Privacy Policy

1. Who we are

This policy is issued by Ehiz Holdings Limited (RC number), trading as Ehiz Rydes, whose registered office is at registered office address, operating from its office at Freddynance Plaza, Rumuokoro, Port Harcourt, Rivers State, Nigeria (website: https://ehizrydes.com) ("Ehiz Rydes", "we", "us"). We are the data controller for personal information processed through our apps and website.

We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and guidance issued by the Nigeria Data Protection Commission (NDPC).

2. Information we collect

Account information: name, phone number, email address, profile photo and password credentials.

Driver information: government-issued identification, driver's licence, vehicle registration and roadworthiness documents, vehicle photos, bank or wallet details and any background-check results where lawfully obtained.

Trip and location data: pickup and destination points, route, timestamps, and device location while the app is in use (and, for drivers, while online).

Payment information: transaction records. Card details are handled by our payment processors and are not stored in full by us.

Communications and support: messages, ratings, feedback, safety reports and support enquiries.

Device and usage data: device type, operating system, app version, IP address, crash logs and in-app activity.

3. Why we use it (lawful bases)

To provide the service and perform our contract with you: matching riders and drivers, calculating fares, processing payments and providing receipts.

To meet legal obligations: tax, accounting, responding to lawful requests from authorities.

For legitimate interests: safety, fraud prevention, dispute resolution, service improvement and enforcing our policies.

With your consent: marketing messages and optional cookies. You can withdraw consent at any time.

4. Location data

Location is essential to ride-hailing. Riders' location is used to set pickup points and track trips. Drivers' location is collected while online to dispatch requests and record trips. You can disable location permissions in your device settings, but core features will not work.

5. Sharing

Between riders and drivers: first name, photo, rating, vehicle details and live location during a trip.

Service providers: hosting, mapping, messaging, analytics and payment processors (including Flutterwave where operational), bound by contract to protect your data.

Authorities: where required by law or to protect someone's life or safety.

We do not sell personal data.

6. International transfers

Some providers may process data outside Nigeria. Where they do, we rely on transfer mechanisms permitted under the NDPA, such as adequacy or contractual safeguards. List of processors and transfer locations

7. Retention

We keep data only as long as needed for the purposes above and to meet legal requirements. Trip and transaction records are typically retained for retention period. See our Data Deletion and Account Closure Policy.

8. Your rights

Under the NDPA you may request access, correction, deletion, restriction, portability, object to processing, and withdraw consent. You may also lodge a complaint with the NDPC. We respond to verified requests within the timelines required by law.

9. Security

We use encryption in transit, access controls and monitoring to protect data. No system is completely secure; we will notify affected users and the NDPC of qualifying breaches as required.

10. Children

Our services are not intended for people under 18. Minors may only ride when accompanied by a responsible adult account holder.

11. Contact us

Questions or complaints about this policy can be sent through the Help Centre contact form at https://ehizrydes.com/help, in writing to Ehiz Rydes, Freddynance Plaza, Rumuokoro, Port Harcourt, Rivers State, Nigeria, or to verified support email. Our data protection contact can be reached at DPO email.