Privacy Policy

1 · What we collect

To operate rentals we collect: contact details (name, phone, email), verification documents (driver’s licence, government ID, utility bill), booking and payment records, and — for chauffeured trips — trip location data while the trip is active.

Payments are processed by Paystack; your card details never touch our servers.

2 · Why we collect it

Verification protects the fleet and every future renter. Booking history powers your dashboard and receipts. Trip tracking exists for your safety and dispute resolution and is retained for 90 days, then deleted.

3 · What we never do

We do not sell personal data. We do not share documents with third parties except as required by law or to process an insurance claim you are party to. Marketing messages are opt-in and every one carries an opt-out.

5 · Lawful basis and the controller

Keyhaven Drive, 15 Aare Bashiru Street, Oral Estate, Lekki, Lagos, Nigeria, is the data controller under the Nigeria Data Protection Act 2023. We process your data on three bases: performance of the rental contract (bookings, payments, handover), legal obligation (financial record-keeping, verification of drivers), and legitimate interest (fleet protection and fraud prevention). Data-protection requests go to [email protected].

6 · Cookies

This site sets exactly one cookie: an essential, httpOnly session cookie that keeps you signed in. It is strictly necessary for the service, contains no tracking identifiers, and is never shared. Because we use no advertising or cross-site tracking cookies, no consent banner is required — if that ever changes, consent will be asked first.

7 · Retention and security

Account and booking records are kept while your account is active; financial records for the period Nigerian tax law requires; verification documents no longer than 12 months after your last rental; trip locations 90 days. Passwords are stored only as salted bcrypt hashes, sessions are server-side and revocable, and access to personal data is role-restricted with an audit trail.

8 · Your rights

Under the NDPA you may request access to your data, correction of inaccuracies, deletion of what we are not legally required to retain, and objection to legitimate-interest processing. Write to [email protected] — we respond within 30 days. If unsatisfied, you have the right to lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng).