Go Ride Pakistan ("we," "us," "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our mobile app and website (collectively, the "Platform"). It also explains your rights under the laws of Pakistan, including the Constitution, the Prevention of Electronic Crimes Act 2016 (PECA), and the principles of the pending Personal Data Protection Bill 2023.
By using our Platform, you acknowledge that you have read and agreed to this policy.
1. Information We Collect
We collect several types of information from and about users of our Platform:
A. Personal Data
- Registration Information: Full name, mobile number, email address, and profile photo.
- National Identification: To comply with local regulations and for verification, we may collect your Computerized National Identity Card (CNIC) number. This is considered sensitive personal data under the proposed PDPB.
- Payment Information: Credit/debit card details, mobile wallet information, or other payment instrument data. We use third‑party payment gateways and do not store full financial information on our servers.
B. Location Information
- In the Foreground: When the app is open and in use.
- In the Background: When the app is minimized or closed, we may collect location data to enable core functionalities such as tracking your ride, providing ETAs, and updating trip status.
C. Usage and Technical Information
- Device Information: IP address, device type, operating system, browser type, and unique device identifiers.
- Log Data: Access times, pages viewed, frequency of use, and in-app actions.
- Communication Data: Records of calls, chats, or messages made through the Platform between riders and captains/drivers.
D. Cookies and Tracking Technologies
We may use cookies, web beacons, and similar technologies to enhance your experience, analyze trends, and remember preferences. You can manage preferences via browser settings; disabling them may affect functionality.
2. How We Use Your Information
- To Provide and Manage Services: Create/manage accounts, connect you with captains, process ride requests, calculate fares, and facilitate payments.
- To Ensure Safety and Security: Verify identity (including CNIC), monitor for fraud, detect unauthorized access, and ensure user safety. This is a key requirement under PECA.
- To Improve Our Platform: Understand user behaviour, analyze trends, troubleshoot bugs, and enhance functionality.
- To Communicate with You: Send service notifications (ride confirmations, OTPs, receipts, updates). With consent, we may send promotional messages; you can opt out anytime.
- To Comply with Legal Obligations: Respond to requests from law enforcement (FIA, PTA) as required by PECA or other laws, and enforce our legal rights.
3. Legal Basis for Processing (Consent and Authorization)
- Consent: By using our Platform, you provide freely given, specific, informed, and unambiguous consent to the collection and processing described. You may withdraw consent anytime (see section 7).
- Performance of a Contract: Processing necessary for our contract to provide ride-hailing services.
- Legal Obligation: Compliance with legal obligations (fraud prevention, cooperation with law enforcement under PECA).
- Vital Interests: Processing may be necessary to protect the vital interests of a data subject or another person, e.g., in an emergency.
4. How We Share Your Information
We do not sell, trade, or rent your personal information. We may share in limited circumstances:
- Between Users: To facilitate a ride, we share necessary information (name, location, mobile number) between riders and captains/drivers.
- With Service Providers: Trusted third‑party vendors – payment processors, cloud storage, analytics (e.g., Google Analytics), SMS/email providers – contractually bound to protect data and comply with Pakistani law.
- For Legal Reasons: If required by law, court order, or valid request from a government authority (FIA, PTA), or to protect our rights, your safety, or the safety of others.
- Business Transfers: In case of merger, acquisition, or sale of assets, your information may be transferred; we will notify you of any such change.
5. Data Security
- Encryption: SSL/HTTPS encrypts data transmitted between your device and our servers.
- Access Controls: Personal data accessible only to authorized personnel.
- Secure Storage: Servers with robust firewalls.
While we strive for commercial means of protection, no method of transmission or storage is 100% secure. Absolute security cannot be guaranteed.
6. Data Retention
We retain personal data only as long as necessary to fulfil the purposes collected, including satisfying legal, accounting, or reporting requirements. When no longer required, we securely destroy, delete, or anonymize it.
7. Your Rights (Data Subject Rights)
In line with the Constitution of Pakistan and the principles of the Personal Data Protection Bill 2023, you have the right to:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure (Right to be Forgotten): Request deletion when no longer necessary, or if you withdraw consent.
- Withdraw Consent: Withdraw consent at any time (does not affect prior processing).
- Object to Processing: Object to direct marketing or processing based on legitimate interests.
- Data Portability: Receive your data in a structured, machine‑readable format and transmit it to another controller.
How to exercise: Email dpo@goridepakistan.com (or the address in section 12). We will respond within 30 days, after identity verification.
8. Data Deletion Request Process
- Send an email from your registered Go Ride Pakistan account to dpo@goridepakistan.com with subject: "Request for Account Deletion".
- We will verify your identity.
- Upon successful verification, we will permanently remove your personal data from active systems within 30 business days.
- Some data may be retained longer in backups or as required by law (fraud prevention, compliance, dispute resolution); it will be securely isolated and deleted per our retention policies.
9. Cross-Border Data Transfer
As a Pakistan-based service, our primary data servers are located in UAE. If your personal data is transferred, stored, or processed in a country other than UAE, we ensure appropriate safeguards in line with Pakistani law, including substantially similar protection or your explicit consent. Critical personal data (as defined by law) will only be processed on servers located within Pakistan.
10. Children's Privacy
Our Platform is not intended for individuals under 18. We do not knowingly collect personal information from children. If we become aware of inadvertent collection, we will delete it promptly.
11. Changes to This Privacy Policy
We may update this policy to reflect changes in practices, technologies, legal requirements, or the data protection landscape in Pakistan. The "Last Updated" date at the top will be revised. For significant changes, we may notify you via email or in‑app notice. Your continued use after the revised policy becomes effective indicates acceptance.