Privacy Policy

Ezyride Global Resources Limited (RC 7355881) · Last updated 1 October 2026

This Privacy Policy explains what personal information Ezyride Global Resources Limited (RC 7355881) collects when you use our website, apps and transport services, how we use it, and the rights you have over it. We handle personal data in line with the Nigeria Data Protection Act.

1. Information we collect

• Booking details: your name, phone number, email address, pickup and destination addresses, flight number, travel dates and passenger numbers.
• Payment information: card payments are entered on our payment provider's own secure page (Flutterwave), never on our website or apps. We receive confirmation of payment, the amount and a transaction reference; we never see or store your card number.
• Sign-in details: the phone number or email address you sign in with. One-time sign-in codes are stored only in scrambled (hashed) form and deleted after one day.
• Your location, only when you ask: if you press "Use my location", your device's position is used once to fill in your pickup point and is sent to us only as part of that booking.
• Trip data: vehicle and driver assigned, journey times, and location data during an active trip, for safety and service quality. While your driver is on the way, we show you their approximate position (to about 100 metres) and an estimated arrival time. This comes from the driver's work phone, only while they are on shift.
• Contact records: messages you send us by WhatsApp, email or phone, including support enquiries.
• Website data: basic technical information such as device type and pages visited, used to keep the site working and improve it.

2. How we use your information

• To provide the ride you booked — assigning a driver, tracking your flight, and getting you to your destination.
• To take payment and issue receipts and invoices.
• To contact you about your booking, including driver and vehicle details before pickup.
• To keep passengers and drivers safe, and to investigate incidents or complaints.
• To meet our legal, tax and airport-regulatory obligations.
• To improve our service. We only send you marketing messages if you have asked to receive them, and you can opt out at any time.

3. Our lawful basis for using it

Under the Nigeria Data Protection Act 2023 we must have a lawful basis for each use of your information. Ours are:

• Performing our contract with you — taking your booking, assigning a driver, completing the trip, taking payment and issuing receipts.
• Complying with a legal obligation — tax records, insurance requirements, and the daily airport journey records we are required to keep as a condition of our FAAN concession.
• Our legitimate interests — keeping passengers and drivers safe, investigating incidents and complaints, preventing fraud, and improving the service. We only rely on this where your rights do not override it.
• Your consent — marketing messages, and any optional feature you switch on. You can withdraw consent at any time without affecting rides you have already taken.

4. Where your information is held, and transfers outside Nigeria

Some of the services we use to run Ezyride are operated outside Nigeria, so your information may be transferred and stored abroad. This includes our cloud hosting and database, mapping and address search, SMS delivery for sign-in codes, email delivery, and payment processing.

The providers we use, and what they receive:

• Hostinger — hosting of our website, booking system and database, and our email. Holds the information described above.
• Flutterwave — card and transfer payments. Receives your name, email, phone number and the amount.
• Sendchamp (Nigeria) — delivers sign-in codes by SMS. Receives your phone number and the code.
• OpenStreetMap search by komoot (Germany) and, where enabled, Google Maps Platform (United States) — address search. Receive only the text you type into the address box, never your name, account or booking.
• OpenStreetMap map tiles — show the coverage and tracking maps. Receive the map area being viewed.
• AeroDataBox — flight times. Receives only flight numbers and dates, never who is travelling.
• Google Analytics — website visit counts, as described in section 10.

Where we transfer personal data outside Nigeria we do so on one of the bases permitted by sections 41 to 43 of the Nigeria Data Protection Act — normally because the transfer is necessary to perform our contract with you, or under contractual terms with the provider requiring them to protect your data to a standard comparable to Nigerian law. You may ask us for details of the safeguards that apply to a particular transfer using the contact details below.

5. Who we share it with

• Your driver — the details needed to complete your trip.
• The Federal Airports Authority of Nigeria (FAAN) — as a condition of our airport concession, we keep daily records of airport journeys, including driver and vehicle details, destination, passenger numbers and departure time.
• Our payment provider — to process your payment securely.
• Service providers who help us run our booking, dispatch and communication systems, under contract and only on our instructions.
• Authorities — where we are required to do so by law, or to protect someone's safety.

We do not sell your personal information.

6. Booking for someone else

If you book a ride for another passenger, please make sure they are happy for you to share their name and contact details with us. We will use those details only to deliver their trip.

7. How long we keep it

We do not keep personal information longer than we need it. In practice:

• Booking and trip records — six years, to meet Nigerian tax, insurance and airport-regulatory obligations.
• Location recorded during a trip — 90 days, then deleted or reduced to anonymous route statistics. We keep it this long only so a safety incident or fare dispute can be investigated.
• Trip PINs — deleted once the trip is completed.
• Sign-in codes — one day (they expire after five minutes).
• Driver location from work phones — 90 days, as above.
• Support messages — two years from the end of the conversation.
• Marketing consent records — while you are subscribed, plus two years so we can evidence when and how you consented.

If you close your account we delete or anonymise your information within 30 days, except where we are legally required to keep it.

8. Keeping your data secure

We use appropriate technical and organisational measures to protect your information, including restricted access to booking systems and encrypted connections. Company-issued phones and numbers are used for driver communication so that customer contact stays within Ezyride.

9. Your rights

You have the right to ask us for a copy of the personal information we hold about you, to have inaccurate information corrected, to ask us to delete information we no longer need, to receive your information in a portable form, to restrict or object to certain uses, and to object to marketing at any time.

Deleting your account. You can delete your Ezyride account and the personal information attached to it at any time — in the app under Profile, or by emailing ezyride@ezyrideng.com from your registered address. We will confirm within 30 days. Records we are legally required to retain, such as completed trip and tax records, are kept for the periods above and used for nothing else.

Automated decisions. We use automated systems to match your booking to the nearest suitable driver and vehicle, and to calculate your fare. These do not produce legal effects for you, and you can always ask us to have a person review the outcome.

To exercise any of these rights, or to raise a data protection concern, contact us using the details below. You may also complain to the Nigeria Data Protection Commission.

10. Cookies and website analytics

Our website uses only the cookies needed to make the site function and to understand basic usage. You can control cookies through your browser settings.

We use Google Analytics to count visits and to see which pages people use, so we can tell how many real visitors reach us and where our booking form is letting people down. It tells us things like how many people opened the booking form and how many finished it. It does not tell us who you are.

We have switched off Google's advertising features. We do not allow your visit to be used to build an advertising profile of you, we do not share it for ad targeting, and we do not send Google your name, phone number, email address or pickup address. Your IP address is anonymised. If your browser sends a "Do Not Track" signal, we do not load analytics at all.

If you would rather not be counted, you can block analytics in your browser settings or use a tracker-blocking extension. Nothing about your booking changes if you do.

11. Changes to this policy

We may update this policy from time to time. The current version is always published at ezyrideng.com.

12. Children

Ezyride is not intended for children under 18, and we do not knowingly create accounts for them. A child may of course travel as a passenger when accompanied by a responsible adult who made the booking. If you believe a child has created an account, contact us and we will remove it.

13. Contact us

Ezyride Global Resources Limited (RC 7355881) is the data controller.
Registered office: 23 Allen Avenue, Ikeja, Lagos, Nigeria
Operating office: No 27, Alexandria Crescent, Wuse 2, Abuja, FCT, Nigeria
Email: ezyride@ezyrideng.com · Phone: +234 805 512 0188

For data protection questions specifically, including any of the rights above, write to ezyride@ezyrideng.com marked for the attention of the Data Protection Officer.

If you are not satisfied with our response you may complain to the Nigeria Data Protection Commission (NDPC).