Privacy Policy

Royal Routes Colombia, based in Medellín, Antioquia, Colombia, is responsible for processing your personal data. Contact for privacy matters: royalroutescol@gmail.com.

Information you give us: name, email, phone number, country, emergency contact, passport and motorcycle license images, dates of travel, motorcycle and gear preferences, and any messages you send us.

Information collected automatically: IP address, browser type, device information, pages viewed, referring website, marketing attribution (e.g. UTM tags), and basic interaction events used to measure site performance and ad effectiveness.

Information from third parties: when you arrive from an advertising platform (e.g. Meta), the platform may share basic attribution data with us.

We use your personal data to confirm and operate your booking, communicate with you before, during, and after your trip, comply with Colombian legal requirements (including rider identification), prevent fraud, improve the site, send you marketing emails when you have opted in, and measure the effectiveness of our advertising.

Under Colombian Law 1581 of 2012, we process your data based on (a) your prior, express, and informed consent — given when you book, upload documents, sign the rental contract, or subscribe to marketing; (b) the performance of the booking contract; and (c) our legal and tax obligations.

We use cookies and similar tools for three purposes: (1) essential cookies that keep you logged in and remember your language; (2) analytics tools (Vercel Analytics, Microsoft Clarity) that help us understand how the site is used; (3) advertising tools (Meta Pixel) that measure ad performance and let us show relevant ads. Our Meta Pixel uses "advanced matching": when you enter contact details such as your email address or phone number into a form on our site, the Pixel may send a securely hashed — irreversible — version of that information to Meta so it can match you with your Meta account, which helps us measure conversions and reach relevant audiences. You can disable non-essential cookies at any time through your browser settings.

• Supabase — authentication, database, and secure document storage.
• Resend — transactional email (booking confirmations, OTP login codes).
• Vercel — website hosting and performance analytics.
• Microsoft Clarity — anonymized session analytics.
• Meta — advertising attribution and audience measurement via the Meta Pixel, including securely hashed contact identifiers (e.g. email or phone) used for advanced matching.

Each provider acts under our instructions and is bound by appropriate data-protection terms. Some of them store data outside Colombia (mainly the United States and the European Union). By using our site you consent to those international transfers, which are protected by contractual safeguards.

Identification documents (passport, motorcycle license) are kept for 90 days after the end of your trip and are then permanently and automatically deleted from our database and storage. This retention is enforced by an automated nightly job.

Booking records (name, email, trip details, financial records) are kept for up to 5 years to meet Colombian tax and commercial-record requirements.

Marketing data is kept until you unsubscribe; you can unsubscribe at any time using the link in any marketing email.

Analytics data is retained for up to 24 months in aggregate, anonymized form.

Under Colombian Law 1581 of 2012 you have the right to: (a) know what personal data we hold about you; (b) update or correct inaccurate data; (c) request deletion of your data when the legal basis has ceased; (d) revoke your consent; (e) request proof of the consent you gave; and (f) file a complaint with the Superintendencia de Industria y Comercio (SIC) if you believe your rights have been violated. To exercise these rights, email us at royalroutescol@gmail.com. We will respond within 15 business days as required by law.

We protect your data with industry-standard measures: encrypted connections (TLS) for all data in transit, encrypted storage for identification documents in a private Supabase Storage bucket, role-based access controls, and time-limited signed URLs for admin access to documents. No system is perfectly secure, but we work continuously to keep your data safe.

Our services are not directed to children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page shows when the most recent change was made. Material changes will be communicated by email where appropriate.

For any question, request, or complaint about your personal data, contact us at royalroutescol@gmail.com.
Royal Routes Colombia — Medellín, Antioquia, Colombia