Legal
Privacy Policy
How we collect, use, and safeguard your personal information across all SlikRide services.
1. Who We Are & Scope
1.1. The Data Controller: SlikRide Technologies Limited (“SlikRide,” “we,” “us,” or “our”) operates the SlikRide digital platform, comprising our mobile applications for riders, drivers, and vendors, as well as our official websites, APIs, and associated web services (collectively, the “Platform”). SlikRide acts as the Data Controller responsible for your personal data under the Nigeria Data Protection Act (NDPA) 2023 and applicable global data protection laws.
1.2. Scope of This Policy: This Privacy Policy applies to all individuals who interact with the Platform, including:
- Riders & Customers: Individuals who request or receive passenger rides, interstate trips, errands, package deliveries, grocery orders, laundry services, or moving services;
- Partners & Drivers: Independent contractors who provide transport, dispatch, logistics, or moving services;
- Vendors & Merchants: Store, restaurant, and laundry partners listing products or services on the Platform;
- Guest Users & Visitors: Individuals who browse our websites, download the apps, or communicate with our support desk without an active account.
1.3. Data Protection Officer (DPO)
We have designated a dedicated Data Protection Officer to supervise regulatory compliance and address data subject inquiries. You may contact our DPO directly at:
- Email: dpo@slikride.com / privacy@slikride.com
- Postal Address: Data Protection Office, SlikRide Limited, Unity Estate, Off Botanical Garden, Ogomoso.
2. Legal Framework & Regulatory Compliance
2.1. Compliance Standards: This Privacy Policy is formulated and enforced in strict compliance with:
- The Nigeria Data Protection Act 2023 (NDPA);
- The Nigeria Data Protection Regulation (NDPR) and regulatory guidelines issued by the Nigeria Data Protection Commission (NDPC);
- Relevant telecommunications, fintech, and consumer protection mandates issued by the Central Bank of Nigeria (CBN) and Federal Competition and Consumer Protection Commission (FCCPC);
- International data protection principles (including the General Data Protection Regulation / GDPR) where SlikRide processes data of international users or processes data across international borders.
2.2. Periodic Review: In accordance with statutory best practices, we review this Privacy Policy at least annually, or whenever significant changes are made to our data processing operations or platform features. We will communicate material changes via in-app alerts, push notifications, or email.
3. Lawful Bases for Processing Personal Data
Under Section 25 of the NDPA 2023, we only collect and process your personal data where we have an established lawful basis:
| Lawful Basis | Application to SlikRide Platform |
|---|---|
| Contractual Necessity | Processing required to create your account, match riders with drivers, execute deliveries, calculate fares, route trips, process in-app wallet payments, and provide customer support. |
| Legal Obligation | Complying with statutory reporting requirements, tax mandates, anti-money laundering (AML) laws, road transport passenger manifest requirements, or valid court orders and law enforcement subpoenas. |
| Vital Interests | Triggering emergency response, safety alerts, sharing live GPS telemetry with emergency contacts or medical/security personnel during an SOS or accident. |
| Legitimate Interests | Preventing platform fraud, enforcing vehicle safety standards, monitoring driver telemetry to detect reckless driving, maintaining network security, and improving algorithmic dispatch efficiency. |
| Consent | Sending promotional marketing newsletters, processing optional biometric face verification, collecting optional market research surveys, or sharing non-essential cookies. |
4. The Categories of Personal Information We Collect
We collect personal data directly from you, automatically through your device sensors, and from authorized third parties:
4.1. Information You Provide to Us:
- Account Identity Data: Legal first name, last name, profile picture, gender, email address, residential address, and mobile phone number.
- Partner & Driver Onboarding Data: Driver’s license number and expiry, vehicle registration documents, vehicle roadworthiness certificates, motor insurance policies, National Identification Number (NIN), Bank Verification Number (BVN) / verified bank account details for payouts, and criminal background verification records.
- Vendor / Merchant Data: Business registration name, CAC (Corporate Affairs Commission) RC number, business address, menu/product inventories, and settlement bank details.
- Emergency Contact Information: Name, relationship, and mobile telephone number of your nominated next-of-kin or emergency contact (used exclusively during active safety emergencies).
- Communications: Records, text chats, voice notes, and customer support tickets exchanged with our helpdesk or between users on the Platform.
4.2. Information Collected Automatically Through App Usage:
- Precise Geolocation Data: Real-time GPS coordinates, latitude/longitude, altitude, compass bearing, movement trajectory, and speed collected from your mobile device.
- Device & Technical Telemetry: Hardware model, operating system version, unique device identifiers (IDFA/GAID), IP address, mobile network operator, browser type, crash analytics, and app version.
- Transactional & Wallet Data: Trip booking history, pickup/drop-off addresses, distance travelled, duration, fare breakdowns, discount codes used, wallet funding timestamps, withdrawal requests, and masked transaction reference numbers (Paystack references).
4.3. Information from Third Parties:
- Payment Processors (Paystack): Payment status confirmations, card tokens, bank transfer confirmations, and fraud risk scores.
- Identity & Background Verification Partners: Results of government ID database lookups, criminal record checks, and driver's license status verifications.
- Mapping & Routing Services (Google Maps Platform): Address geocoding, reverse geocoding, and traffic route optimizations.
5. Detailed Geolocation & Device Permissions (App Store & Google Play Disclosures)
5.1. Geolocation Tracking:
- Foreground Location (Riders & Drivers): Collected while the SlikRide application is open and visible on your screen. Required to locate your pickup point, display available nearby drivers, calculate accurate distance-based fare estimates, and render live turn-by-turn navigation.
- Background Location (Drivers - Mandatory): For Partner Drivers, we collect precise location data even when the app is running in the background, minimized, or the screen is locked, provided your status is set to “Online” or during an active trip. This is essential to dispatch nearby ride requests, calculate driver availability, verify route adherence, prevent fare manipulation, and ensure passenger safety.
- Background Location (Riders - Active Trips & Safety): For Riders, we may collect location data in the background only while a trip is actively in progress until completion, to ensure real-time route monitoring, enable trusted contact tracking, and support the in-app SOS emergency feature. We do not track riders' background location when no trip is active.
5.2. Camera and Photo Library:
Used to allow you to take or upload a profile picture, scan identification documents (NIN/Driver’s License) during onboarding, submit photographic proof of delivery/item pickup, or document vehicle damage during an insurance claim.
5.3. Microphone:
Used exclusively to facilitate in-app voice calls between riders and drivers via the Agora RTC VoIP infrastructure without exposing personal telephone numbers. We do not secretly record or monitor background ambient audio.
5.4. Push Notifications:
Used via Google Firebase Cloud Messaging (FCM) to deliver operational alerts (e.g., driver arrived, booking confirmed, payment receipt, and critical safety warnings).
6. Masked In-App Communications (Agora VoIP)
To safeguard user privacy, SlikRide provides in-app internet voice calling and encrypted in-app messaging:
- When a rider and driver communicate through the Platform, calls are routed through real-time communication servers (Agora RTC) using encrypted session tokens.
- Neither party’s real telephone number is displayed to the other party.
- We may log call metadata (timestamps, connection success, and duration) for dispute resolution and quality auditing, but call audio is not stored or listened to unless an emergency SOS or formal criminal complaint is lodged.
7. Third-Party Technologies, Processors, and SDKs
We do not sell, rent, or trade your personal information to data brokers or third-party advertisers. We disclose personal data only to trusted third-party service providers bound by strict contractual confidentiality agreements and data protection clauses:
| Third-Party Provider | Service Function | Data Disclosed |
|---|---|---|
| Paystack Payments Limited | Payment gateway, card tokenization, bank transfers, payout processing | Name, email, transaction amount, masked bank account details. |
| Google Maps Platform | Mapping, geocoding, route calculation, distance matrix | IP address, pickup/drop-off GPS coordinates. |
| Amazon Web Services (AWS) | Cloud hosting, encrypted database storage, media asset storage (S3) | Encrypted user data, trip logs, profile photos, KYC files. |
| Cloudinary | Image and document transformation and CDN delivery | Encrypted profile photos and uploaded verification documents. |
| Termii | SMS gateway and One-Time Password (OTP) phone authentication | Mobile telephone number and verification codes. |
| Agora RTC | Real-time in-app VoIP audio calls and call masking | Ephemeral session tokens, user ID handles (no phone numbers). |
| Google Firebase (FCM) | Mobile push notification delivery and crash diagnostics | Unique device push tokens and app operating logs. |
8. What Data We Share Between Riders and Partners
To enable the fulfillment of transport and delivery bookings, certain limited data must be shared between users:
What Drivers See About Riders:
First name, profile photo (if provided), designated pickup and drop-off locations, rating, and masked communication handles. Drivers never see your email address, full home address after trip completion, payment card details, or wallet balance.
What Riders See About Drivers:
Full legal name, verified profile photograph, vehicle make, model, color, license plate number, aggregate customer rating, and live real-time vehicle GPS location.
9. Cookies and Tracking Technologies
9.1. Use of Cookies: We use first-party and third-party cookies, web beacons, and mobile SDK analytics to:
- Maintain your authenticated session across app launches;
- Remember user preferences (such as language and favorite locations);
- Monitor platform stability, crash rates, and dispatch performance.
9.2. Managing Preferences: You can manage or disable cookie preferences through your mobile device or web browser settings. Disabling essential cookies may impair the functionality of certain Platform features.
10. Data Security & Storage Safeguards
10.1. Security Measures: SlikRide implements robust technical, organizational, and physical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or accidental destruction. These measures include:
- Industry-standard TLS 1.3 / SSL encryption for all data in transit;
- AES-256-bit encryption for sensitive data stored at rest on AWS servers;
- Role-based access control (RBAC), multi-factor authentication (MFA), and strict internal auditing for staff accessing backend administrative dashboards;
- Continuous vulnerability scanning and database firewalls.
10.2. Hosting Infrastructure: Primary production databases and media repositories are hosted on secure Amazon Web Services (AWS) data centers with high-availability replication.
10.3. Cross-Border Transfers: Where personal data is transferred or hosted outside Nigeria (for example, on global AWS cloud servers), we ensure compliance with Sections 41, 42, and 43 of the NDPA 2023 by executing Standard Contractual Clauses (SCCs) and verifying that the destination jurisdiction ensures an adequate level of data protection.
11. Data Retention Periods
In accordance with our statutory obligations under Nigerian commercial, tax, and anti-money laundering legislation, we retain personal data only for as long as necessary:
| Data Category | Retention Schedule | Legal Justification |
|---|---|---|
| Financial, Payment & Wallet Records | Seven (7) Years from transaction date | Nigerian tax laws, Central Bank of Nigeria guidelines, and Money Laundering (Prevention and Prohibition) Act 2022. |
| Active User Profile & Account Data | For the duration of your active account relationship plus one (1) year following account closure | Dispute handling, outstanding balances, and contractual claims. |
| Driver & Vendor KYC / Verification Files | Duration of active partnership plus five (5) years post-termination | Regulatory transport compliance and law enforcement inquiries. |
| Granular GPS Telematics (Breadcrumbs) | Ninety (90) Days in raw format; thereafter aggregated or anonymized | Incident investigation, route audit, and algorithmic traffic optimization. |
| Customer Support Tickets & Recorded Chats | Three (3) Years from ticket resolution | Quality assurance, training, and legal defense of claims. |
12. Your Data Subject Rights Under the NDPA 2023
Under the Nigeria Data Protection Act 2023, you possess extensive statutory rights regarding your personal information:
Right of Access
You have the right to request a copy of the personal information SlikRide holds about you.
Right to Rectification
You may request that we correct any inaccurate, incomplete, or outdated personal information.
Right to Erasure (“Right to be Forgotten”)
You have the right to request the deletion of your personal data where it is no longer needed, subject to our statutory retention requirements (such as financial records).
Right to Restrict or Object to Processing
You can object to the processing of your data for direct marketing purposes or request that we suspend processing during an ongoing dispute.
Right to Data Portability
You may request that your personal data be provided to you or transferred to another service provider in a structured, commonly used, machine-readable format.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
Right to Lodge a Complaint
If you believe SlikRide has processed your data in breach of the NDPA 2023, you have the right to lodge a formal complaint with the Nigeria Data Protection Commission (NDPC) (info@ndpc.gov.ng).
13. How to Exercise Your Rights & In-App Account Deletion
13.1. In-App Account & Data Deletion:
To delete your account and personal data, you can do so directly from within the SlikRide mobile application:
- Navigate to:
Settings > Security & Privacy > Delete Account; - Confirm your identity via SMS OTP verification;
- Submit the deletion request. Your account will be deactivated immediately and queued for permanent erasure in accordance with Section 11.
13.2. Formal Data Subject Requests:
You may submit a Data Subject Request Form or email our privacy desk directly at privacy@slikride.com or dpo@slikride.com.
13.3. Statutory Response Window:
We will acknowledge receipt of your request within forty-eight (48) hours and provide a substantive response within thirty (30) calendar days of verified receipt, as required under Nigerian data protection guidelines. If a request is complex, we may extend this period by an additional thirty (30) days with written notice to you.
14. Children’s Privacy
The Platform is not directed to children under the age of 18. We do not knowingly collect personal data from minors. If we discover that a child under 18 has submitted personal information without verifiable parental consent, we will promptly delete that data from our systems.
15. Contact Details for Inquiries & Notices
If you have any questions, comments, or concerns regarding this Privacy Policy or our data protection practices, please contact:
Attn: Data Protection Officer (DPO)
Company: SlikRide Technologies Limited
Email: privacy@slikride.com / dpo@slikride.com
Phone: +234 701 549 4454
Physical Address: Unity Estate, Off Botanical Garden, Ogomoso.