Drop Innovations Privacy Policy
Effective Date: 09/01/2024
Introduction
At Drop Innovations Limited (“Drop,” “we,” “our,” or “us”), we are fully committed to protecting the privacy and confidentiality of the personal data we collect from users of our services, which include ridesharing, personal chauffeur services, dispatch, car rentals, and other solutions. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you engage with our Services, whether as a rider, driver, partner, or visitor.
Our practices are aligned with global data protection standards, including the Data Protection Act 2023 (DPA), Federal Competition and Consumer Protection Commission (FCCPC), and other relevant privacy laws. By using our platform and services, you acknowledge and agree to the terms of this Privacy Policy.
- Information We Collect
We collect information to ensure that we can provide a seamless, safe, and personalized experience. The data we collect varies depending on the user interaction (whether you are a rider, driver, or partner) and the services you access.
1.1 Personal Information
Riders:
– Full Name: Required to personalize your experience and match you with drivers.
– Phone Number and Email: Used for account creation, trip confirmations, and communication during rides.
– Payment Information: Drop collects and stores payment card information securely using PCI DSS-compliant systems. We do not retain sensitive card details, such as full card numbers or CVV.
– Profile Picture (optional): Riders can upload a profile picture for easy identification by drivers.
Drivers:
– Full Name, Contact Details, and Profile Picture: Used for account creation, communication, and for riders to identify drivers.
– Driver’s License and Vehicle Information: Collected to verify driver eligibility and to ensure that the vehicle meets legal and safety standards.
– Background Check Information: Drop partners with third-party providers to perform background checks, including criminal records, motor vehicle records, and more.
– Bank Account Information: Required for drivers to receive earnings. Banking details are stored securely.
Car Rental & Dispatch Partners:
– Company Name, Address, and Contact Person: For registration and account creation, communication, and service delivery.
– Vehicle Information (Rental Partners): Partners provide vehicle details, including make, model, and availability, to list on Drop’s platform.
1.2 Location Information
Drop collects location data from riders and drivers to match rides, track routes, and ensure safety:
– Precise GPS Location (Riders & Drivers): Collected when the app is running in the foreground or background. For example, during a ride, Drop uses GPS to map the journey and estimate arrival times.
– Approximate Location: In cases where GPS data is unavailable, we rely on IP address-based location information.
1.3 Device Information
When you access our Services via a mobile device, Drop collects:
– Device Type and Operating System: Helps us troubleshoot any technical issues you encounter while using our Services.
– Mobile Network Information: Allows us to optimize performance based on network speed.
– Unique Device Identifiers (UDID): Used for fraud prevention, analytics, and diagnostic purposes.
1.4 Usage Information
Drop tracks usage patterns to enhance service functionality:
– Trip History (Riders & Drivers): All completed and canceled trips, including locations, times, and driver/rider pairings, are stored for your reference and safety.
– Interaction with Customer Support: When you contact support, we collect the content of your communication and your contact information to resolve your issue efficiently.
1.5 Third-Party Information
We receive information from:
– Car Rental Companies & Dispatch Partners: When you rent a car or use dispatch services, rental companies and dispatch partners share necessary details, such as pick-up times, vehicle availability, and more.
– Background Check Providers: For drivers, we rely on third-party services to verify criminal records and driving history.
- How We Use Information
Drop Innovations uses the data collected for various purposes, ensuring both a tailored user experience and compliance with legal requirements.
2.1 Providing and Enhancing Our Services
We use personal data to:
– Match Riders and Drivers: Your location, time of request, and other data points help us match you with the nearest driver or car rental.
– Process Payments: Whether you are paying for a ride, dispatch, or a car rental, your financial data is used to complete the transaction and issue receipts.
– Trip History: We maintain a detailed history of all your rides and services accessed for your convenience, billing, and record-keeping.
2.2 Safety and Security
Ensuring safety for all users is paramount to Drop’s services:
– Driver Screening: We conduct thorough background checks to ensure that all drivers meet our safety standards. Your criminal background and driving record are reviewed, and this data is updated regularly.
– Real-Time Ride Monitoring: During a ride, Drop tracks the vehicle’s location to ensure both rider and driver safety. Any abnormal activities trigger alerts within our system.
– Emergency Features: Riders and drivers have access to an emergency button that connects them to authorities in the event of an emergency.
2.3 Customer Support and Communication
We use your contact information to:
– Resolve Issues: If you encounter any issues with the platform (e.g., trip disputes or payment problems), we use your communication history and personal details to assist.
– Feedback and Surveys: Occasionally, Drop may reach out to you for feedback about your ride experience, to gauge satisfaction, and to improve our Services.
2.4 Payments and Transactions
Your payment data is used for:
– Processing Fares and Fees: Riders are charged based on trip distance and time, while drivers are credited accordingly. This includes processing dispatch fees or car rental payments.
– Issuing Refunds: In cases of ride disputes, incorrect charges, or cancellations, Drop processes refunds directly back to the payment method you used.
2.5 Marketing, Promotions, and Analytics
With your consent, we may use your data for:
– Personalized Offers: Based on your trip history and preferences, Drop may send targeted promotional offers (e.g., discounts on your next ride or referral programs).
– Service Announcements: Periodically, we send important updates about new features, system upgrades, and safety notifications.
2.6 Legal Compliance and Risk Management
We process data to:
– Comply with Legal Obligations: Drop is required to retain certain data (e.g., financial transactions) for auditing purposes or when responding to government or regulatory bodies.
– Risk Mitigation: By tracking data such as user behavior, trip anomalies, or suspicious transactions, Drop identifies and mitigates potential risks, ensuring the platform’s security and integrity.
- Sharing Information
Drop shares personal data only as necessary for the operation of the platform, ensuring that all sharing is conducted with safeguards in place.
3.1 With Service Providers
We collaborate with trusted third-party service providers to:
– Payment Processors: Handle transactions securely. These processors comply with all legal and regulatory requirements related to financial data security.
– Background Check Services: Ensure drivers meet the platform’s safety criteria.
3.2 With Business Partners
For certain services, such as car rentals or dispatch solutions, we share data with:
– Car Rental Partners: To provide your booking information, including pick-up/drop-off locations, and any additional service requests like added security.
– Dispatch Partners: For freight or package dispatch services, we share delivery location details and contact information.
3.3 With Law Enforcement or Legal Entities
We may disclose your personal data if required by:
– Court Orders or Legal Process: In response to government investigations, subpoenas, or law enforcement agencies.
– Legal Compliance: To comply with applicable laws, regulatory requirements, or risk management obligations.
3.4 For Business Transactions
In the event of a:
– Merger or Acquisition: If Drop Innovations undergoes a business transaction, such as a merger or sale of assets, your data may be transferred as part of the deal.
- Data Security
Drop Innovations implements industry-standard practices to protect personal data from unauthorized access, alteration, disclosure, or destruction.
4.1 Encryption and Data Storage
– Encryption in Transit and at Rest: Sensitive information like payment details is encrypted using SSL technology when transmitted over networks. Data stored on our servers is also encrypted to ensure protection from breaches.
– Access Controls: Access to sensitive personal data is restricted to authorized personnel only. Employees and third-party service providers undergo rigorous security checks and are trained on data protection protocols.
4.2 Security Measures
– Firewalls & Intrusion Detection: Our servers are protected by firewalls and intrusion detection systems that prevent unauthorized access to our systems.
– Continuous Monitoring: We monitor the platform 24/7 for any security threats or anomalies and act quickly to resolve them.
4.3 Incident Response
In the event of a data breach:
– Notification: We will notify affected users and regulatory authorities within the legally required timeframe.
– Remediation: Drop will take all necessary steps to contain the breach, including investigating the cause, rectifying the vulnerabilities, and ensuring no further data exposure occurs.
- Your Privacy Rights
Drop recognizes that users may have specific privacy rights based on their jurisdiction, and we have established mechanisms to honor those rights.
5.1 Right to Access
– What it Means: You have the right to request a copy of the personal data we hold about you, including trip history, payment details, and any communication with customer support.
– How to Request: To request access, contact our Privacy Team at privacy@ridedrop.ng with the subject “Data Access Request.”
5.2 Right to Correction
– What it Means: If any of your personal data is incorrect or incomplete, you can request that we update it.
– How to Correct: You can make corrections directly within the app (for certain data like your phone number or email) or contact us for more complex issues.
5.3 Right to Deletion
– What it Means: You can request that we delete your personal data, though some data may need to be retained for legal reasons (e.g., financial transaction records).
– How to Request: To delete your data, contact us at privacy@ridedrop.ng, and we will process your request within 30 days.
- Cookies and Tracking Technologies
Drop Innovations uses cookies and similar technologies to enhance user experience, track service usage, and deliver personalized ads.
6.1 Types of Cookies We Use
– Essential Cookies: These are necessary for the platform to function correctly. For example, these cookies allow you to log into your account and make secure transactions.
– Analytical Cookies: We use these to collect data about user behavior on our platform. This data helps us understand which features are most popular, how users navigate the site, and where there are areas for improvement.
– Advertising Cookies: These are used to show you relevant ads based on your interaction with the Drop platform. They help tailor promotions, discounts, and offers to your interests.
– Functionality Cookies: These cookies remember your preferences (such as language or region) to provide a more personalized experience.
6.2 Managing Cookies
You have the right to control the use of cookies. You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect your ability to use certain features of the platform.
6.3 Tracking Technologies
In addition to cookies, Drop uses technologies such as:
– Web Beacons and Pixel Tags: These are small image files embedded on our web pages or emails that track whether a user has viewed or interacted with our content.
– Mobile App Tracking: Drop may collect data about how you use our mobile app, such as which screens you visit, to improve app functionality.
- Data Retention
Drop Innovations retains personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy.
7.1 Retention Period
– Account Information: We retain your account data, including your trip history and communication with support, for as long as your account remains active. If your account is deactivated, we retain data for a period necessary to comply with legal obligations or resolve disputes.
– Financial Transactions: Payment data is retained for auditing and tax purposes as required by law.
– Driver Background Checks: Driver information, including background checks and driving history, is retained for the duration of their active status as drivers on our platform, plus an additional period to meet regulatory requirements.
7.2 Data Deletion
Once personal data is no longer required, Drop follows industry-standard practices for secure deletion. For instance, your information may be anonymized for statistical purposes, or securely destroyed to prevent unauthorized access.
- International Data Transfers
As a global company, Drop Innovations may process and store your personal data in countries outside your residence. We comply with global data protection laws to ensure your data is handled with care, even when transferred across borders.
8.1 Data Transfers Outside of Your Country
– Transfer Mechanism: Drop ensures that international transfers of personal data are conducted in accordance with legal requirements, such as the EU Standard Contractual Clauses or similar mechanisms recognized by data protection authorities.
– Data Processing Locations: We may process data in regions where we operate (including the EU, US, and other countries), and the data may be transferred to service providers in different jurisdictions to ensure smooth service delivery.
8.2 Ensuring Adequate Protection
Where data is transferred internationally, we ensure that the destination country or service provider has adequate data protection laws in place. If such protections do not exist, we implement supplementary safeguards, such as encryption or contractual agreements.
- Children’s Privacy
Drop Innovations does not knowingly collect or solicit personal data from individuals under the age of 16.
9.1 Parental Consent
If it comes to our attention that we have collected personal data from a child under 16 without verified parental consent, we will take immediate steps to delete that information. Parents or guardians can contact Drop’s Privacy Team to request the deletion of data collected from their children.
9.2 Services for Minors
Although Drop’s services are primarily targeted at adult users, minors may use the services under parental supervision. In such cases, the responsibility for protecting the child’s data and privacy lies with the parent or guardian.
- Third-Party Links and Services
Drop Innovations may provide links to third-party websites or services (such as car rental partners, insurance providers, or payment platforms). This Privacy Policy only covers data collection and processing by Drop. We are not responsible for the privacy practices of third parties.
10.1 Third-Party Privacy Policies
When you interact with a third-party service through Drop’s platform, you are subject to their privacy policies. We recommend reviewing these policies before sharing any personal data with them.
10.2 Third-Party Integrations
Some of our services may involve integration with third-party APIs (e.g., map services or payment processors). In these cases, data may be shared between Drop and the third party to ensure service functionality, but only the minimum necessary information will be transmitted.
- Data Protection for Drivers
Drop takes additional steps to ensure that drivers’ personal data is collected, processed, and stored securely.
11.1 Driver Verification
– Background Checks: We conduct thorough background checks to ensure that all drivers meet local legal and safety standards. This includes criminal records, driving history, and other relevant data.
– Vehicle Inspections: Drop collects data on vehicle safety checks to ensure that all vehicles used on our platform meet regulatory requirements.
– Driver Reviews: Drop collects rider feedback and ratings to maintain service quality. These reviews may be shared with drivers but are anonymized where necessary.
11.2 Driver Location Tracking
During active trips, Drop collects real-time location data to ensure that drivers and riders can be matched efficiently and that trips are completed safely.
- Legal Bases for Processing Data
Drop Innovations collects and processes personal data on various legal grounds as allowed by data protection laws.
12.1 Contractual Necessity
We process personal data when necessary to fulfill our contractual obligations. For example, processing your payment information is essential for billing you for services rendered.
12.2 Consent
In cases where we rely on consent for data processing (e.g., for marketing communications), you have the right to withdraw your consent at any time by adjusting your account settings or contacting us directly.
12.3 Legitimate Interests
We may process your personal data based on our legitimate business interests, such as improving our services, ensuring platform security, and preventing fraud. In such cases, we ensure that these interests do not override your fundamental rights and freedoms.
12.4 Compliance with Legal Obligations
Drop may be required to process your data to comply with legal obligations, such as tax reporting, court orders, or regulatory requirements.
- Changes to This Privacy Policy
Drop Innovations reserves the right to modify this Privacy Policy at any time. We will provide notice of any significant changes either through the platform, email, or other prominent communication methods.
13.1 How Changes Will Be Communicated
In the event of a significant change to our data collection practices, we will notify you by updating this Privacy Policy and providing prominent notice on the Drop platform or via email.
13.2 Reviewing and Accepting Changes
You will be required to review and accept the updated Privacy Policy before continuing to use our services. If you do not agree with the new terms, you have the right to stop using our platform and request the deletion of your data.
- Contact Us
If you have any questions or concerns regarding this Privacy Policy or your personal data, please contact us at:
Drop Innovations Limited
Email: privacy@ridedrop.ng
Address: 93 Cmd Road Shangisha Ikeja, Lagos.
Phone:
We will respond to your inquiry within 30 days or within the time required by law.