GOSPOOL PRIVACY POLICY

1. Data Controller

Gospool operates as the Data Controller of your personal data. For any privacy inquiries, you may contact:

• Email: gospoolapp@gmail.com

2. Data We Collect

We only collect the minimum personal data required to provide safe, reliable ride-hailing services.

For Drivers (at registration):

• Full Name
• Phone Number
• Email Address
• Liveliness Video
• Photo of your vehicle
• Vehicle Information (Make, Model, Plate Number)
• Driver’s License Number (for verification)
• National ID Number (NIN) (for identity verification)
• Church Affiliation / Parish
• Next of Kin details

For Passengers (at registration):

• Full Name
• Phone Number
• Email Address
• Liveliness Video
• National ID Number (NIN) (for identity verification)
• Church Affiliation / Parish
• Next of Kin details

We also collect and store data on your activities on the Gospool platform. This data includes:

• Ride orders
• Location details
• Ride details such as route, duration etc
• Review data
• Complaints data
• Chat history

3. Purpose of Data Processing

We process your personal data to:

• Verify user identity and membership within a church community
• Facilitate ride matching between drivers and passengers
• Ensure safety and accountability of rides
• Communicate updates, ride details, and support services
• Comply with regulatory and law enforcement requirements

4. Legal Basis for Processing

We process your data based on:

• Consent which you have given at registration and before ride use
• Contractual necessity in furtherance to fulfilment of the ride hail service through the Gospool platform
• Legal obligation e.g., where required by Nigerian authorities
• Legitimate interest (ensuring platform safety and fraud prevention)

5. Data Sharing & Disclosure

Your personal data may be shared with:

• Other registered users - limited data such as name, phone, picture and church for ride matching. This data will be available on a need to know basis and in such format that it cannot be stored, modified or transferred.
• Regulators or law enforcement where legally required
• Service providers for the purpose of verification or order processing. This is done under strict confidentiality agreements

Please note that Gospool does not sell your data to third parties.

6. Data Storage & Retention

Your data will be stored securely in compliance with NDPR. Under no circumstance will we store your data in hard copy format. All data will be kept only as long as necessary to provide services and comply with legal obligations. At any time when you cease to use the application, your data records may be retained for up to 5 years for audit and dispute resolution.

7. Data Subject Rights

In line with the NDPA and NDPR, you have the right to:

• Access your personal data - view your data on the Gospool platform
• Request correction of inaccurate data - correct any data previously captured incorrectly or update any data to reflect recent records
• Withdraw consent at any time - instruct us to stop processing your data on our platform generally or in specific
• Request deletion of your data - ask us to delete all records of your data on the Gospool platform. However, this is subject to legal obligations
• Object to processing in certain circumstances - particularly with respect to automated decision making
• Request data portability - ask us to transfer your data to any third party in furtherance of fulfilment of a service. This will be subject to appropriate security validation protocols.

To exercise these rights, please send an email to gospoolapp@gmail.com

8. Security Measures

We implement appropriate technical and organizational measures including encryption, access controls, and secure servers to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

9. Cross-Border Data Transfer

Where data is transferred outside Nigeria, such transfers will comply with NDPR/NDPA requirements and only to countries with adequate data protection laws or subject to appropriate safeguards.

10. Children’s Privacy

Our service is not intended for children under 18 years. We do not knowingly collect data from minors.

11. Changes to this Policy

We may update this Privacy Policy periodically. Users will be notified of significant changes via email or platform notification.

12. Contact Us

If you have questions, complaints, or requests regarding this Privacy Policy, contact our Data Protection Officer (DPO):

• Name: DPO
• Email: gospoolapp@gmail.com