RydFree Privacy Policy

1. What is Personal Data?

“Personal Data” is defined as any data relating to a living individual who can be identified directly from that data or indirectly in conjunction with other information. There are instances where we invite or request individuals to provide us with their personal data through our website. We will collect some or all of the types of personal data set in relation to you via our website: contact/identifying details including name, address, email address, your preferred location; and any such data you choose to include in other information provided via our website.

a. Information We Collect

At RydFree, we are committed to transparency and ensuring that you understand what information we collect, how we collect it, and why it is necessary

for the services we provide. Importantly, we do not collect any information directly until it is provided by you voluntarily through our website or by other means. The information we collect can be broadly categorized into the following:

b. Personal Identification Information

We collect personal identification information only when you choose to engage with us by signing up for an account, subscribing to our newsletters, or using our services. This information is crucial for us to effectively communicate with you and ensure that our services meet your needs. The information we may collect includes:

• Name: When you create an account or sign up for our services, we ask for your full name to personalize our interactions with you and for accurate record-keeping.

• Email Address: If you opt to receive updates, newsletters, or other communications, we collect your email address to send you important information and respond to any inquiries you may have.

• Phone Number: If you choose to communicate with us via SMS or need to confirm your email address, we collect your phone number to send notifications and reply to your SMS queries.

• Mailing Address: If you decide to use our services, we collect your physical mailing address to verify the availability of our services in your area and to facilitate seamless vehicle delivery to your location.

• Other Contact Details: You may provide additional contact information, such as an alternative phone number or secondary email address, at your discretion. This ensures we can reach you effectively if necessary.

c. Driver Information

If you are applying to become a driver through our platform, we require additional information specific to the role. This information is crucial for us to assess your eligibility, ensure the proper functioning of our services, and deliver vehicles to your location. This includes:

• Driving License Details: We collect your driving license number, issuing state, and expiration date to verify your legal eligibility to drive in the regions where our services operate. This information is also used to insure you under our vehicle insurance policies.

• Vehicle Preferences: We may collect information about your vehicle preferences, such as the type of car you wish to drive, to match you with the most suitable vehicle available.

• Address: We collect your residential address to verify the availability of our services in your location and to coordinate the delivery of the vehicle to your specified address. This ensures that the car arrives at the correct location and is ready for use as per our Driver’s Agreement.

• Additional Driver Information: Other relevant details, such as your driving history, insurance information, and vehicle usage preferences, may also be collected to ensure the smooth operation of our service and compliance with legal requirements.

d. Communication Preferences

We understand that communication preferences vary from user to user. To respect your preferences and ensure that you receive only the communications you want, we collect information related to:

• Newsletters: Your preference regarding whether you wish to receive our newsletters or not;

• SMS and Email Notifications: We value your choices regarding the receipt of SMS and email notifications, including the option to unsubscribe from one or both forms of communication. Our system is designed to automatically update your preferences, ensuring that you only receive communications according to your selected options.

• Other Communications: For any additional service-related communications if you are listed as a driver, we will tailor our outreach based on your preferences as communicated with us accordingly. This may not include mandatory service-related communications as per our Agreement or as required by law.

e. Cookies and Pixels

To enhance your experience on our website and better understand how our services are utilized, we employ the use of cookies and pixels. Specifically, we use:

• Google Analytics Cookies: These cookies allow us to gather anonymous data about how our website is used. Information collected includes the number of visitors to the site, the pages viewed, the duration of visits, and other usage metrics. Importantly, these cookies do not collect any personal identification information, such as your IP address. The data is aggregated and used solely for the purpose of improving our Website’s performance and user experience.

• TikTok Pixel: The TikTok pixel is used to track and optimize our marketing efforts on the TikTok platform. Similar to Google Analytics, the TikTok pixel provides us with anonymized data about user interactions with our Website after viewing our ads on TikTok. This helps us refine our advertising strategies to better meet the needs and interests of our users. As with Google Analytics, no personal identification information or IP addresses are collected through this pixel.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, please note that disabling cookies may affect the functionality of our Website. For more information, please read our Cookies Policy.

By understanding the information we collect and the purpose behind it, you can have confidence in how your data is handled by RydFree. We take your privacy seriously and ensure that all collected data is used in a manner that aligns with our commitment to transparency, security, and compliance with applicable data protection laws.

2. How We Use Your Information

The information you provide is used in the following ways:

• To register you as a new customer;

• To personalize your experience (your information helps us to better respond to your individual needs);

• To manage our relationship with you, including notifying you about changes to our terms or privacy policy;

• To process your driver application, deliver vehicles to your address, and facilitate your queries;

• To send you one-time SMS messages to verify your contact details and email address, and to respond to your inquiries if you reach out via SMS. We may also send newsletters and service-related emails if you have opted in;

• To administer and protect our business/website, including troubleshooting, data analysis, and system maintenance;

• To carry out market research as this helps us understand market trends and customer preferences; and

• To comply with legal obligations, including data retention requirements.

3. Data Sharing and Disclosure

RydFree will never sell, trade, or pass your personal data to third parties for any marketing or commercial purposes. Your information is only accessible to our employees who are bound by strict confidentiality agreements. Any breach of these agreements will result in immediate termination. We may disclose the information about you to government or law enforcement officials as we, in our sole discretion believe necessary or appropriate in order to respond to claims, and legal processes, to protect our rights and interests or those of a third party, the safety of public or any person, to prevent or stop any illegal, unethical, or legally actionable activity, or to otherwise comply with applicable court orders, laws, rules and regulations.

Where this is relevant to their roles, Company staff and, in some cases, third parties will have access to your personal information. It may be necessary from time to time for us to disclose personal data to third parties or agents, including without limitation to the following third parties or agents, and others as may be required from time to time:

• Third-party service providers to assist in the administration, processing, and management of order processing and delivery to the provision of past, current and prospective services;

• Individuals or companies employed or engaged by the company to carry out specific services;

• Regulatory bodies to whom we are obliged or required to disclose information including the Courts and Court-appointed persons;

• Insurance or insurance companies for underwriting and claims purposes;

• Legal advisors and auditors to comply with legal obligations;

• Potential purchasers or bidders as a part of any business transfer, merger, or acquisition;

• Relevant Government departments and agencies as required by law;

• Other support service providers, as necessary to assist the Company with the above.

We will inform you in advance if we intend to further process or disclose your personal data for a purpose other than the purposes set out above. We take all reasonable steps, as required by law, to ensure the safety, privacy and integrity of such data and information and, where appropriate, enter into contracts with such third parties to protect the privacy and integrity of such data and any information supplied.

4. Cross-Border Data Transfers

Information collected via our website, through direct interactions with you, or from the use of our help services may be transferred or stored from time to time to our offices or personnel, or third parties at a destination outside the United States for the purposes described above. It may be processed by personnel operating outside the United States who work for us or for our suppliers who act on our behalf.To ensure your data remains protected, we implement appropriate safeguards in compliance with the General Data Protection regulation (GDPR) (EU) 2016/679. Specifically, any transfer of personal data outside the United States will be conducted in accordance with GDPR standards, ensuring your data is afforded the same level of protection as within the European Economic Area (EEA).  To the fullest extent allowed by applicable law, by using any of the above, you voluntarily consent to the cross-border transfer and hosting of such information.

5. Data Retention

We will retain your personal data only for as long as necessary for the purposes of providing access to our website and related services to you; as required by law or regulatory guidance to which we are subject, and for the exercise or defense of legal claims that may be brought by or against us. If you are a general user and if you request the deletion of your account, we will remove all your data from our system unless you are a subscribed driver. For drivers subscribed to our platform, we retain all data related to orders and business operations as required by law.

In general, we will hold this information for a period of seven years after you cease to interact with us unless we are obliged to hold it for a longer period under law or applicable regulations. However, data specifically collected as part of our recruitment process will only be held for a period of 12 months from our final interaction with a candidate during the recruitment process. If you are a successful candidate, some of your personal data obtained during the recruitment process will be held by us. This data will be subject to our separate staff privacy statement.

For further information about our data retention practices, please get in touch with us by sending us an email.

6. Personnel

If you are a worker or an applicant, we collect information you voluntarily provide to us. We use the information collected for Human Resources purposes in order to administer benefits to workers and screen applicants. You may contact us in order to:

• Update or correct your information;

• Change your preferences concerning communications and other information that you may receive from us;

• You may request to receive the record of information that we have relating to you.

Such updates, corrections, deletions, and changes will have no effect on the other information that we maintain, or information that we have provided to third parties in accordance with this Privacy Policy prior to such update, correction, deletion, or change.

7. Security and Storage of Your Data

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of secure servers like AWS and Google Cloud and SSL certificates and https are used during personal data transmission, protected with TLS v1.2+. Managed services are used to ensure the physical security of server locations. All personal data stored on AWS and GoogleCloud, with physical security described in AWS and GoogleCloud T&Cs, respectively. Your information is only accessible to authorized personnel who are required to keep the information confidential. As effective as modern security practices are, no physical or electronic security system is entirely secure. We cannot guarantee the complete security of our database, nor can we guarantee that the information you supply will not be intercepted while being transmitted to us over the Internet. We have implemented strict internal guidelines to ensure that your privacy is safeguarded at every level of our organization. We will continue to revise policies and implement additional security features as new technologies become available.

Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website. Any transmission of personal data is at your own risk. Once we receive your personal data, we use appropriate security measures to seek to prevent unauthorized access or disclosure.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach as appropriate and in accordance with our legal obligations.

8. Automated Decision Making

Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We do not envisage that any decisions will be taken about you using automated means, without human involvement in the decision-making process, however, we will notify you in writing if this position changes.

9. Your Rights and Choices

You have the right to request access to, rectification, or erasure of your personal data, or restriction of processing or to object to the processing of your personal data, as well as the right to data portability. The following is a summary of what these rights involve:

• The right of access enables you to receive a copy of your personal data.

• The right to rectification enables you to ask us to correct any inaccurate or incomplete personal data.

• The right to erasure enables you to ask us to delete your personal data in certain circumstances, for example where it is no longer necessary for us to process it.

• The right to restrict processing enables you to ask us to halt the processing of your personal data in certain circumstances, for example if you want us to verify its accuracy or our legitimate interests in processing it.

• The right to object enables you to object to your personal data being processed on the basis of our legitimate interests (or those of a third party). We will cease processing your information, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defense of legal claims.

• The right to data portability enables you to ask us to transmit the personal data that you provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party.

Additionally, you have the right to unsubscribe from our communications at any time. If you unsubscribe from SMS, email, or both, our system will immediately stop sending you further messages in those channels. If you wish to have all your data removed from our system, you can request the deletion of your entire account. We will comply with this request in accordance with GDPR and other legal requirements. However, if you are a subscribed driver, we are legally obligated to retain certain data related to your orders for compliance and operational purposes. 

We will respond to your request within one month, extendable by two additional months if necessary due to complexity. We will inform you of any such extension within one month of receipt of your request. We may request proof of identification to verify your request. We have the right to refuse your request where there is a legal basis to do so, or if it is manifestly unfounded or excessive, or to the extent necessary for important objectives of public interest.

10. Sale of Business

We reserve the right to transfer information to a third party in the event of sale, merger, or other transfer of all or substantially all of the assets of RydFree or any of its Corporate Affiliates, or as part of a partial sale. We may transfer information in the event that we discontinue our business or file a petition or have filed against us a petition in bankruptcy, reorganization or similar proceedings, provided that the third party agrees to adhere to the terms of this Privacy Policy.

11. Affiliates

We may disclose information about you to our Corporate Affiliates. “Corporate Affiliates” means any person or entity that directly or indirectly controls, is controlled by, or is under common control with RydFree, whether by ownership or otherwise. Any information relating to you that we provide to our Corporate Affiliates will be treated in accordance with the terms of this Privacy Policy.

12. Change of Purpose

We will only use your personal data for the purposes for which it was collected unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you by updating this data protection Notice and we will explain the legal basis which allows us to do so.

13. Children’s Privacy

We recognize the importance of protecting the privacy and safety of children. Our website is not intended for children under the age of 13, and we do not knowingly collect personal data from children. If you are under 13, please do not provide any personal information on our website or through our services. If we discover that we have inadvertently collected personal data from a child under 13, we will take immediate steps to delete such information from our records.

Parents or guardians who become aware that their child has provided us with personal information without their consent should contact us immediately. We will promptly remove such data from our records and systems.

14. Your Consent

We have updated our Privacy Policy to provide you with complete transparency into what is being set when you visit our site and how it is being used. By using our website, signing up an account, or making a purchase, you hereby consent to our Privacy Policy and agree to its terms.

15. Changes to Our Privacy Policy

We may change our Services and Policies, and we may need to make changes to this Privacy Policy so that they accurately reflect our services and policies. If we make any changes, we will post those changes here. However, if we make material changes to this Notice, we will notify you by means of a prominent notice on the website prior to the change becoming effective. If you do not agree to this or any updated Privacy Policy, you must refrain from using our services and request for account deletion.