Privacy policy
Last updated: 27 September 2026
This policy explains how your personal data is processed, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act of 6 January 1978, as amended. In case of discrepancy, the French version prevails.
1. Data controller
Clément BERTRAND
Contact for any question about your data:
contact@clutchmoto.fr
2. Data processed, purposes and legal bases
| Purpose | Data | Legal basis (Art. 6(1) GDPR) |
|---|---|---|
| "Find your bike" questionnaire: computing recommendations and the shareable result link | Answers, without identity: licence type, height (and inseam if provided), experience, riding use, pillion frequency, monthly mileage, budget, new/used, priorities; language; date | Legitimate interest in providing the requested service (Art. 6(1)(f)) |
| Emailing you the link to your result, only if you ask for it | Email address, date of consent | Consent (Art. 6(1)(a)), which you may withdraw at any time by writing to the address in section 1 |
| User accounts and authentication (optional) | Name, email address, hashed password, role, account status, creation / update / last login dates | Performance of the terms of use (Art. 6(1)(b)) |
| Service security (technical logs, protection against fraudulent logins) | IP address, date and time of requests, browser | Legitimate interest in securing the service (Art. 6(1)(f)) |
| Handling requests to exercise your rights | Identity, email address, request and decision dates | Legal obligation (Art. 6(1)(c), Articles 12 and 17 GDPR) |
| Alerts for a saved search (new matching bike, price drop), if you turn them on | Email address, first and last name, quiz answers, matching bikes and prices at the last email, activation and last email dates | Consent (Art. 6(1)(a)), which you can withdraw anytime with the link in each email or from your saved searches |
Recommendations are computed with simple, public rules (see "How it works"); they have no legal effect and do not significantly affect you. No automated decision-making within the meaning of Article 22 GDPR takes place. Your data is never sold or used for advertising.
3. Retention periods
- Questionnaire results (anonymous answers): 24 months, then deleted; the share link then stops working.
- Email address entered to receive a result: 30 days after your request, then erased. It is not used for any other mailing.
- Account data: for as long as the account exists.
- Unconfirmed sign-ups: deleted after 7 days.
- Technical logs: 6 months maximum.
- Proof of handling of a deletion request: 3 years (accountability, Art. 5(2) GDPR).
These periods are applied automatically by a nightly clean-up.
4. Recipients
Your data is only accessible to authorised staff of the data controller and to our hosting provider, acting as processor (Art. 28 GDPR): OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (+33 9 72 10 10 07). Data is hosted in the European Union and is not transferred outside it.
6. Security
We implement appropriate technical and organisational measures (Art. 32 GDPR): irreversibly hashed passwords, brute-force protection, CSRF protection, rate limiting of public forms, restricted access to administration.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection (Articles 15 to 21 GDPR), the right to withdraw your consent at any time, and the right to set guidelines regarding your data after your death. To exercise them, email contact@clutchmoto.fr. We reply within one month (Art. 12(3) GDPR). Exercising your rights is free of charge.
8. Complaints
If you believe your rights are not being respected, you may lodge a complaint with a supervisory authority (Art. 77 GDPR), in France the CNIL: www.cnil.fr/fr/plaintes.