Privacy Policy
Last updated: May 2026
Operated by: Moby Bikes Netherlands B.V., Prins Hendrikkade 21-E, 1012 TL Amsterdam · KvK: 85188565
Email: privacy@mobymove.com
1. Who we are
Cargoroo Shopfront is an initiative of Moby Bikes Netherlands B.V., operating under the Cargoroo brand. This privacy policy applies specifically to the business.cargoroowarrior.com website and the Shopfront application process. It does not cover the Cargoroo rider app — see cargoroo.nl/en/privacy for that.
2. What personal data we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Shop name & contact name | To identify your business and contact you about your application | Legitimate interest |
| To contact you about your application and send updates | Legitimate interest / consent | |
| Phone number | To contact you when your application is reviewed | Legitimate interest |
| Shop address / city | To assess location suitability for a Shopfront bike | Legitimate interest |
| Shop type & opening hours | To match the right Shopfront partners to the program | Legitimate interest |
| Motivation / notes | To select the right Shopfront partners for each street | Legitimate interest |
| UTM / referral source | To understand which ads or channels drive applications (analytics only) | Legitimate interest |
3. How long we keep your data
- Applicants not approved: data deleted within 6 months of application.
- Approved Shopfront partners: data retained for the duration of the partnership plus 2 years.
- Analytics data (UTM, page views): retained for 26 months (Google Analytics default).
- You can request deletion at any time — see Section 7.
4. Who we share your data with
We only share your data with trusted service providers that help us operate this website and process applications: Loops.so (email), Supabase / Lovable (data storage), Google Analytics (analytics), Meta Pixel (ad tracking — only after cookie consent). We do not sell your data.
5. International data transfers
Some of our service providers are based outside the EEA (including Google and Meta). Where data is transferred outside the EU, we ensure adequate protection via EU Standard Contractual Clauses (SCCs) or equivalent safeguards.
6. Cookies
We use cookies on business.cargoroowarrior.com. See the Cookie Policy for full details. You can manage your cookie preferences at any time via the cookie banner on the site.
7. Your rights (GDPR)
As a data subject under GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ('right to be forgotten')
- Object to processing based on legitimate interest
- Request data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, email privacy@mobymove.com. We will respond within 30 days.
If you are unhappy with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
8. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available at business.cargoroowarrior.com/privacy. Material changes will be communicated by email to active applicants.