SimpliRide Privacy Policy

1. Introduction

Welcome to SimpliRide! We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services.

We process personal data in compliance with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, international regulations such as the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Personal Information Protection and Electronic Documents Act (PIPEDA)

2. Information We Collect

• Personal Information: We collect information that you provide when registering for an account, such as your name, email address, phone number, and payment method details. We also collect information when you request a ride, including your pickup and drop-off locations.
• Location Information: To facilitate your transportation requests, we collect precise location data from your device, which includes GPS coordinates and other related information necessary for arranging transportation.
• Device Information: We gather information about the devices you use to access our services, such as hardware models, operating system versions, software, mobile network information, and unique device identifiers.
• Usage and Preference Information: We monitor how you interact with our services, which helps us tailor and improve the features we offer. This includes preferences you set for notifications and how you navigate through our app.

3. Lawful Basis for Processing

We process personal data based on:

• Contractual necessity (to provide rides)
• Consent (marketing, optional features)
• Legal obligations
• Legitimate interests (fraud prevention, service improvement)

4. How We Use Your Information

• Service Provision: To manage your account, provide transportation services, process payments, and communicate with you regarding your rides and any changes to our services.
• Improvement and Personalization: To improve and personalize your experience, understanding your preferences and service history to make better recommendations and update our services
• Safety and Security: To ensure the safety and security of our services for all users, which includes verifying user identity and conducting necessary background checks.
• Legal and Regulatory Compliance: To comply with applicable laws and regulations, which may include providing information to regulators and law enforcement agencies

5. Data Sharing

With Service Providers: We share your information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, and marketing and advertising services.

With Other Users: Depending on your settings, your location and status of a ride may be shared with other users to facilitate ride-sharing arrangements

For Legal Reasons: We may share your information when required by law, such as in response to legal processes or to protect our rights, customers, or others' safety.

6. Content

We implement strong security measures designed to protect your information against unauthorized access, alteration, or destruction. These measures include encryption of data in transit and at rest, regular security assessments, and security training for our staff.

7. Cross-Border Transfers

Your data may be transferred and stored outside Nigeria. Where such transfers occur, we implement appropriate safeguards, including contractual protections and internationally recognized transfer mechanisms.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

Active Users: We retain personal data for as long as your account remains active and you continue to use our services.

Inactive Accounts: Where an account becomes inactive for a prolonged period, we may retain your data for a limited duration to allow account reactivation, comply with legal obligations, and ensure service continuity. Thereafter, we will securely delete or anonymize such data.

Transaction Data: Certain information, such as transaction and payment records, may be retained for longer periods where required to comply with applicable legal, tax, audit, or regulatory requirements.

Location Data: Location data is retained only for as long as necessary to support service delivery, safety, dispute resolution, and regulatory compliance.

Deletion and Anonymization: When personal data is no longer required, we will securely delete, anonymize, or de-identify it in accordance with applicable laws and industry standards.

9. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data.

10. Data Breach Notification

In the event of a data breach, we will notify affected users and regulators as required by applicable law.

11. Disclaimers

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. This includes retaining information to comply with legal, tax, audit, and accounting requirements

12. Children's Privacy

Our services are not intended for individuals under 18, and we do not knowingly collect data from minors.

13. Your Privacy Rights (NDPA & Global Rights)

In accordance with the Nigeria Data Protection Act 2023 and, where applicable, international data protection laws such as the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights regarding your personal data:

• Right of Access – to request access to the personal data we hold about you.
• Right to Rectification – to request correction of inaccurate or incomplete data.
• Right to Erasure – to request deletion of your personal data, subject to legal and contractual limitations
• Right to Restrict Processing – to request limitation of how your data is processed in certain circumstances
• Right to Object – to object to processing based on legitimate interests or for direct marketing purposes
• Right to Data Portability – to request transfer of your data in a structured, commonly used format
• Right to Withdraw Consent – to withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint – to file a complaint with a relevant data protection authority
• Right to Non-Discrimination – not to be denied services or treated unfairly for exercising your rights
• Right to Challenge Compliance – to raise concerns about our data handling practices with our designated Privacy Officer

To exercise any of these rights, please contact us at: privacy@simpliride.com

We may require verification of your identity before processing your request and will respond within the timeframe required by applicable law.

Sensitive personal information (such as precise location data) is used only as necessary to provide services and is not used for unrelated purposes.

You may also designate an authorized agent to make requests on your behalf.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or any other relevant supervisory authority in your jurisdiction.

14. Trip Recording

For the safety and security of our Riders and Drivers, SimpliRide provides a trip-recording feature which may be activated by either the Rider or Driver during a trip.

Purpose of Trip Recording

The trip-recording feature is provided to enhance the safety, security and transparency of our platform and to assist in addressing incidents or concerns arising from trips.

Where the feature is activated, the trip recording may be used for purposes including:

• investigating safety or security incidents;
• investigating complaints or disputes between Riders and Drivers;
• investigating suspected fraud, misconduct, abuse or unauthorised activity;
• resolving disputes or other issues arising from a trip;
• protecting the rights, safety and property of Riders, Drivers and SimpliRide; and
• complying with applicable legal, regulatory or law-enforcement requirements.

The information obtained through the trip-recording feature will only be processed for legitimate and specified purposes connected with the safety, security and operation of the SimpliRide platform.

Storage and Access

Trip recordings are securely stored and controlled by SimpliRide and are subject to appropriate technical and organisational measures designed to protect them against unauthorised access, alteration, disclosure, loss, destruction or other unlawful processing.

Access to trip recordings is restricted to authorised SimpliRide personnel who have a legitimate need to access the information for purposes such as investigating or resolving a safety incident, complaint, dispute, fraud, misconduct or other legitimate security or operational matter.

Trip recordings are securely stored by SimpliRide and may be accessed by the Rider or Driver concerned where the recording relates to their trip, particularly where it is required in connection with a safety or security incident, complaint, dispute, fraud, misconduct or other legitimate matter arising from the trip.

SimpliRide may also provide access to or disclose relevant trip recordings to authorised persons or entities, including law-enforcement authorities, regulators, courts, professional advisers, insurers or other persons where such access or disclosure is necessary for a legitimate purpose or is permitted or required by applicable law.

Access to trip recordings by persons who are not directly concerned with the relevant trip will be restricted and subject to applicable data-protection requirements.

Retention of Trip Recordings

SimpliRide will retain trip recordings for 90 days from the date of the relevant trip, after which they will be automatically deleted where there is no lawful or legitimate reason for continued retention.

The 90-day retention period is based on SimpliRide's safety and security requirements and is intended to ensure that trip recordings remain available for a reasonable period where an incident, complaint or other concern is subsequently reported.

Where a trip recording is relevant to an ongoing safety or security incident, complaint, dispute, fraud investigation, misconduct investigation, legal claim, regulatory matter or other legitimate investigation, SimpliRide may retain the relevant recording for as long as reasonably necessary to resolve or address the matter or comply with a legal or regulatory obligation.

Once the applicable retention period expires and there is no lawful basis for continued retention, the trip recording will be securely deleted or otherwise permanently rendered inaccessible.

Disclosure and Transfer

SimpliRide will not disclose trip recordings except where such disclosure is necessary for a legitimate purpose or is permitted or required by applicable law.

Where a third-party service provider is engaged by SimpliRide to store, process or support the management of trip recordings, such provider will process the information in accordance with SimpliRide's instructions and applicable data-protection requirements, and will be subject to appropriate contractual and security safeguards.

Where trip recordings or personal data derived from them are transferred outside Nigeria, SimpliRide will ensure that such transfer is carried out in accordance with the applicable requirements of the Nigeria Data Protection Act 2023 and that appropriate safeguards are in place to protect the personal data.

Notification

A short notice may also be displayed within the App to remind Riders and Drivers of the availability and purpose of the trip-recording feature and may be activated by either party during a trip.

Data Protection Rights

Riders and Drivers retain their applicable rights under the Nigeria Data Protection Act 2023 in relation to their personal data processed through the trip-recording feature.

Requests relating to access to, correction of, or other applicable rights concerning personal data processed through the trip-recording feature may be made through SimpliRide's established privacy or data-protection channels.

15. Changes to Policy

We may update this policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes and post the updated policy on our platform.

16. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us at privacy@simpliride.com. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.

By using SimpliRide, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy