Privacy Policy

This Privacy Policy complies with the Protection of Personal Information Act (POPIA) of South Africa and applicable Namibian data protection laws. This policy governs how we collect, use, and protect your personal information.

Last Updated: 11.7.2025

1. Responsible Party (Data Controller)

The responsible party for data processing on this platform is:
UbuntuRide
UbuntuRide (Pty) Ltd (in formation)
CEO: Caroline Borggreve
Windhoek, Namibia
Contact Us

Information Officer: TBA
Contact for Privacy Matters: [TBA]

2. What Personal Information Do We Collect and Why?

2.1 Required Personal Information

For the provision of our ridesharing platform, we process the following personal information with your consent and as necessary for service provision:

  • Contact Information:
    • Email address (for account management and communication)
    • First name (for identification and communication)
    • Phone number with country code (for ride coordination and safety)
    • Gender (for safety features like women-only rides)
  • Ride-related Information:
    • Route information (departure and destination)
    • Ride preferences and requirements
    • Pricing information
    • Journey dates and times

Legal Basis: This processing is necessary for the performance of our service contract with you and is based on your consent.

2.2 Optional Personal Information

You may voluntarily provide additional information to enhance your profile:

  • Last name
  • Address
  • Country
  • Date of birth (for age verification)
  • Profile picture
  • User reviews and ratings

Legal Basis: Processing of this optional information is based on your explicit consent, which you may withdraw at any time.

2.3 Automatically Collected Information

We automatically collect certain technical information when you use our platform:

  • IP address and location data (for service provision and security)
  • Browser type and version
  • Device information
  • Usage patterns and preferences
  • Login times and session information

Legal Basis: This processing is necessary for our legitimate interests in providing a secure and functional service.

3. How We Use Your Personal Information

We use your personal information for the following purposes:

  • Service Provision: To operate the ridesharing platform and facilitate connections between drivers and passengers
  • Communication: To send service-related notifications, ride confirmations, and safety information
  • Safety and Security: To verify identities, prevent fraud, and ensure platform safety
  • Customer Support: To respond to inquiries and resolve issues
  • Legal Compliance: To comply with applicable laws and regulations
  • Service Improvement: To analyze usage patterns and improve our services (with anonymized data where possible)

4. Information Sharing and Cross-Border Transfers

4.1 When We Share Your Information

We share your personal information only in the following circumstances:

  • With Other Users: Contact information is shared between drivers and passengers only after a ride request is made and accepted
  • Service Providers: With trusted third-party service providers who assist in platform operation (subject to strict confidentiality agreements)
  • Legal Requirements: When required by law, court order, or to protect our rights and safety
  • Emergency Situations: To protect the safety of users in emergency situations

4.2 Cross-Border Data Transfers

As we operate across Namibia and South Africa, your personal information may be transferred between these countries. We ensure that:

  • All transfers comply with POPIA requirements
  • Adequate protection measures are in place
  • We have your consent for such transfers where required by law

5. Data Retention

We retain your personal information only for as long as necessary:

  • Active Accounts: Information is retained while your account is active
  • Deleted Accounts: Most personal information is deleted within 30 days of account deletion
  • Legal Requirements: Some information may be retained longer to comply with legal obligations
  • Safety Records: Safety-related information may be retained for up to 2 years for security purposes
  • Transaction Records: Ride history may be retained for 1 year for dispute resolution

6. Your Rights Under POPIA

As a data subject, you have the following rights regarding your personal information:

  • Right to Access: Request copies of your personal information
  • Right to Correction: Request correction of inaccurate or incomplete information
  • Right to Deletion: Request deletion of your personal information (subject to legal requirements)
  • Right to Object: Object to processing based on legitimate interests
  • Right to Restrict Processing: Request limitation of processing in certain circumstances
  • Right to Data Portability: Request your data in a portable format
  • Right to Withdraw Consent: Withdraw consent for voluntary data processing

How to Exercise Your Rights: Contact us at [privacy email - TBA] or through your account settings. We will respond within the timeframes required by POPIA.

Right to Complain: You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your privacy rights have been violated.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption: We use SSL/TLS encryption for data transmission and storage
  • Access Controls: Strict access controls limit who can view your information
  • Regular Monitoring: We regularly monitor our systems for security threats
  • Staff Training: Our staff receive privacy and security training
  • Incident Response: We have procedures in place to respond to data breaches

Data Breach Notification: In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by POPIA.

8. Cookies and Tracking Technologies

8.1 Essential Cookies

We use only technically necessary cookies that are essential for platform operation:

  • User authentication and session management
  • Security and fraud prevention
  • Remembering your privacy preferences
  • Platform functionality and navigation

Legal Basis: These cookies are necessary for our legitimate interests in providing a functional and secure service.

8.2 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may limit platform functionality. We do not use non-essential cookies without your explicit consent.

8.3 Third-Party Services

Google Web Fonts: We use Google Web Fonts for consistent text display. This may result in your IP address being transmitted to Google. We use this service based on our legitimate interest in providing a professional user interface.

Alternative: If you prefer not to load Google Fonts, your browser will use default fonts, which may affect the visual appearance of the site.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it immediately.

Parents or guardians who believe their child has provided information to us should contact us at [privacy email - TBA].

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

  • Notify you of material changes via email or platform notification
  • Update the "Last Updated" date at the top of this policy
  • Obtain your consent for changes that expand our use of your personal information
  • Provide 30 days' notice for significant changes

11. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

Privacy Officer: TBA
Contact Us
Postal Address:
UbuntuRide (Pty) Ltd (in formation)
Windhoek, Namibia

Information Regulator (South Africa):
If you believe your privacy rights have been violated, you may contact:
Information Regulator (South Africa)
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg/

12. Consent

By using our platform, you consent to the collection, use, and processing of your personal information as described in this Privacy Policy. You may withdraw your consent at any time by:

  • Deleting your account
  • Contacting us to opt out of specific processing activities
  • Adjusting your privacy settings in your account

Note: Withdrawal of consent may limit your ability to use certain platform features.