Privacy Policy

1 · What we collect

To operate rentals we collect: contact details (name, phone, email), verification documents (driver’s licence, government ID, utility bill), booking and payment records, and, for chauffeured trips, trip location data while the trip is active.

Payments are processed by Paystack; your card details never touch our servers.

2 · Why we collect it

Verification protects the fleet and every future renter. Booking history powers your dashboard and receipts. Trip tracking exists for your safety and dispute resolution and is retained for 90 days, then deleted.

3 · What we never do

We do not sell personal data. We do not share documents with third parties except as required by law or to process an insurance claim you are party to. Marketing messages are opt-in and every one carries an opt-out.

5 · Lawful basis and the controller

Keyhaven Drive, 15 Olawale Fakorede street, Oral Estate, Ikota Lekki, Lagos, Nigeria, is the data controller under the Nigeria Data Protection Act 2023. We process your data on three bases: performance of the rental contract (bookings, payments, handover), legal obligation (financial record-keeping, verification of drivers), and legitimate interest (fleet protection and fraud prevention). Data-protection requests go to [email protected].

6 · Cookies

This site sets exactly one cookie: an essential, httpOnly session cookie that keeps you signed in. It is strictly necessary for the service, contains no tracking identifiers, and is never shared. Because we use no advertising or cross-site tracking cookies, no consent banner is required. If that ever changes, consent will be asked first.

7 · Retention & Security

Account and booking records are retained while your account remains active. Financial records are retained for the period required by Nigerian tax law. Verification documents are retained for no longer than 12 months after your last rental, while trip location data is retained for 90 days.

Passwords are stored securely using salted bcrypt hashes. Sessions are server-side and revocable, and access to personal data is restricted according to user roles and protected by an audit trail.

8 · Your Rights

Under the Nigeria Data Protection Act (NDPA), you have the right to request access to your personal data, correct inaccurate information, and request deletion of data that we are not legally required to retain. You may also object to the processing of your personal data based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 7days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).