Senior Off Road ADV Riders

FORUM

Privacy Policy

Effective Date: May 21, 2025

Senior Off Road ADV Riders (“we,” “our,” “us,” or “SORADV”) is deeply committed to safeguarding your privacy and protecting your personal data. This Privacy Policy details the types of information we collect, how we use it, with whom we share it, and the rights you have concerning your information. This policy applies to your use of our websites, soradv.com and senioroffroadadvriders.com (collectively, the “Sites”), and all associated services, features, and content we provide. We comply with all applicable privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the General Data Protection Regulation (GDPR) for our users in the European Union and European Economic Area, as well as other relevant global privacy frameworks.

1. Definitions

  • Personal Data/Personal Information: Any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.
  • Processing: Any operation or set of operations performed on Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
  • Controller (GDPR): The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. For the purposes of this Privacy Policy, Senior Off Road ADV Riders is the Controller of your Personal Data.
  • Service Provider (CCPA/CPRA): A person or entity that processes Personal Information on behalf of SORADV, subject to certain contractual restrictions.
  • Third Party: A person or entity that is not you, Senior Off Road ADV Riders, or a Service Provider.
  • Consumer/Data Subject: The identified or identifiable natural person to whom the Personal Data relates.

2. Information We Collect and Sources of Collection

We collect various categories of information to provide, maintain, and improve our Sites and services. The exact information collected depends on your interaction with us.

A. Information You Voluntarily Provide:

We collect information directly from you when you interact with our Sites, including but not limited to:

  • Account Registration Data:
    • Identifiers: Name, email address, postal address, phone number, username, password.
    • Commercial Information: Potentially payment information (processed securely by third-party payment processors; we do not store full payment card details).
  • User-Generated Content (UGC):
    • Identifiers: Your username, profile information.
    • Commercial Information: Details related to listings (e.g., items for sale, prices).
    • Internet or Other Electronic Network Activity Information & Professional or Employment-Related Information (if relevant to content): Any information, text, photos, videos, audio, comments, forum posts, advertisements, or other content you submit, upload, or publish on our Sites. This may include your opinions, interests, or other personal details you choose to disclose.
  • Communications and Interactions:
    • Identifiers: Information you provide when contacting us via email (e.g., info@soradv.com), contact forms, or other communication channels (e.g., customer support inquiries, feedback, survey responses).
  • Optional Profile Information:
    • Identifiers: Profile picture, biography, geographic location, vehicle details, riding interests, or any other information you choose to add to your public or private profile.

B. Information Collected Automatically (Usage Data):

When you access and use our Sites, we automatically collect certain information about your device and activity through cookies, web beacons, and other tracking technologies. This “Usage Data” helps us understand how users interact with our Sites and improve functionality.

  • Internet or Other Electronic Network Activity Information:
    • Device Information: IP address, device type, operating system, unique device identifiers.
    • Browser Information: Browser type and version, language settings.
    • Usage Details: Referring/exit pages, pages visited, date and time of visits, time spent on pages, click patterns, search queries, feature usage.
    • Location Data: Approximate geographical location based on IP address. We do not collect precise geolocation without your explicit consent.

C. Information from Third Parties:

We may receive information about you from third-party sources, such as:

  • Payment Processors: When you make a transaction, our third-party payment processors (e.g., Stripe, PayPal) may provide us with transaction confirmation details, but not your full payment card information.
  • Social Media Platforms: If you choose to link your social media accounts to your SORADV profile or interact with us through social media features, we may receive certain profile information in accordance with your settings on those platforms.
  • Advertising and Analytics Partners: We may receive non-personally identifiable aggregate data or demographic information from advertising networks and analytics providers to improve our marketing efforts and understand user demographics.

3. How We Use Your Information (Purposes of Processing)

We process your Personal Data for the following purposes, based on the legal bases outlined below:

A. To Provide and Operate Our Services (Contractual Necessity & Legitimate Interests):

  • To create, maintain, and manage your user account, including authentication and access to forums, listings, and other features.
  • To enable you to post, share, and interact with user-generated content (e.g., forum posts, classifieds, comments).
  • To facilitate communication between users on the platform (e.g., private messaging, comment replies).
  • To process transactions and deliver services you request (e.g., premium listings, if applicable).
  • To provide customer support, respond to your inquiries, and resolve issues.
  • To operate, maintain, and improve the functionality and performance of our Sites.

B. For Communication and Engagement (Legitimate Interests & Consent):

  • To send you service-related communications, updates, security alerts, and administrative messages.
  • To send you newsletters, marketing communications, and promotional offers about our services or those of our partners, where you have opted in or where we have a legitimate interest to do so. You can opt-out at any time.
  • To conduct surveys, contests, or promotions and communicate with participants.

C. For Personalization and Analytics (Legitimate Interests & Consent):

  • To personalize your experience on our Sites, including providing customized content, relevant advertisements, and recommendations.
  • To analyze user behavior, trends, and preferences to understand how our Sites are used and to improve their design, content, and features.
  • To measure the effectiveness of our marketing and advertising campaigns.

D. For Security and Fraud Prevention (Legitimate Interests & Legal Obligation):

  • To detect, prevent, and investigate fraudulent, unauthorized, or illegal activities.
  • To protect the security and integrity of our Sites, systems, and user data.
  • To enforce our Terms of Service and other policies.

E. For Legal Compliance (Legal Obligation):

  • To comply with applicable laws, regulations, legal processes, and governmental requests.
  • To establish, exercise, or defend legal claims.

F. For Advertising (Legitimate Interests & Consent):

  • To display relevant advertisements to you on our Sites or third-party platforms, both directly and through our advertising partners and affiliates (e.g., RevZilla), based on your interests and usage data.
  • To measure the effectiveness of advertising campaigns.

4. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, or as required by applicable law or regulatory obligations. The retention period may vary depending on the type of data and the purpose of processing.

Generally:

  • Account data is retained as long as your account is active and for a limited period thereafter as necessary for our legitimate business interests, to comply with legal obligations, or to resolve disputes.
  • User-generated content (e.g., forum posts) may be retained even after account deletion, in an anonymized or de-identified format, to maintain the integrity of our forums and for analytical purposes, unless you specifically request its deletion (subject to legal exceptions).
  • Usage data and cookie data are retained for periods necessary for analytics and advertising purposes, typically up to 26 months for Google Analytics data, or as determined by our cookie policy.

When your Personal Data is no longer required, we will securely delete, anonymize, or de-identify it to prevent its recovery or reconstruction.

5. How We Share and Disclose Your Information

We may share your Personal Data with the following categories of recipients for the purposes described in this Privacy Policy:

A. With Your Consent: We may share your information with third parties when we have your explicit consent to do so.

B. Publicly Available Content: Any Personal Data or other information you submit to public areas of our Sites (e.g., forum posts, comments, public profiles, classified listings) will be publicly visible and accessible to other users of the Sites and potentially to the general public. Exercise caution when sharing information in public spaces.

C. Service Providers: We engage third-party service providers who perform functions on our behalf to operate our Sites and services. These providers are contractually obligated to protect your Personal Data and use it only for the purposes for which it was disclosed. Categories of service providers include:

  • Hosting Providers: For storing our website data.
  • Payment Processors: For securely handling payment transactions (we do not directly store full payment card details).
  • Analytics Providers: For analyzing website usage and performance (e.g., Google Analytics).
  • Customer Support & Communication Tools: For managing user inquiries and sending emails.
  • Security & Fraud Prevention Services: For protecting our Sites and users from malicious activity.

D. Advertising and Marketing Partners: We may share non-personally identifiable, aggregated, or de-identified Usage Data with third-party advertising networks and affiliates (e.g., RevZilla) to deliver relevant ads to you and to analyze the effectiveness of advertising campaigns. While we do not “sell” your Personal Information for monetary consideration in the traditional sense, certain sharing activities with these partners may constitute “sharing” or “sale” under the CCPA/CPRA, as described below.

E. Corporate Transactions: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your Personal Data may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our Sites of any such change in ownership or control of your Personal Data.

F. Legal Requirements and Protection of Rights: We may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to:

  • Comply with a legal obligation, court order, or governmental request.
  • Protect and defend the rights, property, or safety of SORADV, our users, or the public.
  • Prevent or investigate possible wrongdoing in connection with the Sites.
  • Protect against legal liability.

6. International Data Transfers

Our Sites are hosted in the United States. If you are located outside of the United States, particularly in the European Union or European Economic Area, please be aware that your Personal Data will be transferred to, stored, and processed in the United States. The United States has not received an “adequacy decision” from the European Commission.

We take appropriate safeguards to ensure your Personal Data is treated securely and in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

  • Relying on contractual clauses approved by the European Commission, such as Standard Contractual Clauses (SCCs), with our service providers.
  • Implementing robust security measures to protect data during transfer and storage.
  • For transfers from the EU/EEA, ensuring that our data processors implement appropriate safeguards and adhere to data protection principles.

By using our Sites, you acknowledge and agree to the transfer of your Personal Data to the United States.

7. Your Rights and Choices

Depending on your jurisdiction and applicable data protection laws, you may have certain rights regarding your Personal Data. We are committed to facilitating the exercise of these rights.

A. General Data Protection Rights (Applicable to all users, where relevant):

  • Right to Access: You have the right to request a copy of the Personal Data we hold about you.
  • Right to Rectification/Correction: You have the right to request that we correct any inaccurate or incomplete Personal Data we hold about you.
  • Right to Erasure (Right to Be Forgotten): You have the right to request the deletion of your Personal Data under certain circumstances (e.g., when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent and there is no other legal basis for processing).
  • Right to Restriction of Processing: You have the right to request that we restrict the processing of your Personal Data under certain circumstances (e.g., if you contest the accuracy of the data, or if the processing is unlawful).
  • Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where technically feasible and processing is based on consent or contract.
  • Right to Object: You have the right to object to the processing of your Personal Data based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
  • Rights related to Automated Decision Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in specific circumstances.

B. California Privacy Rights (CCPA/CPRA):

If you are a California resident, you have specific rights under the CCPA/CPRA concerning your Personal Information:

  • Right to Know: You have the right to request that we disclose to you the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of Third Parties to whom we disclose Personal Information, and the categories of Personal Information that we have sold or shared.
  • Right to Delete: You have the right to request the deletion of your Personal Information that we have collected, subject to certain exceptions allowed by law (e.g., necessary for completing a transaction, detecting security incidents, or complying with legal obligations).
  • Right to Opt-Out of Sale or Sharing: While we do not “sell” your Personal Information for monetary consideration in the traditional sense, certain sharing of Personal Information with advertising partners may be considered “sharing” or “sale” under the CCPA/CPRA (e.g., for cross-context behavioral advertising). You have the right to opt-out of the “sale” or “sharing” of your Personal Information. To exercise this right, please contact us at info@soradv.com.
  • Right to Limit Use and Disclosure of Sensitive Personal Information (SPI): While we do not typically collect Sensitive Personal Information (e.g., health data) as defined by CPRA for inferring characteristics about consumers, if we were to do so, you would have the right to limit its use and disclosure to only what is necessary to perform the services or provide the goods reasonably expected by an average consumer.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you goods or services, charge you different prices, or provide a different level or quality of goods or services.

C. Exercising Your Rights:

To exercise any of the rights described above, please submit a verifiable request to us using the contact information provided at the end of this Privacy Policy (info@soradv.com).

  • Verification Process: To protect your privacy and security, we will take reasonable steps to verify your identity before fulfilling your request. This may require you to provide information such as your name, email address, account details, or other information we can match to our records.
  • Authorized Agents: You may designate an authorized agent to make a request on your behalf. If you use an authorized agent, we may require proof of your written permission for the agent to act on your behalf and verification of your own identity.
  • Response Time: We will respond to verifiable requests within the timeframe required by applicable law (e.g., 30 days for GDPR, 45 days for CCPA/CPRA, with possible extensions).

8. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information automatically when you interact with our Sites. These technologies help us:

  • Remember your preferences and settings.
  • Enable core site functionalities (e.g., login, shopping cart if applicable).
  • Analyze website traffic and user behavior.
  • Deliver personalized advertisements and measure their effectiveness.

Some cookies are set by us (first-party cookies), while others are set by third-party service providers and partners (third-party cookies). These third parties may collect information about your online activities across different websites and over time.

For detailed information about the types of cookies we use, their purpose, and how you can manage your cookie preferences, please refer to our dedicated Cookie Policy. You can typically manage your cookie preferences through a cookie consent banner on our Sites or directly through your web browser settings. Disabling certain cookies may affect the functionality and your experience on our Sites.

9. Children’s Privacy

Our Sites are not directed to, and we do not knowingly collect Personal Data from, children under the age of 18. If we become aware that we have inadvertently collected Personal Data from a child under 18 without verifiable parental consent, we will take immediate steps to delete such information from our records. If you believe we might have any information from or about a child under 18, please contact us immediately at info@soradv.com.

10. Third-Party Links

Our Sites may contain links to external websites, services, or applications that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit. Your interactions with these third-party links are subject to their own terms and privacy policies.

You agree to hold us harmless from and against any and all claims, liabilities, damages, losses, or expenses arising out of or in any way connected with your access to or use of any third-party websites or services.

11. Data Security

We implement reasonable and appropriate technical and organizational security measures designed to protect your Personal Data from unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

  • Encryption: Using SSL/TLS encryption for data in transit.
  • Access Controls: Restricting access to Personal Data to authorized personnel only.
  • Data Minimization: Collecting only the Personal Data necessary for stated purposes.
  • Regular Security Audits: Periodically reviewing our security practices.
  • Data Backup and Recovery: Implementing procedures to ensure data availability and integrity.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. You are also responsible for maintaining the confidentiality of your account password and for not sharing it with others.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of California, United States, without regard to its conflict of law principles. For users outside of the United States, specific legal rights under local law (e.g., GDPR) will be respected as outlined in this policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies. When we make material changes, we will update the “Effective Date” at the top of this policy and notify you by prominently posting a notice on our Sites or, where appropriate, by sending you an email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your rights, please do not hesitate to contact us at:

Email: info@soradv.com