RIDE MY CARS PRIVACY POLICY
Official framework governing the collection, processing, tokenization, security, sharing, retention, and statutory rights of user personal data.
I Article I — Global Regulatory Compliance
1.1 Regulatory Alignment: This Privacy Policy establishes the global data privacy and protection framework for New Development Finance Group LLC/PTY LTD ("Ride My Cars", "we", "us", or "our"). Operations comply with statutory data protection legislation across active jurisdictions:
- United States: California Consumer Privacy Act (CCPA) and applicable state privacy standards.
- South Africa: Protection of Personal Information Act (POPIA) monitored by the Information Regulator (South Africa).
- Ghana: Data Protection Act, 2012 (Act 843) overseen by the Data Protection Commission.
II Article II — Categories of Personal Data Collected
We collect personal information directly from users, automatically during service interaction, and from verified third-party screening services:
2.1 User Identity & Account Data: Legal full name, email address, telephone number, profile photograph, photographic identification, government ID numbers, driver/operator license numbers, background screening clearances (Checkr), vehicle registration, fleet insurance policies, and rental inspection logs.
2.2 Logistics Consignment Data: Sender name/phone, recipient name/phone, parcel description, declared value, pickup/drop-off addresses, delivery instructions, and 4-digit recipient PIN code verification.
2.3 Real-Time Geolocation Data: Precise GPS location coordinates (latitude/longitude) collected while the application is active during ride hailing, chauffeur service, or package delivery fulfillment.
2.4 Technical & Device Data: Device model, IP address, operating system, network connection type, crash logs, and essential authentication cookies.
2.5 Financial Transaction Data (§2.1.4): Payment transaction reference IDs, payment method types (Stripe, PayPal, Apple Pay, Paystack, Mobile Money), gross fares, and masked card/wallet suffixes (e.g. **** 4242). Raw credit/debit card numbers and CVV security codes are NEVER stored in our database.
III Article III — Purpose and Legal Basis for Data Processing
3.1 Service Execution: To match riders with independent drivers, connect vehicle renters with hosts, assign personal chauffeurs, and dispatch package delivery couriers.
3.2 Verification & Safety: To verify driver operator licenses, conduct background checks, and validate recipient 4-digit PIN delivery completion.
3.3 Financial Settlement Architecture (§3.1.3): Personal data is processed to execute secure payment collection from Customers and distribute disbursements to Service Providers through PCI-DSS Level 1 certified payment networks (Stripe, PayPal, Paystack, MoMo).
IV Article IV — Disclosure and Sharing of Personal Data
4.1 Service Participant Sharing: Data is shared between service participants exclusively as required for active trip, rental, or delivery fulfillment (e.g. driver name, vehicle plate, live GPS, recipient phone number).
4.2 Corporate Service Processors: We disclose data to vetted corporate service providers including Stripe, PayPal, Google Maps, Checkr, AWS, and Mailgun under strict non-disclosure and processing agreements.
4.3 No Data Sales: Ride My Cars does NOT sell or rent personal information to third-party data brokers or marketing aggregators.
V Article V — Data Security and Retention Frameworks
5.1 Technical Security Measures: Data in transit is protected using TLS 1.3 encryption. Passwords are cryptographically salted and hashed using Bcrypt. Databases utilize role-based access control (RBAC) and restricted firewall segments.
5.2 Statutory Retention Framework (§5.2): Personal account profiles are deactivated upon approved account erasure requests. Booking transaction logs, payment histories, and tax records are retained for 7 years following account deactivation to comply with statutory accounting, tax, and anti-money laundering (AML) laws.
VI Article VI — Data Subject Statutory Rights
Users possess statutory rights under CCPA, POPIA, and Ghana Data Protection Act (Act 843):
- Right of Access & Portability: Obtain a copy of personal data held by the platform.
- Right to Rectification: Request correction of inaccurate profile data.
- Right to Erasure: Request deactivation of account and non-statutory data deletion.
- Right to Restrict Processing: Restrict specific data processing functions.
- Marketing Opt-Out: Opt-out of promotional communications at any time.
Submit privacy requests via our Privacy Data Rights Portal.
VII Article VII — Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy to reflect evolving legal, technical, or business practices. Material updates will be published with an updated Effective Date.
VIII Article VIII — Data Protection Officer Administrative Contact
For inquiries, statutory privacy requests, or complaints, contact our Corporate Desk:
Corporate Desk: Data Protection Officer (DPO)
Parent Entity: New Development Finance Group
Department: Legal, Risk & Compliance Department
🇺🇸 USA HQ: 4301 Saddle River Drive, Bowie, MD 20720, United States
🇿🇦 South Africa Hub: 11 Corona Road, Sandhurst, Sandton, Gauteng 2196, South Africa
🇬🇭 Ghana Hub: No 1 Airport Square, 8th Floor, Airport City, Accra, Ghana
Contact Telephone: +1 855 203 3177
Direct Email: privacy@ridemycars.com
Privacy Portal: https://ridemycars.com/privacy-requests