Privacy Policy

procyclingmarket ("we", "us") is operated by Procyclingmarket, based in the Netherlands. procyclingmarket is a private, invite-only marketplace connecting professional cycling teams, riders, and agents to discover opportunities and negotiate deals.

Contact: info@procyclingmarket.com

• Account data: name, email address, password (stored hashed), role (team/rider/agent/admin), organization name
• Rider profile data: performance metrics, achievements, team history, availability, profile photo
• Negotiation data: messages exchanged between negotiation participants, and any documents/attachments shared within a negotiation
• Access request data: name, email, requested role, organization, and any message submitted when requesting access
• Technical data: IP address (used only to prevent spam/abuse on the access-request form), and standard browser/device information collected automatically by our hosting provider

• To provide the marketplace and let you negotiate deals — performance of a contract (Art. 6(1)(b) GDPR)
• To review and approve access requests and invitations — pre-contractual steps taken at your request (Art. 6(1)(b))
• To secure the platform and prevent spam or abuse, such as rate-limiting the access-request form using IP addresses — legitimate interest (Art. 6(1)(f))
• To comply with legal obligations where applicable (Art. 6(1)(c))

Access is strictly limited by role and by explicit sharing:

• Rider profiles are visible only to teams or agents that have been explicitly granted access by the rider or an admin
• Negotiation messages and attachments are visible only to the participants in that specific negotiation
• Administrators can access account and negotiation data as needed to operate and moderate the platform

We do not sell personal data or share it with third parties for marketing purposes.

• Supabase — database, authentication, and file storage
• Lovable — application hosting
• Google Fonts — loads web fonts used on this site, which may receive your IP address when the page loads

We only work with processors that provide appropriate safeguards for personal data.

Where any processor listed above stores or processes data outside the European Economic Area, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect that data.

We retain account, profile, and negotiation data for as long as your account is active. If an account is closed, or a negotiation ends without a deal, related personal data is deleted or anonymized within 12 months, unless we are required to retain it longer for legal reasons. Access requests that are rejected or left unanswered are deleted after 12 months. IP address logs used only for spam prevention on the access-request form are kept for a maximum of 30 days.

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to certain processing
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with a data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)

To exercise any of these rights, contact us at info@procyclingmarket.com.

We use role-based access control and row-level security so members can only ever access data they are authorized to see, encrypted connections (HTTPS/TLS) for all traffic, and an invite- or approval-only signup flow to keep the platform closed to vetted members.

procyclingmarket is intended for professional adults working in cycling. We do not knowingly collect personal data from anyone under 18.

We may update this policy as the platform evolves. The "last updated" date above will change whenever we do, and we'll communicate material changes to active members.

Procyclingmarket — info@procyclingmarket.com