Last updated: July 2026
Important: This Privacy Policy is a professional draft prepared for GDPR compliance and payment-provider requirements. It should be reviewed by a qualified lawyer before live payment activation. Placeholder values in [BRACKETS] must be replaced with confirmed information.
BotRiders (trading name) is operated by [COMPANY_LEGAL_NAME], registered in Montenegro under registration number [COMPANY_REGISTRATION_NUMBER], with a registered office at [REGISTERED_ADDRESS_FULL], Montenegro.
We are the data controller of the personal data you provide when using botriders.com and our services.
For privacy-related questions, contact us at: [PRIVACY_EMAIL] (or ozan@botriders.com until a dedicated privacy address is set up).
| Data | Where collected |
|---|---|
| First and last name | Contact form, checkout, account registration |
| Email address | Contact form, checkout, account registration |
| Phone number (optional) | Contact form, checkout |
| Message / project description | Contact form |
| Product selection and delivery mode | Pricing calculator, checkout |
| Account password (hashed) | Account registration |
| Business name or website (optional) | Contact form (for business enquiries) |
| Data | Source |
|---|---|
| IP address | Server access logs |
| Browser type and version | Server logs / analytics |
| Pages visited and time spent | Google Analytics |
| Referral source (how you found us) | Google Analytics |
| Device type (desktop/mobile/tablet) | Google Analytics |
| Country/region (approximate) | Google Analytics (IP-derived) |
| Session and click events | Google Analytics |
When you place an order, we record the order reference, products selected, service mode, total amount, and order status. This is stored in our database on [HOSTING_PROVIDER] servers.
When payment is processed, payment card data is handled directly by our payment provider ([PAYMENT_PROVIDER_NAME]). We do not store full card numbers, CVV codes, or equivalent payment credentials. We receive only a transaction confirmation reference from the payment provider.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Process and fulfil your order | Name, email, order details | Contract performance |
| Send order confirmation and updates | Name, email | Contract performance |
| Respond to contact enquiries | Name, email, message | Legitimate interest (responding to requests) |
| Manage your account | Name, email, account data | Contract performance |
| Prevent fraud and abuse | IP address, order data | Legitimate interest (security) |
| Analyse website usage and improve our services | Analytics data (anonymised/pseudonymised) | Legitimate interest (service improvement) or Consent (where required by cookie law) |
| Send marketing emails (if opted in) | Email address | Consent |
| Comply with legal obligations | Order and financial records | Legal obligation |
| Data type | Retention period |
|---|---|
| Order records and invoices | 7 years (accounting and legal obligation) |
| Account data (active accounts) | Duration of account plus 2 years after closure |
| Contact form enquiries | 3 years from the date of the enquiry |
| Marketing opt-in records | Until you unsubscribe, plus 2 years |
| Analytics data (Google Analytics) | 26 months (Google's default retention setting) |
| Server access logs | 90 days |
After the applicable retention period, data is securely deleted or anonymised.
We do not sell, rent, or trade your personal data. We share data only with the following categories of third-party service providers ("subprocessors") who help us operate our business:
| Subprocessor | Purpose | Country | Safeguards |
|---|---|---|---|
| Google LLC (Google Analytics) | Website analytics | USA | EU Standard Contractual Clauses (SCCs) |
| Web3Forms | Contact form processing | [WEB3FORMS_COUNTRY] | Data Processing Agreement |
| [PAYMENT_PROVIDER_NAME] | Payment processing | [PAYMENT_PROVIDER_COUNTRY] | Appropriate safeguards per provider |
| [HOSTING_PROVIDER] | Website and database hosting | [HOSTING_PROVIDER_COUNTRY] | Data Processing Agreement |
| AI service providers (e.g. OpenAI) | Service delivery (AI tools used to produce deliverables) | USA | EU Standard Contractual Clauses (SCCs) |
We may also disclose data where required by law, court order, or to protect the rights and safety of BotRiders or others.
Some of our subprocessors are based outside the European Economic Area (EEA). Where data is transferred to countries that do not have an adequate level of data protection recognised by the European Commission, we rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards as permitted under GDPR.
Montenegro is not an EU or EEA member state, but has data protection legislation that aligns with GDPR principles. We follow GDPR standards as a baseline for all data we process, regardless of where our customers are located.
We use cookies and similar tracking technologies on botriders.com. Please see our Cookie Policy for full details.
In brief:
You can manage your cookie preferences at any time by clicking "Cookie Settings" in the footer or via your browser settings.
If you are in the EU/EEA or UK, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at [PRIVACY_EMAIL] or ozan@botriders.com. We will respond within 30 days. We may need to verify your identity before processing your request.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with your local data protection authority. In Montenegro, this is the Agency for Personal Data Protection and Free Access to Information (AZLP).
Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date at the top of the page. Material changes will be communicated to registered users by email.
For privacy-related questions, requests, or concerns: