Privacy Policy

“Protected Personal Information” or “PPI” is information about users, including information that can reasonably be used to identify you and that relates to your past, present or future activities, and/or the provision of our services to you. LushRide provides its services to individuals and groups and when we process PPI on behalf of such people, we are acting as a “Processor” to them. Therefore, LushRide has adopted and maintains appropriate physical, technical, administrative, and organisational procedures to safeguard and secure the Protected Personal Information we process. We shall not access, use, or disclose Protected Personal Information except as permitted by you, and/or applicable law. LushRide strives to protect the privacy of the Protected Personal Information it processes, and to avoid inadvertent disclosure.

We may collect certain information about you provided directly to us, such as when you request information, create, modify or lodge a complaint, complete a LushRide Online form, survey, questionnaire or application, contact customer support, enter into a service provider agreement, make a purchase, join or enroll for an event or otherwise communicate with us in any manner. This information may include, without limitation: name, date of birth, e-mail address, login name and password, home or work address, phone number, profile picture, saved favourite locations, preferences and settings related to the account, or any other personal information you choose to provide. We collect details of your payment methods including payment card type, bank name, bank account number, related payment verification information and transaction history on the platform. We collect identification documents including government-issued or national identity documents (such as passports, driver’s licences or national ID cards) and photographs/ pictures you submit yourself. We also collect demographic data such as your age and gender.

We may collect certain information about you, your activity on our Website and your computer or device when using our Services. These include: Geolocation Data We collect data about your precise and/or approximate geolocation (including GPS, and IP address) from your mobile device depending on your app settings and device permissions, when you open and use LushRide. App Usage Data This includes: details of journeys (date and time, pick-up and drop-off addresses, journey distances and routes), payment history (including whether you used any coupons or promotional codes), cancellation history, dates and times you log-in and log-off the LushRide app and app features or pages viewed, browser type, app crashes and other system activity. Communication Data We collect communication and correspondence data when you engage with our Customer Support Team via the in-app chat function, report an incident, communicate via emails, web forms, or speak with our Customer Support agents, or communicate with Drivers via the LushRide app using the in-app chat function or via internet calls (where available). User Generated Data We collect personal data when you use certain features. For example to provide recordings such as audio recordings generated during the trip (as part of our safety toolkit trip audio recording feature, where such feature is available, or feedback about other users, including compliments that you have the option to give to Drivers, when you finish your ride, along with a 5 star review. Device Data We collect data about the devices you use to access the LushRide App, including the hardware model, device IP address and other unique device identifiers, device operating system, browser version, device vendor name, app version, identity of carrier and manufacturer and preferred languages. Calendar Data If you set your device permissions or choose to give LushRide access to your chosen calendar, we will collect information available in your calendar such as event details to use in providing you certain optional features. We also automatically collect information via the Website or Service using various technologies, including, but not limited to Cookies and Web Beacons. We may collect your IP address, location, browsing behaviour and device IDs. This information is used by us to enable us to better understand how our Services are being used by visitors and allows us to administer and customise the Services to improve your overall experience.

We may also receive information about you from publicly and commercially available sources, as permitted by applicable law, which we may combine with other information we collect through our Services. For example, if you make a complaint to us about your safety, we can conduct a public search on available personal information about you that is exposing you to security risks or if you engage with a separate App or Website that uses our API, or whose API we use, we may receive information about you or your connections from that Website or App. This includes, without limitation, profile information, profile picture, gender, username, user ID associated with your social media account, age range, language, country, friends list, your contact names, e-mail addresses, phone numbers, identifiers and any other information you permit the social network to share with third parties. The data we receive is solely dependent upon your privacy settings with the social network.

We have put in place physical, technical and administrative measures that are intended to help protect your information in our possession against loss, theft, misuse, unauthorised access, disclosure and alteration. Some of the safeguards we use are firewalls and data encryption, physical access controls to our data centres, and information access authorisation controls. Although we take measures to secure your information, we do not promise, and you should not expect, that your personal information, or searches, or other information will always remain secure. We cannot guarantee the security of our information storage, nor can we guarantee that the information you supply will not be intercepted while being transmitted to and from us over the Internet including, without limitation, email and text transmissions. If any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable jurisdictional laws and regulations.

Your Personal Information The legal basis upon which we rely for the collection and processing of your Personal Information is the following:

• When signing up to use our Services, you have given us explicit consent allowing LushRide to provide you with our Services and generally to process your information, in accordance with this Privacy Policy; and the transfer of your data to other jurisdictions as may be required in accordance with applicable law;
• It is necessary for entering into, or performing, the obligations of a contract between you and LushRide, including, without limitation, the Terms of Service agreement which may be accessed by you, or a customer’s Service Agreement;
• It is necessary to register you as a user, manage your account and profile, and authenticate you when you log in.
• It is necessary for our legitimate interests in the proper administration of our Website, our Service and our business; analysing the use of the website and our Services; assuring the security of our website and Services; maintaining back-ups of our databases; and communicating with you;
• To resolve technical issues you encounter, to respond to your requests for assistance, comments and questions, to analyse crash information, to repair and improve the Services and provide other customer support.
• To send communications via email and within the Services, including, for example, responding to your comments, questions and requests, providing customer support, and sending you technical notices, product updates, security alerts, and administrative, billing, and account management-related messages.
• To send promotional communications that you have consented to receive or have expressed a legitimate interest in receiving.
• It is necessary for our legitimate interests in the protection and assertion of our legal rights, and the legal rights of others, including you.
• It is necessary for our compliance with certain legal provisions which may require us to process your personal data. By way of example, and without limitation, we may be required by law to disclose your personal data to law enforcement or a regulatory agency.

Our primary purpose in collecting, holding, using and disclosing your Information is for our legitimate business purposes and to provide you with a safe, smooth, efficient, and customised experience while using the Service. Particularly, the information collected is used to identify users based on their location and demographics. This helps us to optimise our Services to meet specific needs of these users. WE WILL USE THIS INFORMATION IN ORDER TO:

• Provide users with our Services and Customer Support including but not limited to verifying your account and for informational and operational purposes, such as account management or system maintenance.
• Protect your safety online.
• Contact you and provide you with important notices.
• Analyse, improve and manage our Services and operations.
• Resolve problems and disputes and engage in other legal and security matters.
• Detect and prevent fraud, abuse and other security incidents.
• Enforce our Terms of Service and any terms and conditions of any other agreements for our Services.
• Build new services and other purposes as deemed necessary by LushRide upon notification to you. ADDITIONALLY, WE MAY USE THE INFORMATION WE COLLECT ABOUT YOU TO:
• Send you communications we think will be of interest to you, including information about products, services, promotions, news, and events of LushRide and other companies, where permissible and according to local applicable laws. according to local applicable laws.
• Display advertising, including advertising that is targeted to you or other users based on your location, interests, as well as your activities on our Services.
• Verify your identity and prevent impersonation, spam or other unauthorised or illegal activity.
• Provide after-sales services to you.

a. We may disclose the information we collect about you as described in this Privacy Policy or as described at the time of collection or sharing, including as follows:

• With third-party Service Providers that provide a variety of services on our behalf. For example, we may rely on service providers to provide web analytics, data processing, advertising, email distribution and other services; These service providers are obligated by contract to protect the confidentiality, integrity and security of the information we share with them;
• With the general public if you submit content to a part of our Services that is viewable by the general public, such as a forum or community area;
• With third parties with whom you choose to let us share information, for example other websites or apps that integrate with our API or Services, or those with an API or Service with which we integrate;
• With current and future LushRide subsidiaries and affiliated entities that provide services, including payment processing services or conduct data processing on our behalf, or for data verification, data centralisation and/or logistics purposes;
• With affiliated entities that provide payment processing services on our behalf;
• With vendors, consultants, marketing partners, and other service providers who need access to such information to carry out work on our behalf;
• In response to a request for information by a competent authority, if we believe disclosure is in accordance with, or is otherwise required by, any applicable law, regulation, or legal process;
• With law enforcement officials, government authorities, or other third parties if we believe your actions are inconsistent with our Terms of Service, or policies, or to protect the rights, property, or safety of LushRide or others;
• In connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company;
• If we otherwise notify you and you consent to the sharing;
• In an aggregated and/or de-identified form which cannot reasonably be used to identify you; and
• To enforce our Terms of Service, this Privacy Policy, and any other applicable agreements, or protect our legal rights.

Aggregated Data is de-identified or anonymised and does not constitute Personal Data as this data does not directly or indirectly reveal you, or the user or the user’s customers identity. We may collect, use and share Aggregated Data such as statistical or demographic data for any purpose including, without limitation, research, security risk assessment, penetration testing, vulnerability testing, education, analysing usage trends and patterns, improving our Services and business operations, evaluating the performance of the LushRide Service and measuring the effectiveness of our content, and Service components. We may receive compensation in the effectiveness of our content, and Service components. We may receive compensation in exchange for sharing de-identified or anonymised Aggregated Data which shall be for the account of LushRide.

LushRide is committed to cooperating with law enforcement while respecting everyone’s right to privacy. If we receive a request for user account information from a government agency investigating security incidents, we will review the request to be certain that it satisfies all legal requirements before releasing information to the requesting agency.

• Our Services may now or in the future integrate with social sharing features and other related tools which let you share actions you take on our Services with other Apps, sites, or media, and vice versa, depending on the settings you establish with the social sharing service. Please refer to the privacy policies of those social sharing services for more information about how they handle the data you provide to or share through them.
• Any information or content that you voluntarily disclose for posting publicly to a social sharing service becomes available to the public, as controlled by any applicable privacy settings that you set with the social sharing service. Once you have shared User Content or made it public, that User Content may be re- shared by others. If you remove information that you posted to the social sharing service, copies may still remain viewable in cached and archived pages, or if other users or third parties, using the social sharing service, have re-shared, copied or saved that User Content.

We and third parties that provide content or functionality on the Services or provide us analytics and advertising services collect or receive information about your use of the Services and other websites or mobile applications, including through the use of Cookies, Web Beacons, software development kits (SDKs), and other technologies to identify your device when you visit our Website and use our Services, as well as when you visit other online sites and services. This information may include, for example, your IP address, browser, device information, pages viewed, time spent on pages, links clicked and conversion information. This information may be combined with information collected across different websites, online services, and linked or associated devices to, among other things, analyse and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests, and better understand your online activity.

• Our Services, as well as the email messages sent with respect to our Services, may contain links or access to websites and services operated by third parties that are beyond our control. Links or access to third parties from our Services are not an endorsement by us of such third parties, or their websites, applications, products, services, or practices. We are not responsible for the security or privacy policy, terms, and conditions, practices or the content of such third parties. These third parties may send their own Cookies to you and independently collect data.
• If you visit or access a third-party Website, application or other property that is linked or accessed from our If you visit or access a third-party Website, application or other property that is linked or accessed from our Services, we encourage you to read any privacy policies and terms and conditions of that third party before providing any personally identifiable information. If you have a question about the terms and conditions, privacy policy, practices or contents of a third party, please contact the third party directly.

Where we need to transfer your Personal Data to another country, we will take all reasonable steps to ensure that any such transfers comply with applicable laws. We will take all steps necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organisation or a country unless there are sufficient controls in place including the security of Your data. We would also ensure your data is transferred outside the country with appropriate safeguard in compliance with the applicable law.

You may access or modify your account information at any time by logging into your online account. Please note that in some cases we may retain certain information about you as required by law, or for legitimate business purposes, to the extent permitted by law.

You may opt out of receiving promotional messages from us at any time by following the instructions in those messages sent to you or by contacting us at any time using the Contact Us information at the end of this Privacy Policy. If you opt out, we may still send you non- promotional communications, such as those related to your account, or use of our products and Services.

You have certain rights in relation to Personal Information we hold about you. You can exercise any of the following rights by contacting us using any of the methods in the Contact section below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated. Your rights include: a. Right to Access Your Personal Data You have the right to access information held about you for the purpose of viewing and in certain cases updating or deleting such information. Furthermore, if you prefer that LushRide does not share certain information as described in this Privacy Policy, you can direct us not to share that information. We will comply with an individual’s requests regarding access, correction, sharing, and/or deletion of the comply with an individual’s requests regarding access, correction, sharing, and/or deletion of the personal data we store in accordance with applicable law. To make changes to your account affecting your personal information contact us at the email address in our Contact section below. For any deletion, non-sharing or update request, we will make the changes as soon as practicable, however, this information may stay in our backup files. If we cannot make the changes you want, we will let you know and explain why. b. Right of Correction or Completion of Your Personal Data If the personal information we hold about you is not accurate, out of date or incomplete, you have a right to have the data corrected or completed. To make corrections to your account please contact us at the email address in our Contact section below. c. Right of Erasure or Deletion of Your Personal Data In certain circumstances, you have the right to request that personal information we hold about you is deleted. If we cannot delete the information you want, we will let you know and explain why. To request information deletion please contact us at the email address in our Contact section below. d. Right to Object to or Restrict Processing of Your Personal Data In certain circumstances, you have the right to object to our processing of your personal information. For example, you have the right to object to use of your personal information for direct marketing purposes. Similarly, you have the right to object to use of your personal information if we are processing your information based on legitimate interests and there are no compelling legitimate grounds for our processing which supersede your rights and interests. You may also have the right to restrict our use of your personal information, such as in circumstances where you have challenged the accuracy of the information and during the period where we are verifying its accuracy. To object to or restrict processing please contact us at the email address in our Contact section below. e. Right to Data Portability or Transfer of Your Personal Data You have the right to be provided with a copy of the information we maintain about you in a structured, machine-readable and commonly used format. To receive a copy of the information we maintain about you and to request for a transfer of your personal to a third-party (e.g. another company which you have dealings with) in a structured, commonly used and machine-readable format please contact us at the email address in our Contact section below. f. Right to Withdrawal of Consent If you have given your consent to us to process and share your Personal Information after we have requested it, you have the right to withdraw your consent at any time. To withdraw your consent please contact us at the email address in our Contact section below.

• Right to ask us for a copy of the safeguards under which personal data is transferred outside of Nigeria;
• Right not to be subject to decisions based solely on automated processing, including profiling, except where necessary for entering into, or performing, a contract with LushRide; it is based on your explicit consent and is subject to safeguards; or is authorised by law and is also subject to safeguards; consent and is subject to safeguards; or is authorised by law and is also subject to safeguards;
• Right to prevent processing that is likely to cause damage or distress to you or anyone else;
• Right to be notified of a personal data breach which is likely to result in high risks to your rights and freedoms; and
• Right to make a complaint to the Nigeria Data Protection Commission or any other regulatory body. Where you have submitted a complaint, we will endeavour to resolve such feedback/query within thirty (30) days from the date of receipt. In the event that we are unable to resolve it before the expiration of the aforementioned timeline, we shall inform you about the extension of time needed to resolve such.

We have put in place procedures to deal with any suspected personal data breach and will notify you of any personal data breach and let you know the steps we have taken to remedy the breach and the security measures we have applied to render your personal data unintelligible. We will endeavour to remedy all suspected breaches of personal data within [thirty (30) days] from the date of the report of the breach. If you know or suspect that a personal data breach has occurred, you should immediately contact the LushRide team at info@lushride.ng LUSHRIDE WILL NOT BE RESPONSIBLE FOR ANY PERSONAL DATA BREACH WHICH OCCURS AS A RESULT OF:

• an event which is beyond the control of LushRide;
• an act or threat of terrorism;
• an act of God (such as, but not limited to, fires, explosions, earthquakes, drought, tidal waves and floods) which compromises LushRide’s data protection measures;
• war, hostilities (whether war be declared or not), invasion, act of foreign enemies, mobilisation, requisition, or embargo;
• rebellion, revolution, insurrection, military or usurped power, or civil war which compromises LushRide’s data protection measures;
• pandemics or epidemics;
• the transfer of your personal data to a third party on your instructions; and
• the use of your personal data by a third party designated by you.

Unless you request that we delete certain information, we retain the information we collect for as long as your account is active or as needed to provide you services. Following termination or deactivation of your account, we will retain information for at least 1 year or for as long as needed for our legal purposes in accordance with applicable law. We will only retain your Personal Data for as long as we reasonably need to unless a longer retention period is required by law (for example for regulatory purposes). We will also retain your personal data to comply with a legal obligation.

If you have any questions or if you would like to contact us about our processing of your personal information, including exercising your rights as outlined above, please contact us at info@lushride.ng . When you contact us, we will ask you to verify your identity.

I confirm that I have read and understood this Privacy Policy and I consent to the processing of my Personal Data by LushRide in line with the terms of the Privacy Policy.