1. Legal Entity & Scope of Policy
This Privacy Policy is issued by YELLORIDE LIMITED (“YelloRide”, “we”, “us”, or “our”), a company duly incorporated under the Companies and Allied Matters Act of the Federal Republic of Nigeria with Corporate Affairs Commission registration number RC - 9918873 and Tax Identification Number Tax ID - 2623708914517.
We operate our national executive secretariat and regulatory compliance desk from the Central Business District, Abuja, and our technology engineering, product architecture, and 24/7 driver operations hub from Lekki Phase 1, Lagos State.
This notice governs personal data collected from registered passengers (“Riders”), independent vehicle owners and transportation partners (“Drivers”), delivery recipients, and visitors across Nigeria.
2. Categories of Personal Data We Collect
Depending on how you interact with YelloRide, we collect the following categories of information:
- Account & Contact Credentials: Email address, mobile telephone number, full legal name, profile avatar, and account authentication tokens.
- Transaction & Payment Data: Payment method tokens (via encrypted, PCI-DSS compliant Nigerian payment gateways including Paystack and Flutterwave; YelloRide never stores raw debit/credit card CVVs or complete PAN numbers on its servers), transaction amounts, digital receipts, and wallet balance records.
- Ride & Trip Telemetry: Pickup and drop-off coordinates, routes traversed, trip duration, vehicle category selected, fare breakdown, and 4-digit driver verification PINs.
- Communications & Support: In-app chat transcripts, customer support voice recordings, call logs between riders and drivers (facilitated through masked virtual numbers where supported), and feedback ratings.
- Driver Verification (KYC) Data: Valid driver’s license issued by FRSC, National Identification Number (NIN), vehicle registration, roadworthiness documents, insurance certificates, and biometric facial liveness recordings.
3. Lawful Bases & Purposes of Processing
We process personal data strictly under lawful bases recognized by the Nigeria Data Protection Act 2023:
- Performance of Transportation Contracts: Matching riders with nearby drivers, calculating upfront lock-in fares, and routing navigation in real time.
- Public & Community Safety: Authenticating drivers via 3D biometric liveness before daily dispatch, verifying 4-digit ride pickup PINs, and providing emergency SOS incident telemetry.
- Payment Execution: Charging fares, funding in-app digital wallets, processing driver partner flat subscription fees, and executing daily instant cashouts to Nigerian commercial banks.
- Customer Support & Dispute Resolution: Resolving fare disputes, lost item investigations, and technical platform troubleshooting.
4. Geolocation Data Handling
For Drivers: Background GPS location is collected while the driver is set to “Online” in the Driver App, even when minimized, to enable nearby trip dispatch, turn-by-turn routing, and passenger ETA calculation.
For Riders: Location data is accessed while the app is in the foreground to detect current pickup points, and throughout active rides for real-time safety monitoring and route tracking.
5. 3D Biometric Liveness Verification (KYC)
To eliminate proxy drivers, fraudulent account rentals, and ensure community trust:
- Drivers undergo front-camera 3D biometric facial liveness checks before their daily dispatch shift.
- Facial scan vectors are converted into mathematical hashes and compared strictly against the verified driver license portrait on file.
- Biometric verification hashes are encrypted using AES-256 and are never sold or repurposed for commercial advertising.
6. Sharing & Third-Party Disclosures
We do not sell personal data. We disclose information only to authorized third parties essential for operations:
- Trip Counterparties: Riders see driver name, vehicle make, license plate, rating, and real-time location. Drivers see pickup location and passenger first name.
- Licensed Financial Processors: CBN-licensed Nigerian switches and gateways for payment clearing.
- Law Enforcement & Emergency Desks: Real-time vehicle coordinates are shared with the Nigerian Police Force or FRSC only in response to a verified in-app SOS emergency or official court subpoena.
7. Data Retention & Cryptographic Security
Personal data is retained only for the duration necessary to provide services and comply with statutory tax and transit record-keeping requirements (typically six years under Nigerian commercial law).
All data in transit is protected using TLS 1.3 encryption, and data at rest is encrypted with AES-256 standard encryption.
8. Account Deletion & Your Statutory Rights
Under Section 34 of the Nigeria Data Protection Act 2023, you have the right to request access, rectification, objection, and complete erasure of your personal data.
9. Contact Our Data Protection Officer (DPO)
If you have inquiries, complaints, or wish to exercise your data subject rights, contact our legal and data protection office:
Email: dpo@yelloride.click / privacy@yelloride.click
National Regulatory HQ: Plot 1024, Samuel Ademulegun Ave, Central Business District, Abuja, Nigeria
Technology & Operations Hub: 14B Admiralty Way, Lekki Phase 1, Lagos State, Nigeria
Corporate Affairs Commission: RC - 9918873 (Tax ID - 2623708914517)