Overview

This policy explains how we collect, use, and protect your personal information when you use vtt971.com or book a rental with us.

We're a French SAS Beds & Coconuts SAS, registered in Guadeloupe. We follow the General Data Protection Regulation (GDPR, Regulation EU 2016/679) and the French Loi Informatique et Libertés.

By using the website, you accept how we handle your data as described here. If you don't agree with anything in this policy, please don't use the site.

Who we are

Beds & Coconuts SAS is the data controller for your information.

Section Gissac, Rue de Bois Jolan, 97180 Sainte-Anne, Guadeloupe [SIREN number — to add] Email: hello@vtt971.com

If you have any questions about this policy or how we handle your data, email us at the address above.

What we collect

We collect three kinds of information:

Device information

When you visit the site, we automatically collect some technical information your browser version, IP address, time zone, the pages you view, search terms you use, and how you interact with the site. This is collected through cookies, log files, and similar technologies.

Why we collect it: To load the site properly for you and to understand how people use it, so we can keep improving it.

Legal basis: Our legitimate interest in running and improving the website. You can refuse non-essential cookies at any time see the Cookies section below.

Booking information

When you book a rental or contact us, we collect: your name, email, phone, and the dates you're interested in. At pickup, we also collect a valid ID and a refundable deposit (held on your card).

Why we collect it: To take your booking, prepare your rental, send confirmations, and handle anything you need before, during, or after the rental.

Legal basis: Performance of the contract you enter into with us when you book.

Communications

When you email us, sign up for the newsletter, message us on social, or fill in any form on the site, we keep what you send to respond, to help, or to send you what you signed up for.

Why we collect it: To answer your questions and run the newsletter.

Legal basis: Your consent (for marketing emails) and our legitimate interest (for answering questions).

How we use your information

We use your information to:

• Take and confirm your booking
• Prepare your bike and the rest of your rental
• Process payment and the refundable deposit
• Send you booking confirmations and any updates relevant to your rental
• Respond to your questions
• Send you newsletter emails if you've signed up
• Understand how the website is being used, so we can improve it
• Comply with our legal obligations (tax, accounting, fraud prevention)

We don't use your data for anything you wouldn't reasonably expect from a bike rental shop.

Who we share your information with

We only share your data with people and services that help us run the business. We never sell your data to anyone.

Service providers we use:

• Shopify to run the website
• Stripe to process payment securely
• Klaivyo to send booking confirmations and the newsletter
• Google Analytics to understand site usage
• Komoot only if you book the recommended-routes add-on, and only the data needed to share the routes with you

Each of these is contractually bound to handle your data securely and only for the purpose we engage them for.

When we may share with authorities

We may share your data with public authorities (police, courts, regulators) when we're legally required to for example in response to a court order, a subpoena, or where we need to protect someone's safety.

How long we keep your data

We keep your data only as long as we need to:

• Booking and rental records — kept for the duration required by French commercial and tax law (typically 10 years for accounting records)
• Newsletter subscriptions — kept until you unsubscribe
• Customer support emails — kept for up to 3 years from your last contact with us
• Website analytics — kept for up to 14 months (anonymized after that)

After these periods, your data is either deleted or fully anonymized.

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct anything that's wrong or out of date
• Delete your data ("right to be forgotten") subject to legal retention requirements
• Restrict how we use your data in certain situations
• Port your data to another service in a structured, machine-readable format
• Object to certain types of processing for example, marketing emails
• Withdraw consent at any time, where we rely on your consent

To exercise any of these rights, email us at hello@vtt971.com. We'll respond within one month.

If you're unhappy with how we handle your data, you also have the right to file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority:

CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 www.cnil.fr

Cookies

We use cookies to make the website work and to understand how it's used.

Essential cookies

These are needed for the site to function for example, keeping your booking in progress, or remembering your language preference. You can't disable these without breaking the site.

Analytics and marketing cookies

These help us understand how the site is used and (where you've consented) deliver relevant information. You can refuse these when you first visit the site, or update your preferences anytime through [link to cookie settings].

Children

The website is intended for adults. We don't knowingly collect data from children under 16.

If you're a parent or guardian and believe your child has shared personal data with us, email us at hello@vtt971.com and we'll delete it.

For rentals: electric bikes are not rented to people under 14, per our rental contract. Riders under 18 need parental consent.

Data security

We take reasonable technical and organizational measures to protect your data including encrypted payment processing, secure servers, and access controls on internal systems.

No system is 100% secure, but we work to keep yours safe.

International data transfers

Some of our service providers may store or process your data outside the European Economic Area (EEA). When this happens, we make sure they're either certified for adequate data protection or bound by Standard Contractual Clauses approved by the European Commission.

Changes to this policy

We may update this policy from time to time. The current version is always here, with the "Last updated" date at the top.

If we make a material change for example, starting to share data with a new kind of partner we'll tell you directly.

Questions

Email us at hello@vtt971.com with any questions about this policy or how we handle your data.