Privacy policy
Last updated: 19 October 2026
1 Who we are
Moto Together App (MTA) is a members' community for UK motorcycle riders, run by the team behind the Moto Gastro Adventures YouTube channel. MTA is operated by Dream Trough Media Ltd, trading as Moto Together App, of 46 Rosemount Avenue, Barnoldswick BB18 5JR ("MTA", "we", "us", "our"). We are the controller of the personal data described in this policy.
Contact us about privacy at hello@mototogether.co.uk or by post at the address above.
This policy explains what personal data we collect when you visit or use MTA, why we use it, who we share it with, how long we keep it and your rights. Our Cookie Policy at /cookies explains how we use cookies and similar technologies.
MTA is for adults only. You must be 18 or over to join.
2 What we collect
Account details. Your first name, last name, display name, email address, password (stored only in encrypted, hashed form), the date you accepted our terms, privacy policy and community guidelines, and whether you are a member or admin.
Profile. Anything you add to your profile, such as your photo, area or town and bio. Your profile also shows your connections count and recent community topics.
Membership and payments. Your membership status, renewal and cancellation dates, any promo code used and a Stripe customer reference. Your card details are collected and held by Stripe, not by us.
Your content. Community topics, replies and attachments (photos, GPX route files and PDFs), directory listings you submit, ratings and reviews, and direct messages and photos you send.
Connections and safety. Connection requests and connections, members you block, reports you make or that are made about your content, and our moderation decisions (including warnings, removals and suspensions).
Activity. Notifications we send you, when you last read messages, and clicks on partner deals (counted to show partners how their deal performs).
Contact and support. Your name, email address and message when you use our contact form or email us.
Communications. Records of the service emails and newsletters we send you, and your newsletter preference.
Privacy choices. Your cookie and privacy settings, as described in our Cookie Policy.
Technical data. IP address, browser and device type, and the date and time of requests, recorded by our hosting and sign-in systems for security and to keep the service running.
We do not ask for special category data (such as health, religion or ethnicity). Please think carefully before sharing anything like that in public community posts.
3 How and why we use it
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, taking membership payments, giving you access to member features and sending service emails (verification, password reset, receipts, renewal and cancellation notices) | Contract |
| Showing your profile and content to other members, delivering messages, running connections, communities, the directory, ratings and partner deals | Contract |
| Keeping MTA safe: moderating content, handling reports and complaints, enforcing our terms and community guidelines, preventing fraud and misuse, and keeping the service secure | Legitimate interests (a safe, lawful community) and legal obligation (including the Online Safety Act 2023) |
| Sending you our members' newsletter (see section 5) | Legitimate interests, with the right to opt out at any time |
| Answering enquiries sent through our contact form or by email | Legitimate interests |
| Counting deal clicks and producing anonymous statistics for partners | Legitimate interests |
| Showing YouTube videos once you choose to play them | Consent |
| Keeping accounting and tax records | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against yours. You can object at any time (see section 9).
We do not sell your personal data, use it for advertising or profiling, or make decisions about you based solely on automated processing.
4 What other members can see
Members can see your display name, profile photo, area or town, bio, connections count and community activity, plus any topics, replies, attachments, directory submissions, ratings and reviews you post. Your first and last name and email address are not shown to other members. Direct messages are visible only to you and the member you are messaging. Blocking a member hides you from each other.
MTA content is for members only and is not visible to the public or search engines. Photos and files are delivered through private, time-limited links. Other members could still copy or screenshot what you share, so please share with care. GPX files can show where a route starts and ends, so consider trimming them so they do not reveal your home.
Admins (the MTA team and our developer, acting on our behalf) can see account and membership details, content, reports and contact submissions where needed to run and moderate the service. Admins only read direct messages when needed to investigate a report or a legal or safety concern.
5 Emails and our newsletter
We send service emails needed to run your membership. You cannot opt out of these while you are a member.
As a member, we will also send you our members' newsletter with news, rides, events and deals from MTA and Moto Gastro Adventures. You can opt out when you register, at any time in Account > Email preferences, or by using the unsubscribe link in any newsletter. Opting out does not affect your membership.
Our emails do not contain open-tracking pixels or click tracking.
6 Who we share it with
We use the following service providers, who process personal data on our behalf under contracts that require them to protect it:
| Provider | What they do | Location |
|---|---|---|
| Lovable Labs Sweden AB (Lovable) | Hosting the app, database, file storage, sign-in and service emails (Lovable Cloud, built on Supabase) | EEA and USA |
| Supabase, Inc. | Database, storage and sign-in infrastructure, as Lovable's sub-processor | Data centre region set for our project; support access from the USA |
| Stripe Payments UK Ltd and its affiliates | Membership payments, subscription management and fraud prevention. Stripe is also an independent controller for some payment data, under its own privacy notice | UK, EEA and USA |
| Astrodon Corporation (Loops) | Sending service emails and newsletters | USA |
| Google LLC (YouTube) | Playing embedded videos, only if you choose to play them | USA |
| Our developer, Richard J Eaton Ltd (No Code Ninja) | Building, supporting and maintaining MTA | UK |
We also share personal data:
- with partners only as anonymous click totals, never your identity;
- with professional advisers, insurers and our accountants where needed;
- with the police, Ofcom, courts or other authorities where the law requires it or to protect someone from serious harm; and
- with a buyer or successor if MTA or its business is sold or restructured, under the same protections.
When you click a link to a partner, directory listing, charity, social network or our merch shop, that organisation's own privacy policy applies.
7 International transfers
Some providers process personal data outside the UK, including in the European Economic Area and the United States. Where they do, the transfer is protected by UK adequacy regulations (for the EEA, and for US companies certified under the UK Extension to the EU-US Data Privacy Framework) or by the ICO's International Data Transfer Agreement or Addendum to the EU standard contractual clauses. Contact us for more information.
8 How long we keep it
| Data | How long |
|---|---|
| Account and profile | While your account is open. Deleted when you delete your account, except as below. |
| Direct messages and photos | Until you delete your account (messages you sent are deleted). |
| Community topics and replies | Kept after you leave, shown as "Former member" so conversations make sense. Ask us if you want specific posts removed. |
| Directory submissions, ratings and reviews | Kept after you leave, without your name. |
| Membership and payment records | 6 years after the end of the financial year they relate to, for tax and accounting. |
| Reports and moderation records | 2 years after the case is closed, or longer if needed for a legal claim or to prevent repeat abuse. |
| Contact form submissions | 2 years. |
| Email sending records | 12 months. |
| Privacy choice records | 2 years. |
| Deal click counts | Kept as anonymous totals. |
| Hosting and sign-in security logs | As long as our hosting providers need them to run and secure the service. |
9 Your rights
You have the right to:
- access your personal data and get a copy;
- correct inaccurate data (you can edit your profile at any time);
- delete your data (you can delete your account in Account settings);
- restrict or object to our use of your data, including objecting to anything based on legitimate interests;
- data portability, for data you gave us under a contract; and
- withdraw consent at any time, where we rely on consent.
To use these rights, email hello@mototogether.co.uk. We will respond within one month. We may need to confirm your identity first.
If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113.
10 Security
We use encrypted connections, hashed passwords, row-level access controls on our database, private storage with time-limited links, and admin-only access to moderation tools. No online service is completely secure, so please use a strong, unique password and tell us straight away if you think your account has been compromised.
11 Changes to this policy
We will update this policy when our practices change and show the new date at the top. If we make significant changes, we will tell members by email or in the app.