1. What Information Do We Collect?

We collect personal information that you voluntarily provide to us when you express interest in our tours, make a booking, or contact us directly.

The personal information we collect may include:

• Name
• Email address
• Phone number
• Mailing address
• Date of birth
• Height
• Nationality
• Known medical conditions
• Dietary requirements
• Emergency contact name and phone number

For participants in multi-day tours and charity rides only, we also collect:

• Passport number
• Insurance policy number

We collect passport numbers solely for operational and legal requirements associated with multi-day and charity ride participation. We do not collect this information for day tours or community rides.

We also collect health data where necessary, such as known medical conditions, to ensure we can support your safety and wellbeing during your tour. This is considered sensitive information and is handled with additional care as outlined in this notice.

All personal information you provide must be accurate, complete, and up to date. Please notify us of any changes.

2. How Do We Use Your Information?

We process your personal information for the following purposes:

• To confirm and manage your booking and process payments
• To communicate with you about your tour, including pre-tour information and updates
• To ensure your safety and wellbeing during your tour
• To respond to your enquiries and provide customer support
• To send you administrative information about changes to our services or policies
• To request feedback about your experience
• To send you marketing and promotional communications, where you have consented or where we have a legitimate interest in doing so. You can opt out at any time
• To comply with our legal obligations and protect our legal rights

3. What Legal Bases Do We Rely On?

We only process your personal information where we have a valid legal reason to do so. Depending on your location and the nature of the processing, we may rely on the following legal bases:

Contract: Where processing is necessary to fulfil our obligations to you, including managing your booking and delivering your tour.

Legitimate interests: Where processing is reasonably necessary to achieve our legitimate business interests, such as improving our services, sending relevant marketing communications, and ensuring the safety of our tours, provided those interests are not overridden by your rights.

Consent: Where you have given us clear permission to process your information for a specific purpose, such as marketing communications. You may withdraw your consent at any time by contacting us at info@rippleeffectrides.com.

Legal obligation: Where processing is necessary to comply with applicable law.

Vital interests: Where processing is necessary to protect your safety or the safety of another person in an emergency situation.

If you are located in the European Economic Area or United Kingdom, the above bases apply in accordance with the General Data Protection Regulation (GDPR) and UK GDPR respectively. You have the right to request access to, rectification of, restriction of, or erasure of your personal data, as well as the right to data portability where applicable. You may also have the right to object to certain processing. To exercise any of these rights, please contact us at info@rippleeffectrides.com. If you believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority.

If you are located in the United States, including California, you may have additional rights under applicable state law, including the right to request information about categories of personal data we have shared with third parties for direct marketing purposes. To make such a request, please contact us at info@rippleeffectrides.com.

4. When and With Whom Do We Share Your Information?

We do not sell your personal information. We may share your information in the following limited circumstances:

NGO partners: We may share relevant information with our partner non-governmental organisations for the purposes of impact reporting and confirming participation in community activities associated with your tour.

Accommodation providers: For multi-day and charity ride participants, we share relevant booking and identification information with accommodation providers to confirm your reservations.

Transport providers: We may share relevant information with transport providers involved in the delivery of your tour.

Business transfers: In the unlikely event that Ripple Effect Rides is sold or restructured, your information may transfer to the new operator as part of that process. We will notify you where possible and any new operator will be required to honour this privacy notice.

5. International Data Transfers

Our servers are located in Australia. If you are accessing our services from outside Australia, your information may be transferred to, stored, and processed in Australia, Cambodia, or other countries where our service providers operate.

We take reasonable steps to ensure that any international transfers of your personal data are handled securely and in accordance with applicable data protection law. Where required, we seek to ensure that appropriate safeguards are in place with our service providers. If you would like more information about how we protect your data during international transfers, please contact us at info@rippleeffectrides.com.

6. How Long Do We Keep Your Information?

We retain your personal information for as long as is necessary to fulfil the purposes set out in this notice, unless a longer retention period is required by law, such as for tax or accounting purposes.

When we no longer have a legitimate need to hold your information, we will delete or anonymise it securely.

7. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organisational security measures to protect your personal information from unauthorised access, loss, or misuse. However, no electronic transmission over the internet can be guaranteed to be completely secure. You access our services and provide your information at your own risk, and we encourage you to do so only within a secure environment.

8. Children Under 18

We do not knowingly collect data from or direct marketing to children under 18 years of age. Where a minor is participating in one of our tours, their personal information is provided by and managed through their parent or legal guardian. If you become aware that we have inadvertently collected personal information from a child without appropriate consent, please contact us at info@rippleeffectrides.com and we will take steps to delete it promptly.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access a copy of the information we hold about you
• The right to request correction of inaccurate or incomplete information
• The right to request deletion of your information, subject to certain legal exceptions
• The right to restrict or object to certain types of processing
• The right to data portability where processing is based on consent or contract

To exercise any of these rights, please contact us at info@rippleeffectrides.com or submit a request via our contact page at rippleeffectrides.com/contact-us.

10. Marketing Communications

You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. Please note that even if you opt out of marketing communications, we may still contact you with service-related messages necessary for the administration of your booking.

11. Updates to This Notice

We may update this privacy notice from time to time to reflect changes in our operations or applicable law. The updated version will be effective from the date it is published on our website. Where changes are material, we will make reasonable efforts to notify you directly. We encourage you to review this notice periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this privacy notice or how we handle your personal information, please contact us at:

Ripple Effect Rides Co., LTD. 22A Hap Guan Street, Siem Reap, Cambodia info@rippleeffectrides.com +855 (0) 69 256 857