site uses Google Analytics to understand how the site is used, and the Meta pixel to measure and target advertising on Facebook and Instagram. Both set cookies and both send data to their providers, including your IP address and the pages you visit.

Neither is essential to the site working. If you are in the European Economic Area or the United Kingdom, we ask for your consent before either one loads, and the site works normally if you refuse. You can change or withdraw your choice at any time through the "Cookie settings" link in the footer of any page.

Google and Meta act as independent controllers for what they do with this data. Their own policies apply: Google Privacy Policy and Meta Privacy Policy .

6. International transfers

We operate from Mexico. If you contact us from the European Economic Area, the United Kingdom, Canada or elsewhere, your data is transferred to and stored in Mexico, and to the United States through Google, Meta and Stripe.

Mexico has not received an adequacy decision from the European Commission. Where the GDPR applies to your data, we rely on the European Commission’s Standard Contractual Clauses as the safeguard for these transfers. You can request a copy from us.

7. How long we keep it

• Enquiries that do not become bookings — 24 months, then deleted.
• Booking and trip records — for the period Mexican tax law requires, currently five years.
• Health and dietary information — deleted within 30 days of the trip ending.
• Analytics and advertising data — for the retention period set in Google and Meta’s tools.

8. Your rights

If you are in Mexico

Under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) you have ARCO rights: to access your data, to have it rectified, to have it cancelled, and to object to its use. You may also withdraw your consent or limit its use. Write to hola@solobiketrip.com and we will respond within the legal deadline.

If you are in the EEA or the UK

You have the right to access your data, to correct it, to have it erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time without affecting what we did before you withdrew it.

You also have the right to complain to your national data protection authority. We would rather you came to us first, but the right is yours either way.

9. Security

We keep your data on access-controlled systems, limit access to the people who need it, and transmit this site over HTTPS. No system is perfectly secure, and we will tell you and the relevant authority without undue delay if a breach affects your data.

10. Children

Our trips are not sold to people under 18, and we do not knowingly collect data from children. A rider under 18 can only travel with a parent or guardian who books and consents on their behalf.

11. Changes to this notice

If we change how we handle your data we will update this page and change the date at the top. If the change is significant and we hold your email address, we will tell you directly.