Legal

Privacy Policy

How VO2 Travel collects, uses, shares, and protects your personal information. Last updated October 11, 2026.

1. Who We Are

This Privacy Policy explains how VO2 Travel LLC (“VO2 Travel,” “we,” or “us”) collects, uses, and shares personal information when you visit our website, create an account, book a tour, connect a fitness app, contact us, or subscribe to our newsletter (together, the “Service”).

VO2 Travel LLC is based in the United States and is responsible for the personal information described here (in European terms, we are the “controller”). This policy does not cover third-party websites we link to.

2. Information We Collect

  • Account information. Your name and email, and — if you choose to add them — your phone number, gender, date of birth, and profile photo. If you sign in with Google, we receive your name, email, and profile photo from Google.
  • Booking and rider information. For each rider: name, email, phone, date of birth, nationality, emergency contact details, room and roommate preferences, bike choice and sizing, and jersey size.
  • Health information. Medical conditions and dietary restrictions you choose to share so your trip can be run safely. See “Health Information” below.
  • Payment information. Card payments are processed by Stripe. We never see or store your full card number; we keep a record of your payments and a Stripe customer reference.
  • Fitness data. If you connect Strava, we receive your Strava profile, fitness metrics based on your activities, and your body weight if you have shared it with Strava.
  • Communications. Messages you send through our contact, group leader, or operator forms, emails you send us, and your newsletter subscription.
  • Technical information. When you use the Service, our hosting and security providers automatically log information such as your IP address, browser and device type, pages requested, and the date and time of access. We may also collect anonymous page-performance measurements.

If you give us information about someone else — such as a fellow rider or an emergency contact — please make sure they know and agree.

3. How We Use Your Information

  • To arrange and deliver your tour, including sharing details with its operator.
  • To process payments, refunds, and payment reminders.
  • To manage your account and send booking messages such as confirmations, pre-trip information, and post-trip surveys.
  • To respond to your questions and inquiries.
  • If you connect Strava, to match tours to your fitness and show how a tour’s terrain compares to your riding.
  • To send our newsletter and updates when you have subscribed.
  • To keep the Service secure, prevent fraud, and fix problems.
  • To understand how the Service is used and improve it.
  • To meet legal, tax, and accounting obligations and to enforce our Terms of Service.

4. Health Information

Medical conditions and dietary restrictions are optional and sensitive. We collect them only with your consent and use them only to keep you safe and well looked after on tour. We share them only with the tour operator and guides running your trip, and only as needed.

You can choose not to provide this information, though the operator may then be unable to accommodate specific needs. You can ask us to update or delete it at any time.

5. How We Share Information

We do not sell your personal information, and we do not share it for targeted advertising. We share it only as follows:

  • Tour operators and their suppliers. The local operator running your tour receives the rider information needed to deliver it, and may pass the necessary parts to hotels, transport, and bike-rental providers.
  • Service providers. Companies that run parts of the Service for us under contract: Google Cloud and Firebase (hosting, database, and sign-in), Stripe (payments), Resend (email delivery), Cloudflare (website delivery and security), and Mapbox (maps).
  • Strava. Only if you connect your account, and only to retrieve your data.
  • Legal and safety. When required by law, or to protect the rights and safety of our riders, VO2 Travel, or others.
  • Business transfers. If VO2 Travel is involved in a merger, acquisition, or sale of assets, under this policy’s protections.

6. Cookies & Similar Technologies

We do not use advertising cookies or third-party analytics trackers. We use your browser’s storage to keep you signed in and remember your preferences.

Our payment provider (Stripe) and our security provider (Cloudflare) may set cookies needed to prevent fraud and protect the site from abuse. You can block or delete cookies in your browser, but parts of the Service, such as sign-in and checkout, may then stop working.

7. International Transfers

We are based in the United States and store data with providers in the United States and other countries, whose data-protection laws may differ from yours. Because our tours take place abroad, the information needed for your trip is shared with operators in the destination country. Where the law requires it, we use appropriate safeguards such as standard contractual clauses.

8. How Long We Keep Information

We keep personal information only as long as needed for the purposes described above, including legal, tax, and accounting requirements and resolving disputes, and then delete or anonymize it. Newsletter subscriptions are kept until you unsubscribe. When you disconnect Strava, we delete the Strava data we stored.

9. Security

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit, restricted access, and authorization checks on every request. No system is perfectly secure, so we cannot guarantee absolute security. Please keep your sign-in details private.

10. Your Choices & Rights

  • Marketing. Every newsletter includes an unsubscribe link.
  • Strava. You can disconnect Strava at any time from your account settings.
  • Your rights. Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain uses, and to withdraw consent at any time.
  • EEA, UK, and Switzerland. We rely on performing our contract with you, our legitimate interests (such as security and improving the Service), legal obligations, and your consent (for health information and the newsletter). You can also complain to your local data-protection authority.
  • California and other U.S. states. You may have the right to know, access, correct, and delete your personal information, and to use an authorized agent. We do not sell or share personal information for targeted advertising, and we will not treat you differently for exercising your rights.

To make a request, email contact@vo2travel.com from the address on your account. We may need to verify your identity, and we will respond within the time required by law.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information without a parent’s or guardian’s consent. If we learn that we have, we will delete it.

13. Changes to This Policy

We may update this policy from time to time. We will post changes on this page and update the “Last updated” date, and we will give additional notice of material changes where the law requires it.

Questions?

For any questions about this privacy policy, please reach out through our contact page.