Privacy Policy

A. Introduction

This Data Privacy and Protection Policy (the "Privacy Policy") describes your privacy rights regarding RIDEFLOW LIMITED's ("we", "the Company", "us", or "our") collection, use, storage, sharing, transfer, and protection of your personal identifiers, network activity information, professional data, location information, and other types of information. It applies to our platform, website, and all related sites, applications, services, and tools (the "Services"), regardless of how you access or use them.

This Privacy Policy covers all systems, operations, and processes within our environment that involve the collection, storage, use, transmission, and disposal of Personal Information (as defined below). It is provided to help you understand what information we collect from you, how we use it, how we safeguard it, the legal grounds upon which we process it, and the rights you have in relation to your personal information. This Policy applies solely to the Services provided by RIDEFLOW LIMITED and does not extend to third-party platforms or services not controlled by us. We are committed to handling all personal data provided to us in compliance with applicable laws and best practices, including the Nigeria Data Protection Regulation (NDPR), Nigeria Data Protection Act 2023 (NDPA), and, where appropriate, elements of international frameworks such as the General Data Protection Regulation (GDPR).

B. The Information We Collect

1. Personal Information

As part of our operations, we collect and process certain types of information that identify you. To use our Services, you voluntarily provide us with Personal Information, which may include both direct identifiers and information that, while anonymized initially, can later be associated with you (for example, IP addresses). We may collect the following information:

• Name, username, gender, and date of birth
• Email address, postal address, and telephone number
• Interests and other personal details you choose to provide
• Any other information that may be required to deliver our Services

We use your personal information to:

• Administer your accounts and process orders or applications
• Send you details about our products and services, including important updates and changes to terms or policies
• Carry out marketing analyses and improve our website and Services
• Obtain your views or comments on our Services
• Plan promotional activities and deliver tailored marketing communications (for non-essential communications, we obtain your explicit consent beforehand)
• Personalize your experience on our site
• Allow you to apply for and evaluate your eligibility for various products or services (including hire purchase, staffing, etc.)
• Verify your identity and/or location for live feedback to ensure satisfactory work performance
• Support business purposes such as data analysis, audits, product development, and risk management
• Comply with legal obligations, including law enforcement requirements, when necessary
• Access additional data from trusted third-party verification or identification services where required and with your consent

In addition, we record details of your activities and other interactions with our Services once you begin using our platform. We will not share or disclose your Personal Information to any third party without your consent, except as required to provide the Services or as mandated by applicable legislation.

2. Information from Platform Visitors

When you visit our website or platform, we collect only the Personal Information for which you have given explicit consent. For monitoring and improving our platform and Services, we also collect non-personally identifiable information. This information is used solely for purposes such as customizing advertisements and enhancing user experience and will not be shared with third parties except as necessary for providing our Services.

3. Purpose Limitation

We collect and process Personal Information solely for the purposes explicitly identified at the time of collection. Such data will not be reused for any other purpose that is materially incompatible with the original purpose, unless further consent is obtained.

4. Data Processing Principles

Your personal data will be:

• Collected and processed only for specific, legitimate, and lawful purposes with your consent when required
• Maintained in an accurate and up-to-date form
• Stored only for the period during which it is reasonably necessary or as required by law, after which it will be securely disposed of or anonymized using appropriate security measures
• Secured against foreseeable risks, including theft, cyberattack, unauthorized disclosure, loss, or accidental damage caused by physical or natural hazards

5. Data Minimization

We limit the collection and retention of Personal Information to only that which is relevant, necessary, and adequate for fulfilling the stated purposes. Where possible, anonymized data may be used to further reduce risks associated with retention of directly identifiable data.

6. Cookies and Automated Data Collection

A "cookie" is a string of information which assigns you a unique identifier that we store on your computer. We use cookies to recognize you as a User and improve your experience on our Services. Cookies help us to customize content, secure your account and track website usage. In this regard, Essential Cookies are necessary to enable the basic functionalities of the website and to secure your access.

Non-Essential Cookies are used for advertising, analytics, and personalization. We will obtain explicit consent from you before deploying non-essential cookies.

Cookies do not store personal or sensitive information directly. If your browser allows, you may disable cookies; however, please note that doing so may affect your overall experience with our Services.

C. Information Automatically Collected from Your Computer

Our servers, as well as those of our third-party service providers, automatically collect certain technical information when you access our Services, including:

• Log Files/IP Addresses: When you visit the website, our servers record your IP address solely for administrative and analytical purposes without linking it directly to any personal data.
• Other Technologies: Pixel tags, web beacons, and similar tools may be used on our websites and emails to gauge the effectiveness of our communications and marketing campaigns.
• Aggregated and De-identified Data: We compile non-personal data from various sources to support market analysis and business intelligence without identifying individual Users.
• Device Information: Certain data (such as device type, screen resolution, operating system version, MAC address, and browser type) is collected automatically by your browser or device.

D. Acceptable Use

The Personal Information we collect is used for business purposes such as operating, improving, and developing our services, verifying user identities, billing, and communicating technical and security updates. It is also used to comply with legal requirements (e.g., tax reporting) and to respond to your inquiries and customer support requests.

E. How We Share the Personal Information You Provide

We do not sell, trade, or rent your Personal Information. However, to deliver our Services effectively, we may share your information with trusted third parties. These include:

• Service Providers: Partners such as financial institutions, payment processors, identity verification, and compliance services who are bound by contractual obligations to protect your data.
• Authorized Recipients: Any third parties to whom you have expressly authorized us to disclose your Personal Information.
• Legal and Regulatory Requests: Entities such as law enforcement, public, or tax authorities, when required by law.

F. Transfer of Personal Information

Third-Party Processors within Nigeria

We may engage third-party processors to handle Personal Information on our behalf. Such processors are under contract with us and are required to implement appropriate safeguards to protect your data in line with this Privacy Policy.

Transfer of Personal Information to Foreign Countries

In instances where Personal Information is transferred outside Nigeria, we ensure that appropriate legal mechanisms are in place. Transfer of Personal Information out of Nigeria would be in accordance with the provisions of the Nigeria Data Protection Act 2023 ("NDPA"), and other applicable data protection laws.

We will only transfer Personal Information out of Nigeria on one of the following conditions:

• The consent of the Data Subject has been obtained
• The transfer is necessary for the performance of a contract between us and the Data Subject
• The transfer is necessary to conclude a contract between us and a third party in the interest of the Data Subject
• The transfer is necessary for reason of public interest
• The transfer is for the establishment, exercise or defense of legal claims
• The transfer is necessary in order to protect the vital interests of the Data Subjects or other persons

G. Our Lawful Basis for Processing Personal Information

We process your Personal Information only as permitted by the NDPA and other applicable laws. Our processing is founded on one or more of the following legal bases:

• Where you have given a clear, affirmative indication of consent for specific processing activities
• When processing is necessary for the performance of a contract to which you are a party
• Where processing is required by law
• When processing is needed for our legitimate business purposes, provided this does not override your fundamental rights
• In exceptional cases, processing is necessary to protect your vital interests or those of another person

H. Advertisement and Information About Other Products and Services

From time to time, we may send you information about other products and services offered by the Company, which we believe may be of interest to you.

You may request to opt-out or stop receiving such communications by contacting us at info@rideflow.org

I. Choices and Rights

Once your Personal Information is collected by us, you have the following rights:

If you wish to exercise any of these rights, please contact us at info@rideflow.org. We aim to process your request within 30 days of receipt.

J. Age Restriction

Our Services are not directed to children under 18 years of age. We do not knowingly collect information from children under 18. If you access our Services and are under 18, you confirm that you have obtained consent from your parent(s) or legal guardian(s). If you have inadvertently provided personal data of a child to us, please notify us immediately at info@rideflow.org so that we can delete such data.

K. Compliance with Local and International Regulatory Best Practices

We confirm our compliance with Nigerian data protection requirements as set forth in the NDPA, NDPR, and other applicable laws. In addition, we incorporate best practices from international frameworks, such as the GDPR, in so far as they do not conflict with Nigerian law.

L. Changes to Privacy Policy

We reserve the right to update, modify, change, or revise this Privacy Policy from time to time due to changes in law or business practices. The revised Policy will be effective immediately upon posting. We encourage you to check this page regularly for any updates.

M. Complaints and Remedies

If you believe any part of this Privacy Policy or our data handling practices have violated your privacy rights, you may file a complaint with us at info@rideflow.org.

Additionally, you have the right to lodge a complaint with the data protection authority, the Nigeria Data Protection Commission (NDPC), using the following contact details:

• Address: No. 12, Clement Isong Street, Asokoro, Abuja, Nigeria
• Email: info@ndpc.gov.ng

In the event of any data breach, we will notify you promptly and report to the NDPC within 72 hours of becoming aware of the breach.

N. Questions and Enquiries

If you have any questions, comments, or requests regarding this Privacy Policy or if you would like further information on exercising your rights, please contact our Data Protection Officer at info@rideflow.org.