Privacy policy

1. Who we are

BookMyRide is operated by Multimax Synergize Limited ("we", "us"). We are the data controller for the personal data described here. This policy covers the BookMyRide website and the customer, driver and partner apps, and all five services: Ride, Intercity, Send, Food and Freight.

2. What we collect

From everyone with an account

Account details: your name, phone number, email address, password (stored only as a secure hash), market, city and profile photo if you add one.
Saved places: addresses you save, such as home and work.
Bookings and orders: pickup and drop-off points, routes, times, fares, the people and businesses involved, ratings and any notes you leave.
Payments: your wallet balance and transactions, how you paid, and references for any payment made through a payment provider. We do not store full card numbers.
Messages: what you send us through Help or the contact form.
Device and usage data: IP address, browser and device type, and logs of how the service is used, which we need for security and fault finding. If you allow notifications, a push subscription for your device.

Details about other people

If you send a parcel, you give us the receiver's name and phone number, so make sure they are happy with that. Freight customers may give us contact details for people at the pickup and delivery points.

From drivers, couriers and truckers

Licence details, identity documents, a photo, vehicle details, registration, insurance and roadworthiness documents, as required for the type of work.
Application status, the agreement you signed, and the record of signing: your typed name, the time, your IP address and your browser details.
Earnings, commission, balances and payout bank details.
Location while you are online or on a job.

From restaurants and fleets

Business registration, permits, insurance and owner identity documents, menus, staff and vehicle lists, order and sales data, agreement records and payout details.

In an emergency

If you press SOS we record the time, the trip, and your location, along with any note, and show these to our operations team together with the driver's details.

3. Location data

BookMyRide is a location service, so location is central to it.

Customers. With your permission, we use your device's location to set your pickup, find nearby drivers and show your position on the map. You can type an address instead. We use your location during a trip for safety and to show progress.
Drivers and couriers. We collect location while you are online and during jobs, in order to send you requests, show customers your approach, and keep a record of the trip. We do not need it while you are offline.
Shared trips. If you share a trip, anyone with the link can see that trip's live progress until it ends. Only share it with people you trust.

You can turn location permission off in your browser or phone settings at any time. Some features will stop working or need you to enter addresses by hand.

4. How we use data

To create accounts, and to arrange, run and complete rides, seats, deliveries, food orders and loads.
To work out fares, handle wallets and payments, pay providers and keep accounts.
To review provider applications and keep documents up to date.
To keep people safe, including PINs, delivery codes, SOS and handling of incidents.
To detect and stop fraud and abuse, and to secure the platform.
To provide support and deal with complaints and disputes.
To send service messages, such as codes and trip updates. We send marketing only where the law allows, and you can opt out.
To understand how the service is used so we can improve it.
To meet legal, tax and regulatory duties.

We do not sell your personal data. We do not make decisions with legal effect about you by purely automated means without giving you a way to reach a person. Matching a job to a nearby driver is automated, but you can always contact us about the outcome.

5. Our lawful bases

Where the law requires a lawful basis, we rely on:

Contract: to deliver the service you asked for.
Consent: for device location, push notifications and some marketing. You can withdraw it at any time.
Legitimate interests: for safety, fraud prevention, security and improving the service, balanced against your rights.
Legal obligation: for tax, accounting and responding to lawful requests.
Vital interests: where needed to protect someone's life or safety.

The other side of a booking. Drivers and couriers see your name, pickup and drop-off and rating. You see their name, photo, vehicle, plate and rating. Restaurants see what is needed to prepare your order. Carriers see load details and the contacts needed for the job.
Our staff, on a need-to-know basis, for operations, support, safety and review of applications.
Service providers that work for us under contract, for hosting, maps and routing, text messages, email, push notifications and payments. They may only use the data to provide their service.
Authorities. The police, courts and regulators where the law requires it, or where we believe in good faith that it is necessary to protect someone's safety.
A new owner, if the business is reorganised or sold, under the same protections.

7. International transfers

BookMyRide runs in more than one country and our service providers may process data outside the country where you live. Where data leaves Nigeria we apply a transfer basis recognised by the Nigeria Data Protection Act, such as adequate protection in the receiving country, appropriate contractual safeguards, or your consent. We apply equivalent care to all transfers.

8. How long we keep it

We keep personal data only for as long as we need it for the purposes above. In general:

Account data stays for as long as your account is open, and for a limited period afterwards to deal with disputes and fraud.
Booking, payment and tax records stay for as long as accounting and tax law require.
Provider documents and signed agreement records stay for the length of the relationship and for the limitation period afterwards.
Safety incident records may be kept longer where they are needed to protect people or for legal claims.
One-time codes are deleted soon after they expire.

When data is no longer needed we delete it or make it anonymous.

9. Security

We use encrypted connections, hashed passwords, access limits for staff, and logs of staff actions. No system is perfectly secure. If a breach is likely to put your rights at risk we will tell you and the relevant regulator as the law requires. Keep your password private and tell us straight away if you think your account has been accessed by someone else.

10. Your choices and rights

You can update most of your profile in the app, and you can control location and notifications in your device settings. To use the rights below, send a request through the contact form and choose General question. We will direct it to the person who handles data protection, and may ask you to confirm your identity before acting on it. We will not treat you worse for using your rights.

11. Users in Nigeria

If you are in Nigeria, the Nigeria Data Protection Act 2023 ("NDPA") applies to how we handle your data. Under the NDPA you have the right to:

be told how your data is being processed, and get a copy of it;
have inaccurate or incomplete data corrected;
have your data deleted where we no longer have a lawful reason to keep it;
restrict or object to processing, including for direct marketing;
withdraw consent at any time, without affecting what was done before;
receive your data in a structured, commonly used format, and have it sent to another controller where this is technically possible;
not be subject to a decision based only on automated processing that significantly affects you, subject to the exceptions in the Act.

Some data, such as identity documents and health details you tell us about in a safety incident, may be sensitive. We only handle it where the NDPA allows. If you are unhappy with how we respond, you can complain to the Nigeria Data Protection Commission.

12. Users in the United States

Privacy rights in the United States depend on the state where you live. Depending on your state, and on whether its law applies to us, you may have the right to:

know what personal information we collect, use and disclose, and get a copy of it;
correct inaccurate information;
delete personal information, subject to legal exceptions;
opt out of the sale of personal information, sharing for cross-context behavioral advertising, and certain profiling;
limit the use of sensitive personal information, such as precise location;
appeal if we decline your request.

We do not sell personal information or share it for cross-context behavioral advertising. We collect the categories listed in section 2, for the purposes in section 4, and disclose them to the recipients in section 6. Precise location and government ID numbers are sensitive categories, and we use them only to provide the service, for safety and for legal compliance. You may use an authorized agent where your state allows this. We do not currently respond to browser Do Not Track signals, because this site runs no third-party tracking.

13. Cookies and device storage

This website does not run advertising or third-party analytics scripts. It stores one setting in your browser: whether you chose Nigeria or the United States. The apps use browser storage to keep you signed in and to work smoothly on your phone. Clearing your browser data removes these, and you will need to sign in again.

14. Children

BookMyRide accounts are for adults aged 18 and over. We do not knowingly collect personal data from children. If you think a child has opened an account, tell us and we will close it and delete the data, subject to any legal duty to keep it.

15. Changes to this policy

We will post any new version here with a new date, and tell you in the app about important changes.

16. Contact

For any privacy question or request, use the contact form.