Privacy Policy
Last updated: 18 July 2026
This Privacy Policy explains how S3 Global Trading Co. W.L.L ("S3 Global", "RiderGo", "we", "us", or "our") collects, uses, shares, and protects personal information across RiderGo — the RiderGo mobile application, the RiderGo Fleet & Rider Management web portal, and related websites and services (together, the "Service").
We are committed to protecting your privacy and handling personal information in accordance with the Personal Data Protection Law of the Kingdom of Bahrain (Law No. 30 of 2018, the "PDPL") and other applicable laws. By using the Service, you agree to the practices described in this policy. This policy should be read together with our Terms of Service.
1. Who we are, and our two roles
S3 Global Trading Co. W.L.L is a company registered in the Kingdom of Bahrain. RiderGo is our platform for managing motorcycles, riders and fleet operations, and for supplying motorcycle tyres, parts, accessories and gadgets. Depending on the data, we act in one of two roles:
- As controller — for the account and profile information of the individuals and businesses who register with us directly, for the products we supply, and for operating and securing the Service.
- As processor — when a Business customer records information about its own riders, workers or other individuals in the Service, that Business customer decides how the data is used and is the controller of it; we process that data on the Business customer's behalf and on its instructions (see section 6).
2. Who this policy covers
This policy applies to: individual riders who use the RiderGo app for personal use; business users who access a business account; and riders and workers whose details a business records in the Service. If your details were added by a business (for example your employer or a fleet operator), that business is responsible for your data as controller, and you should also refer to that business's own privacy notice.
3. Information we collect
3.1 Information you provide as an individual rider
- Account information: your name, mobile number, email address, and any password or one-time codes used to sign in (passwords are stored in hashed form by our authentication provider, never in plain text).
- Garage and vehicle information: details you add about your motorcycle(s), such as make, model, an identifier or plate you choose to enter, odometer/mileage readings, service reminders and photos.
- Order and delivery information: the products you order, order history, quantities, delivery details and records.
- Referral information: your referral code and records of referrals you make or receive.
- Communications: messages, requests and feedback you send our support team.
3.2 Information we collect from businesses and their users
- Business details: business name, commercial registration (CR) number, contact person, address, phone and email.
- Business user accounts: the name, email, role and permissions of each person the business authorises, and sign-in activity.
- Operational data the business manages: its bikes, stock and inventory, parts orders, invoices, and business reports.
3.3 Rider and worker information entered by businesses
When a Business customer uses the fleet and rider management tools, it may record information about its riders and workers, such as name, identification (for example CPR), nationality, contact details, documents (for example visa, work permit and driving licence) and their images, bike assignments, and rental and payment records. We handle this data as a processor on the business's behalf (see section 6).
3.4 Information collected automatically
When you use the Service, we and our backend provider collect limited technical and log data needed to operate and secure it, such as device type and operating system, app or browser version, general diagnostic and error logs, and the dates and times of your activity. This is used for operating, securing and troubleshooting the Service.
Location: In the current release, RiderGo does not collect or track your device's GPS location. Addresses are entered manually. We may introduce optional location features in future (see "Planned features"); if we do, we will update this policy and request your permission before accessing device location.
4. How we use information
- To create, manage and secure accounts and authenticate users when they sign in.
- To provide the Service, including the fleet, rider, document, stock, and rental & rent-collection tools, and to keep the records businesses enter.
- To process, fulfil and deliver product orders, and keep you informed of order status.
- To generate reminders and alerts (for example document-expiry alerts, service reminders, and rent-due or overdue alerts shown to a business about its riders).
- To provide customer support and respond to enquiries.
- To operate, maintain, secure and improve the Service, and to prevent fraud and misuse.
- To comply with our legal and regulatory obligations.
Where we act as controller, we rely on these legal bases as applicable: performance of our contract with you; your consent (where required); our legitimate interests (such as security and improving the Service); and compliance with legal obligations. Where we act as processor, the Business customer is responsible for the legal basis for its use of the data.
5. Payments
Orders placed for products from S3 Global are currently paid on delivery by cash, card, or bank transfer. We do not collect or store your debit or credit card details within the Service; card payments are handled using a card machine at the point of delivery, and bank transfers are made through your own bank. For rent and similar amounts between a business and its riders, RiderGo only records what is charged and received — it does not process, hold or transfer any money (see section 6 and our Terms of Service).
6. Business customers' data and our role as processor
When a Business customer records personal data about its riders, workers or other individuals, that Business customer is the controller and we act as its processor. In that role we:
- process the data only to provide and support the Service, and on the Business customer's documented instructions;
- keep each business's data separated from other businesses, using access controls so that only that business's authorised users (and our authorised staff, where needed to operate or support the Service) can access it;
- apply appropriate security measures; and
- on the ending of the business's account, delete or return the data in accordance with our Terms and applicable law.
The Business customer is responsible for having a lawful basis to record this data, for giving its riders and workers any required notices, and for handling their requests. If your details were entered by a business and you want to access, correct or delete them, please contact that business first; we will support the business in responding.
7. How we share information
We do not sell personal information. We share it only as needed to operate the Service, including with:
- Service providers (processors): trusted third parties who process data on our behalf, including our cloud hosting, database and storage provider, our content-delivery and domain infrastructure, and our email providers used to send account and transactional messages. They may use the data only to provide services to us.
- Within a business's own account: a Business customer's authorised users can see the data in that business's account according to the roles it assigns.
- Delivery personnel: people delivering an order receive the information needed to complete delivery (such as name, delivery address and contact number).
- Legal and regulatory authorities: where we are required to disclose information by law, regulation, legal process, or to protect our rights, users, or the public.
- Business transfers: if we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
8. International data transfers
The cloud infrastructure that powers RiderGo may store and process data on servers located outside the Kingdom of Bahrain. Where personal data is transferred internationally, we take reasonable steps to ensure it is protected in line with the PDPL and applicable law.
9. Data retention
We keep personal information for as long as the relevant account is active and as long as needed to provide the Service, fulfil the purposes described in this policy, and meet our legal, accounting and reporting obligations. For data we hold as a processor, we retain it as instructed by the Business customer and as required by law. When information is no longer required, we delete or anonymise it. You may request deletion as described below.
10. Security
We use appropriate technical and organisational measures to protect personal information, including encrypted connections, hashed passwords, access controls and account separation. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your account credentials confidential.
11. Your rights
Subject to the PDPL and applicable law, you have the right to:
- access the personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your personal information;
- object to or request restriction of certain processing;
- withdraw consent where processing is based on consent; and
- lodge a complaint with the Personal Data Protection Authority in Bahrain.
To exercise these rights for data we control, contact us at info@s3global.net. If your data was entered by a business (as controller), please contact that business; we will assist it as its processor.
12. Children's privacy
The Service is intended for users who are at least 18 years old and must not be used to record data about anyone under 18. We do not knowingly collect personal information from children. If you believe a child's information has been provided to us, please contact us and we will take appropriate steps to delete it.
13. Notifications and communications
We may send service-related messages necessary to operate accounts and orders (for example order confirmations, document-expiry alerts, and rent reminders shown to businesses). Where we send optional or promotional messages, you can opt out at any time using the unsubscribe mechanism provided or by contacting us. You can also control push notifications through your device settings.
14. Third-party links
The Service may contain links to third-party websites or services we do not operate. This policy does not apply to those third parties, and we encourage you to review their privacy policies.
15. Planned features
We are actively developing RiderGo. Features we plan to introduce include online and card payment options (handled by third-party payment processors under their own terms), optional location-based features for delivery and tracking, and in-app statements and receipts for riders so they can view their own rental dues and payment confirmations. Before any such feature begins collecting new categories of personal data, we will update this policy and, where required, request your consent.
16. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after changes take effect means you accept the revised policy.
17. Contact us
If you have questions, requests, or concerns about this Privacy Policy or your personal information, please contact us:
S3 Global Trading Co. W.L.L
Shop 00, Building 0196, Road 0001, Block 0713, Tubli, Kingdom of Bahrain
Email: info@s3global.net