Privacy Policy

Last updated: 20 July 2026

This Privacy Policy explains how personal data is handled when you use the Booda Bike Help Center or contact its support team. It applies to this Help Center and its support forms; other Booda Bike services may have their own privacy information.

Who is responsible for your data?

The data controller is Massive Corporation Kft., registered at 1034 Budapest, 14. Beszterce street, company registration number HU-23493247.

For privacy questions or requests, contact info@boodabike.com.

Data we collect

Depending on your request, we may collect:

your name and email address;
the request type, order status, order number and message you provide;
order, delivery, return or warranty information relevant to the request;
images, PDFs, videos or other files you choose to provide;
anonymous website usage information, such as page views, referring pages, browser, operating system, device type and approximate country;
technical and security information needed to deliver and protect the service; and
anti-spam information generated through ALTCHA, including the signed challenge, proof-of-work solution and verification result.

Please provide only information that is relevant to your support request. Avoid including sensitive personal data unless it is genuinely necessary.

Why we process personal data

We use this information to:

receive, investigate and respond to support requests;
identify an order and provide order, delivery, return or warranty assistance;
review files that help explain a product or service issue;
understand how the Help Center is used and improve its content and navigation;
protect the Help Center and its forms from spam, abuse and security threats;
maintain appropriate support records; and
establish, exercise or defend legal claims where necessary.

The applicable legal basis will depend on the request. Processing may be necessary to take steps at your request or perform a contract, to meet a legal obligation, or for our legitimate interests in providing support, securing our services and managing claims. Where another legal basis is required, we will identify it at the relevant time. Acknowledging this policy on the form does not make consent the sole legal basis for handling your request.

Website analytics

We use a self-hosted instance of Umami Analytics to measure use of the Help Center. Umami records anonymous usage information such as page views, referring pages, browser, operating system, device type and approximate country. We use these insights for our legitimate interest in understanding which help content is useful and improving the Help Center.

The Umami tracker does not use cookies, does not identify visitors and does not track visitors across different websites. The tracker is restricted to help.boodabike.com, so visits on localhost, preview URLs and development environments are not included in production analytics.

Umami may also collect a limited sample of interaction recordings and heatmap data, including page navigation, scrolling, pointer movement and clicks. This helps us identify confusing layouts and content that is difficult to find. Input fields are masked, and support forms and article-question forms are excluded from recording. We do not use recordings to capture form contents, names, email addresses, order numbers, messages or uploaded-file details.

We also record a limited set of predefined interaction events to understand how visitors reach the contact page and whether the general contact, article-question and return forms are started, submitted successfully or encounter an error. These events may include the previous internal Help Center path, the selected support category, the type of form, a predefined error category and non-identifying return-flow options such as payment method, insurance selection and number of packages. Event data does not include names, email addresses, order numbers, messages, bank details, addresses, telephone numbers, uploaded filenames or other form contents.

We have not enabled visitor identification.

Bot protection (ALTCHA)

We use the open-source ALTCHA proof-of-work mechanism to protect support forms from automated spam and abuse. The widget is included in the Help Center’s own website bundle and runs invisibly when you submit a protected form. It does not use image puzzles, advertising identifiers or tracking cookies.

When a protected form is submitted, your browser requests a short-lived, cryptographically signed challenge from Booda Bike’s Bunny-hosted email-forwarding endpoint and computes a proof-of-work solution on your device. This calculation may briefly use a small amount of processor capacity. Your browser sends the signed challenge and solution back with the form, and the Bunny Edge Script verifies them before processing the request or sending an email.

The challenge and solution do not contain your name, email address, order number, message or uploaded files. The network requests may involve standard technical information such as your IP address, browser user agent, request origin, time and a request identifier. The browser does not contact altcha.org for verification, and form contents are not sent to an external CAPTCHA provider.

We use ALTCHA on the basis of our legitimate interests in securing the Help Center, preventing spam and maintaining the availability of our support channels. Challenges expire after five minutes. The Edge Script does not deliberately retain the challenge or solution after handling the request; related technical and security event records follow the retention period described below.

Contact forms and uploaded files

Contact form submissions are sent to Booda Bike through a Bunny-hosted form-processing endpoint. The form may include photos, videos and PDF documents. Files and form details are used only as needed to investigate, respond to and resolve the request, subject to applicable record-keeping obligations.

Large file uploads

Files are uploaded directly from your browser to a private Bunny Storage area. Before the upload starts, the Bunny-hosted form endpoint issues a short-lived upload address that is restricted to the selected file; the Storage password is never sent to your browser. The support email contains a protected download link instead of the file itself. Only upload files relevant to your support request, and avoid unnecessary sensitive personal data. Uploaded files are removed from Booda Bike’s active support storage within 90 days after the support request is closed. Download links also expire and cannot be used as permanent public file addresses.

Recipients and service providers

Personal data is available only to authorised personnel and service providers who need it for the purposes described above. We use service providers where necessary to operate the Help Center and respond to support requests. These may include providers used for website hosting, the Bunny-hosted self-hosted Umami analytics instance, Bunny-hosted ALTCHA challenge and support-form processing, private file storage through Bunny Storage, and email delivery. Provider roles, processing locations and retention settings are reviewed as part of our service-provider management process.

How long we keep data

We keep personal data only as long as necessary for the relevant purpose and any legal, accounting, warranty or claims obligations. Current periods requiring confirmation are:

support requests and related order information: three years after the request is closed;
files uploaded with a support request: 90 days after the request is closed, after which they are removed from the active support storage; and
anonymous website analytics and heatmap data: according to the retention period configured in the self-hosted Umami instance;
session replays: 30 days, unless a shorter period is configured; and
ALTCHA verification results and related technical or anti-spam records: 90 days after submission, unless they are needed longer to investigate a security incident or abuse.

Data may be kept longer where required by law or needed for a legal claim.

Your rights

Subject to applicable law, you may have rights to access, correct or delete your personal data; restrict or object to processing; receive portable data; and withdraw consent where processing is based on consent. Withdrawal does not affect processing already carried out lawfully.

To exercise a right, contact info@boodabike.com. We may need to verify your identity before acting on a request.

Changes to this policy

We may update this policy when the Help Center, its providers or legal requirements change. The date above shows when this version was last updated.

Contact

Privacy questions may be sent to info@boodabike.com.