Legal

1. General Information and Information about Nova Rides Limited

Nova Rides Limited (“Nova Rides”) is a technology-enabled peer-to-peer car sharing platform that connects private vehicle owners (“Hosts”) with verified individuals seeking short-term vehicle hire (“Guests”). Nova Rides is committed to safeguarding your privacy by protecting your personal data in accordance with the applicable data protection laws. This Privacy Policy sets out how Nova Rides collects, uses, processes and protects your personal information when you access or use our services through our website or mobile application (the “Platform”).

References in this policy to “we”, “us” or “Company” are references to Nova Rides. References to “you” in this policy refers to any natural person who are our Data Subjects (Hosts, Prospective Hosts, Guests, Prospective Guests, Partners, Employees, Prospective Employees, Client, Prospective Client, Vendors and Visitors) who visit our Platform.

The provisions of this Privacy Policy and the applicable data protection law will apply when we indirectly take your personal data from other sources for our own purposes.

By using our Platform, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Our Rules of Data Processing

We process your data in line with the applicable data protection laws and we ensure that your personal data is:

1. processed and collected for legitimate purposes for specific purposes and processed further if necessary for the purposes;
2. processed in a fair, lawful and transparent manner;
3. secured against breaches including unauthorized or unlawful processing and cyberattack;
4. retained for such period for which it is reasonably needed.

3. How your Personal Data is collected

The personal data collected depends on how you use and access our Platform. We collect personal data in the following categories:

a. Information You Provide: When you register for an account (as a Guest or Host), book a vehicle, list a vehicle, or communicate with us, we may collect:

• Full name
• Date of birth
• Residential address
• Email address
• Phone number
• Government-issued identification documents
• Driver’s license details
• Vehicle registration and ownership documents
• Profile photos
• Payment information
• Insurance information
• Emergency contact information
• Vehicle Data including location data, trip duration, vehicle mileage and other related information

b. Information Collected Automatically through automated technologies: When you visit our Platform or engage with us through any of our other data collection or exchange medium, we may automatically collect:

• IP address
• Device information
• Browser type
• Operating system
• GPS location data/tracking
• Usage data
• Search and booking history
• Log files and diagnostics information
• Cookies and similar technologies

c. Third Parties Sources: We may collect your personal data from publicly available verifiable sources.

4. Why we may use your personal data

We use your personal data for our various business functions. We use your information to:

1. Create and manage user accounts
2. Verify identities and driver’s licenses
3. Facilitate vehicle rentals and bookings
4. Facilitate vehicle pick up and return
5. Process payments and refunds
6. Prevent fraud and unauthorized activity
7. Improve our services and user experience
8. Provide customer support
9. Communicate updates and important notices
10. Comply with legal obligations
11. Investigate accidents, claims, and disputes
12. Monitor location of vehicle to prevent theft and fraud
13. Enforce our Terms of Service

5. Processing of data by third parties

a. Host and Guests verification process — We may engage third party verification providers/systems to perform background checks and verification for Hosts and Guests before rentals.

b. Payment Processing — All Payments made through our Platforms are processed by authorized third-party payment processors. The payment processors are responsible for securely handling payment information in accordance with applicable industry standards and we do not store your payment card information on our Platform.

c. General third-party links — Our Platform may also contain links to third-party websites or services. We are not responsible for the privacy practices or content of third-party websites.

d. International Data Transfers — Your information may be processed and stored in countries other than your country of residence. By using the Platform, you consent to such transfers where permitted by law.

6. Sharing of Information

We may share information with:

a. Other Users — Hosts and Guests may receive limited information necessary to complete a booking, including:

• First name
• Profile photo
• Vehicle details
• Booking information
• Ratings and reviews

b. Service Providers — We may share information with:

• Payment processors
• Cloud hosting providers
• Insurance providers
• Identity verification providers
• Customer support vendors
• Analytics providers
• Other related and relevant service providers

c. Legal and Regulatory Authorities — We may disclose information when required to:

• Comply with applicable laws
• Respond to court orders
• Cooperate with law enforcement
• Protect our rights and property
• Prevent fraud or safety threats

d. Related Parties — If we are involved in a merger, acquisition, investment, restructuring, or sale of assets, user information may be transferred as part of that transaction.

7. Your Rights as a Data Subject

As a Data Subject, you have a number of rights under the applicable data protection law in relation to your personal data. You have the right to:

1. Be informed on how we process your personal data
2. Request access to your personal data
3. Request correction of the personal data we hold about you
4. Request deletion or removal of personal data where there is no good reason for continuous processing
5. Object to processing of your personal data
6. Request the transfer of your personal data to you or to a third party
7. Withdraw consent for the process your personal data

To exercise these rights, contact us using the information provided under the Contact Information.

8. Data Security

We take reasonable steps and have put appropriate security measures in place to hold information securely in electronic or physical form and to prevent unauthorised access, modification, disclosure or accidental loss. All personal data is limited to employees, agents and other third parties strictly on a need-to-know basis and are subject to confidentiality obligations. We maintain administrative and technical designed to protect your personal data. We protect against loss or theft, as well as against any unauthorised access, risk of loss, disclosure, copying, misuse, or modification. Some of the security measures we may implement includes secure servers, firewalls, data encryption and granting access only to specific employees in order to fulfil their job responsibilities.

9. Data Retention

We will only retain personal information for as long as the information is needed for the purposes under this Policy or for any additional period as may be required or permitted by the applicable laws. Your personal data may be retained to:

1. Provide services
2. Maintain legal and regulatory compliance
3. Resolve disputes
4. Enforce agreements
5. Prevent fraud and abuse

Retention periods may vary depending on the type of information and applicable legal requirements. In some circumstances, where we may wish to use your data for research or statistical purposes, we will anonymise your personal data so that it can no longer be associated with you in which case we may use this information indefinitely without further notice to you.

10. Data Security

We take reasonable steps and have put appropriate security measures in place to hold information securely in electronic or physical form and to prevent unauthorised access, modification, disclosure or accidental loss. In addition, we limit access to your personal data to employees, agents, contractors and other third parties on a need-to-know basis. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We store information in our electronic databases requiring logins and passwords. Also, we require our third-party data storage providers to comply with appropriate information security industry standards. All employees and third-party providers with access to confidential information are subject to our confidentiality obligations.

We maintain administrative, technical, and physical controls designed to protect your Personal Data. We protect against loss or theft, as well as against any unauthorised access, risk of loss, disclosure, copying, misuse, or modification. Some of the security measures we may implement includes secure servers, firewalls, data encryption and granting access only to specific employees in order to fulfil their job responsibilities.

11. Marketing Communications

From time to time, we may send:

1. Promotional offers
2. Service updates
3. Product announcements
4. Marketing communications

You may opt out of marketing communications at any time by following the unsubscribe instructions or contacting us directly.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

1. Authenticate users and protect sessions
2. Operate core booking and security features
3. Remember optional preferences when you allow Functional cookies
4. Support first-party share attribution when you allow Marketing cookies
5. Improve performance and reliability of the Platform

Nova Rides does not currently load third-party analytics or advertising pixels in the browser. An Analytics category is available in Cookie settings for future use and will not activate tools until you consent. You can manage optional cookie categories through Cookie settings on the Platform (also linked from the website footer), or through your browser settings. Strictly necessary cookies are required for the Platform to function. Details of the cookies we use are set out in our Cookie Policy.

13. Children/Persons with legal disability’s data privacy

Nova Rides is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors’ and other individuals within this category. If you believe that we have collected such data, please contact us through the contact details under the Contact Information and we will take appropriate steps.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When material changes are made, we will notify users through the Platform, email, or other appropriate means. Continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Nova Rides Limited

Email: privacy@novarides.ng