Last Updated: April 4, 2025
Introduction
Welcome to RideLink. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our mobile application (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
This privacy policy is designed to comply with the Electronic Transactions and Cybersecurity Act of 2016 of Malawi (“the Act”) and any other applicable data protection laws in Malawi.
1. Important Information and Who We Are
Purpose of This Privacy Policy
This privacy policy aims to give you information on how RideLink collects and processes your personal data through your use of this application, including any data you may provide when you sign up for our service, book a ride, or use our features.
The application is not intended for children under 13 years of age, and we do not knowingly collect data relating to children.
2. The Data We Collect About You
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes first name, last name, username or similar identifier, and date of birth.
- Contact Data includes email address, phone number, and billing address.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, device type, operating system and platform, and other technology on the devices you use to access this application.
- Profile Data includes your username and password, your preferences, and feedback.
- Usage Data includes information about how you use our application and services.
- Location Data includes your current location shared through your device to facilitate ride services.
- Transaction Data includes details about payments to and from you and other details of services you have purchased from us.
- Vehicle Data includes vehicle registration details, model, make, year, condition, insurance information, and service history for drivers registering vehicles on our platform.
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To register you as a new customer
- To process and deliver your service requests
- To manage our relationship with you
- To enable you to participate in application features
- To administer and protect our business and this application
- To deliver relevant application content and advertisements to you
- To use data analytics to improve our application, services, marketing, customer relationships, and experiences
4. Data Security
In compliance with Malawi’s Electronic Transactions and Cybersecurity Act of 2016, we have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular testing and evaluation of the effectiveness of our security measures
- Measures to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems
- Procedures to restore access to personal data in a timely manner in the event of a physical or technical incident
- Regular security assessments and audits
We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know and have signed appropriate confidentiality agreements.
5. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
6. Your Legal Rights
In accordance with the Electronic Transactions and Cybersecurity Act of 2016 of Malawi and other applicable laws, you have the following rights in relation to your personal data:
- Right to access: You have the right to request access to your personal data that we hold about you.
- Right to rectification: You have the right to request correction of any inaccurate personal data that we hold about you.
- Right to erasure: You have the right to request erasure of your personal data in certain circumstances.
- Right to object to processing: You have the right to object to the processing of your personal data in certain circumstances.
- Right to restriction of processing: You have the right to request the restriction of processing of your personal data.
- Right to data portability: You have the right to request the transfer of your personal data to you or to a third party.
- Right to withdraw consent: You have the right to withdraw your consent at any time where we are relying on consent to process your personal data.
These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data.
If you wish to exercise any of the rights set out above, please contact us using the details provided in Section 9.
7. Third-Party Links
This application may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
8. Changes to the Privacy Policy
We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the “Last Updated” date at the top of this policy.
Email: [email protected] Phone: +265991154080
10. Malawi Data Protection Compliance
10.1 Data Controller
RideLink acts as a data controller in relation to the personal data processed through our application. We are committed to processing your data in accordance with the Electronic Transactions and Cybersecurity Act of 2016 of Malawi.
10.2 Cross-Border Data Transfers
If we transfer your personal data outside of Malawi, we will ensure that appropriate safeguards are in place to ensure that your personal data receives an adequate level of protection in accordance with Malawi law.
10.3 Data Breach Notification
In the event of a data breach that may compromise your personal data, we will notify both you and the relevant Malawian authorities in accordance with the requirements of the Act.
10.4 Consent
Where we rely on consent as the legal basis for processing your personal data, we will ensure that the consent is freely given, specific, informed, and unambiguous, as required by Malawian law.
10.5 Regulatory Authority
You have the right to lodge a complaint with the Malawi Communications Regulatory Authority (MACRA) or other relevant data protection authority in Malawi if you are concerned about our processing of your personal data.