Privacy Policy

1. Scope

This Privacy Policy explains how Limpopo Auto Mobile Ride Nigeria Limited, trading as Limpopo Ride (“Limpopo Ride,” “we,” “us,” or “our”), collects, uses, shares, and protects personal data when you:

• visit our website at www.limpoporide.com;
• use the Limpopo Ride mobile application(s), including the Rider App and the Driver App (together, the “App”); or
• otherwise interact with us as a rider, driver, corporate client, or other user of our premium car hire and chauffeur services (the “Services”).

This policy applies to riders, prospective and active drivers, corporate account users, and website visitors. It does not apply to information we process purely on behalf of a corporate client under a separate agreement, which is governed by that agreement.

Limpopo Ride’s Services are intended for individuals aged 18 and above and are not directed at children.

2. Who We Are

Limpopo Ride’s Services are provided by:

For the purposes of the Nigeria Data Protection Act, 2023 (“NDPA”), Limpopo Auto Mobile Ride Nigeria Limited is the data controller for personal data processed through the website and App.

3. Contacting Us About Privacy

For any question about this policy or how we handle your personal data, contact us at info@limpoporide.com or through the general contact details above. Depending on the scale of our data processing, we may be required under the NDPA to appoint a Data Protection Officer (DPO); once appointed, their contact details will be added here.

4. The Legal Framework Behind This Policy

This policy is written to align with Nigeria’s federal data protection and consumer regulatory framework, principally:

• The Nigeria Data Protection Act, 2023 (NDPA) and the General Application and Implementation Directive (GAID) 2025 issued by the Nigeria Data Protection Commission (NDPC), which together form Nigeria’s primary data protection law and set out lawful bases for processing, data subject rights, breach notification, and cross-border transfer rules.
• The Federal Competition and Consumer Protection Act, 2018, which established the Federal Competition and Consumer Protection Commission (FCCPC) and gives it oversight of fair dealing, transparency, and consumer redress for platforms like ours, including app-based transport services.
• Central Bank of Nigeria (CBN) regulations governing electronic payments and consumer protection in financial services, relevant to how fares are processed and how card data is handled.
• The National Identity Management Commission (NIMC) Act, 2007, relevant to how we verify a driver’s National Identification Number (NIN) as part of onboarding.
• Nigerian Communications Commission (NCC) regulations governing telecommunications and SIM registration, relevant to how phone numbers are verified and used for SMS one-time passwords (OTPs).
• Where applicable, state-level transport and e-hailing regulations (for example, Lagos State’s licensing requirements for app-based transportation operators), which govern our operating permits rather than data protection specifically, but which may require us to share limited driver and vehicle data with state transport authorities.

Where this policy refers to a “lawful basis,” it means one of the bases recognised under the NDPA: your consent, the performance of a contract with you, compliance with a legal obligation, protection of a vital interest, performance of a task in the public interest, or our (or a third party’s) legitimate interest, balanced against your rights.

5. Data Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, or misuse, proportionate to the sensitivity of the data involved. This includes encrypting data in transit between your device and our systems, restricting internal access to personal data on a need-to-know basis, and requiring our vendors and processors to maintain comparable safeguards under written agreements.

No system is completely secure. If you contact us by email, please avoid sending sensitive information (such as full card numbers or identity documents) unless we have asked you to do so through a secure channel.

6. Personal Data We Collect

6.1 Account and profile data. Name, phone number, email address, password (stored in hashed form), profile photo, and, for corporate accounts, company name and billing contact.

6.2 Ride and trip data. Pickup and drop-off locations, requested vehicle tier, trip date and time, route, duration, fare, special requests, and trip status.

6.3 Location data. Real-time GPS location from your device while the App is in use, used to match you with a driver, calculate routes and fares, and support safety features. See Section 9.

6.4 Payment data. Card details are collected and stored by our payment processor, BudPay, not by Limpopo Ride directly. We retain limited payment metadata, such as the last four digits of a card, transaction reference, amount, and status, for receipts, reconciliation, and fraud review.

6.5 Communications data. Messages you send to customer support, call recordings or notes from support calls (where applicable), and your marketing preferences.

6.6 Device and usage data. IP address, device model and operating system, App version, crash logs, and general usage patterns, collected automatically when you use the website or App.

6.7 Driver-specific data. For drivers and prospective drivers: full name, date of birth, phone number, residential address, National Identification Number (NIN), driver’s licence details, vehicle registration and particulars, passport photograph, bank account details for payouts, and, where required for onboarding, information relevant to a background or reference check. Driver’s licence and NIN are categories of data that receive heightened protection under the NDPA, and we collect them only to verify identity and eligibility to drive, and only to the extent our onboarding process requires.

6.8 Corporate and partner data. For hotel, corporate, and travel-partner accounts: business contact details, billing information, and trip data relating to bookings made under that account.

We do not knowingly collect more personal data than is reasonably necessary for the purpose it is collected for.

7. How We Use Personal Data

8. Cookies and Similar Technologies (Website)

Our website uses cookies and similar technologies that are strictly necessary for the site to function (for example, remembering your session), and, where you consent, cookies that help us understand site usage or measure the effectiveness of our marketing. You can manage or withdraw cookie consent through your browser settings or, where available, a cookie preference tool on the website. Disabling non-essential cookies will not affect your ability to browse the site, but may limit some personalised features.

9. Location Services

The App requests access to your device’s location so that we can show nearby availability, match you with a driver, calculate accurate routes and fares, and support in-app safety features such as live trip tracking. You can control location permissions through your device settings at any time; declining or later revoking location access may prevent the App from functioning as intended, since matching and navigation depend on it.

For drivers, location is also used to track trip progress, calculate driver earnings, and support dispute resolution between riders, drivers, and Limpopo Ride.

10. Payments and Fraud Prevention

Fares are processed through BudPay, a Central Bank of Nigeria (CBN) licensed Payment Solution Service Provider that maintains PCI DSS compliance for handling card data. Limpopo Ride does not store full card numbers. We may retain transaction metadata (amount, status, last four digits, reference number) to issue receipts, reconcile accounts, and investigate suspected fraud, and we may share limited data with BudPay or with a fraud-prevention partner where necessary to verify that a payment method is being used by its rightful owner.

Corporate accounts billed on a monthly-invoice basis are handled separately, using the billing contact and company data provided at account setup.

11. Verification Messages and Push Notifications

We use Twilio to deliver one-time passwords (OTPs) by SMS when you register or log in, so that we can confirm the phone number belongs to you. Your mobile network operator will also process your phone number to deliver these messages, consistent with NCC telecommunications regulations.

We use Firebase (provided by Google) to deliver push notifications, support account authentication, and monitor app performance and crash reports. This may involve transferring limited technical data outside Nigeria; see Section 14.

12. Ratings, Reviews, and Safety Features

Riders and drivers can rate each other after a trip. Ratings are used to maintain service quality and are visible to Limpopo Ride, and, in aggregate or anonymised form, may be shared with the other party. We do not display your name alongside a rating to the party being rated.

Where the App offers safety features such as an SOS button, trip sharing with a trusted contact, or live trip tracking, using these features will share limited trip and location data with the people or parties you choose, and, where safety requires it, with Limpopo Ride’s support team or the relevant authorities.

13. How We Share Personal Data

We share personal data only where necessary for the purposes described in this policy:

With drivers and riders. A driver receives the rider’s pickup location, destination, and first name to complete a trip. A rider receives the assigned driver’s first name, photo, vehicle details, and live location during a trip.

With service providers acting on our behalf (data processors). We use vendors who process personal data under our instructions and, where applicable, a written data processing agreement:

With corporate and hotel partners. For bookings made under a corporate or hotel account, we share the trip data necessary for billing and service delivery with that partner’s authorised contacts.

With regulators and authorities. We may disclose limited data to state transport regulators, airport authorities (for example, in connection with any authorised airport pickup operation), law enforcement, or the NDPC, where required by law or a valid legal process, or where necessary to protect the safety of a rider, driver, or the public.

In a business transfer. If Limpopo Ride is involved in a merger, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this policy or a successor policy.

We do not sell personal data to third parties.

14. International Data Transfers

Some of our service providers (for example, Google/Firebase and Twilio) may process data on servers located outside Nigeria. Where we transfer personal data outside Nigeria, we do so only where the destination offers an adequate level of data protection, or where appropriate safeguards, such as standard contractual clauses, are in place, consistent with the NDPA’s cross-border transfer requirements. We document the basis for each such transfer.

15. How Long We Keep Data

We retain personal data only for as long as necessary for the purposes it was collected for, including:

• Account data: for as long as your account is active, and for a limited period after closure to handle disputes or legal claims.
• Trip and payment records: for the period required by Nigerian tax and commercial record-keeping obligations.
• Driver eligibility documents: for as long as the driver is active on the platform, and for a limited period afterward as required by law or to defend a legal claim.
• Marketing preferences: until you unsubscribe or withdraw consent.

Where data is no longer needed, we securely delete or anonymise it.

16. Marketing Communications

Where you have agreed to receive them, we may send you offers, service updates, or newsletters by email, SMS, or in-app notification. You can opt out at any time using the unsubscribe link in an email, by replying STOP to an SMS, adjusting your in-app notification settings, or contacting us directly. Opting out of marketing does not affect essential service messages, such as trip confirmations or OTPs.

17. Children’s Privacy

Our Services are not directed at children, and we do not knowingly collect personal data from anyone under 18. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete it.

18. Your Rights Under the NDPA

Subject to certain conditions and exceptions under the NDPA, you have the right to:

• Be informed about how your personal data is processed (this policy is part of how we meet that obligation).
• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data where there is no compelling reason for us to keep it.
• Restrict how we process your data in certain circumstances.
• Receive a copy of the data you provided to us in a structured, commonly used, machine-readable format (data portability).
• Object to processing based on our legitimate interest.
• Withdraw consent at any time, where consent is the basis for processing, without affecting the lawfulness of processing carried out before the withdrawal.
• Lodge a complaint with us directly, or with the Nigeria Data Protection Commission, if you believe your rights have been infringed.

To exercise any of these rights, contact us using the details in Section 3. We may need to verify your identity before acting on a request, and some requests may be limited where we have a legal obligation or overriding legitimate interest to continue processing the data.

19. Automated Decision-Making

Certain features of the App, such as matching you with the nearest available driver or estimating a fare, rely on automated processing. These do not produce a legal or similarly significant effect that would trigger the NDPA’s protections against solely automated decision-making, but if you have concerns about a specific automated outcome, you can contact support for a human review.

20. Changes to This Policy

We may update this policy from time to time to reflect changes in our Services or in applicable law. Where changes are material, we will provide reasonable notice, such as an in-app notice or a “last updated” date at the top of this page. We encourage you to review this policy periodically.

21. Contact Us / Complaints

If you have a concern about how we handle your personal data, please contact us first at info@limpoporide.com, so we have the opportunity to resolve it directly.

If you remain unsatisfied, you may lodge a complaint with: