01Who we are (controller)
RideOrCry (“RideOrCry”, “we”, “us”, or “our”) is the data controller responsible for the personal data described in this notice, provided under Articles 13 and 14 of the EU and UK GDPR. We are preparing to launch and currently operate a coming-soon page that lets you register your interest.
- Data protection officer
- We have not appointed a DPO, as our processing does not meet the threshold that legally requires one. Privacy questions go to the contact above.
02Data we collect
On this page we only collect the limited data needed to add you to our launch list and to keep that list free from abuse. Providing your email is entirely voluntary — it is not a statutory or contractual requirement, and there is no consequence to not providing it beyond not being notified at launch.
- Email address
- The email you enter into the newsletter form.
- IP address
- The network address your request is sent from, used for spam and abuse prevention and rate limiting.
- Timestamp
- The date and time your sign-up was received.
03Purposes & legal basis
Under Article 6 of the GDPR we must have a lawful basis for each purpose we process your data for. Ours are set out below.
- Launch notification
- Purpose: to email you when we launch. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Security & anti-abuse
- Purpose: to secure the form, rate limit, and prevent fraudulent or automated submissions. Legal basis: our legitimate interests (Art. 6(1)(f)) in protecting our service.
04No automated decision-making
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects, and we do not sell your personal data or share it with third parties for their own marketing.
05Who we share data with
We share personal data only with the service providers (processors) that help us operate the sign-up, under agreements that require them to protect it and act on our instructions.
- Hosting
- Our website and server infrastructure provider, which processes requests to run the site.
- Discord (notifications)
- Sign-ups are delivered to a private Discord channel that only our team can access, via a Discord webhook. Discord Inc. therefore processes your email, IP, and timestamp on our behalf.
06International transfers
Because we deliver sign-up notifications through Discord, your data is transferred to and processed in the United States, a country outside the EEA/UK. Where we rely on such a provider, we ensure an appropriate safeguard under Chapter V of the GDPR is in place before transferring data.
- Safeguard
- The EU–US Data Privacy Framework (and UK Extension) where the provider is certified, and/or the European Commission's Standard Contractual Clauses.
07How long we keep it
We keep your sign-up data only for as long as needed to notify you about our launch, and no longer than 24 months from sign-up unless you re-engage. If we decide not to proceed, or once you unsubscribe or ask us to remove you, we delete your data promptly.
08How we protect it
Your submission is transmitted over an encrypted (HTTPS) connection and is only processed on our server. The credentials used to receive sign-ups are stored as server-side secrets, never exposed publicly through the website, and access is limited to our team.
09Your rights
Depending on where you live, the GDPR gives you the following rights over your personal data. You can exercise any of them free of charge by contacting us, and we will respond within one month.
- Access
- Request a copy of the data we hold about you (Art. 15).
- Rectification
- Ask us to correct inaccurate or incomplete data (Art. 16).
- Erasure
- Ask us to delete your data (Art. 17).
- Restriction
- Ask us to restrict processing in certain cases (Art. 18).
- Portability
- Receive your data in a portable, machine-readable format (Art. 20).
- Object
- Object to processing based on our legitimate interests (Art. 21).
- Withdraw consent
- Opt out of launch emails at any time, without affecting prior lawful processing (Art. 7(3)).
10Right to complain
If you believe we have mishandled your data, you have the right to lodge a complaint with a data protection supervisory authority. In the EU this is your national authority (a list is maintained by the European Data Protection Board), and in the UK it is the Information Commissioner’s Office (ICO) at ico.org.uk. We’d appreciate the chance to help first, so please do contact us.
11Children's privacy
Our site is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.
12Changes to this policy
We may update this policy as our launch progresses and our services expand. Any changes will be posted on this page with a revised “last updated” date.
13How to contact us
To exercise a right or ask a question about this policy, email us at marceeongmail@gmail.com. You can also reach us through the social channels linked on the home page.
Note: this policy describes our current coming-soon sign-up and is provided for transparency and GDPR compliance. It is not legal advice. It will be reviewed and expanded before our store launches.
