Legal

Data Protection Notice

Effective Date: August 5, 2025

1. About ZIDI MOBILITY LTD

ZIDI MOBILITY LTD is a registered company in Kenya that operates a vehicle rental platform. We act as both a Data Controller and a Data Processor as defined under the Data Protection Act, 2019.

2. Purpose of Data Collection

We collect and process personal data to:

  • Facilitate car rental bookings and payments
  • Verify user and vehicle identities
  • Ensure compliance with legal and regulatory requirements
  • Provide customer support and service notifications
  • Improve our platform and user experience

3. Lawful Basis

Our data processing activities are based on:

  • Consent (during signup or use of services)
  • Performance of a contract (booking or listing)
  • Compliance with legal obligations
  • Legitimate interests in running our platform
Processing Activity Lawful Basis
Account registration Consent
Booking processing & payments Performance of a contract
Identity & vehicle verification Legal obligation / Legitimate interest
Marketing communications Consent (opt-in)
Fraud prevention & security Legitimate interest
Regulatory reporting (NTSA, ODPC) Legal obligation

4. Your Rights

You have the following rights under the Data Protection Act, 2019:

  • Right to be informed
  • Right to access your data
  • Right to correct or delete data
  • Right to object or restrict processing
  • Right to data portability
  • Right to lodge a complaint with the ODPC

5. Data Retention

We retain data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

6. Security Safeguards

We use secure cloud infrastructure, access controls, encryption, and user authentication to protect your data from unauthorised access, loss, or misuse.

🛡

Our safeguards include: End-to-end TLS encryption, AES-256 data encryption at rest, multi-factor authentication for admin access, regular penetration testing, and ISO-aligned security practices.

7. Contact & Data Protection Officer

If you have concerns about how your data is handled, contact us at:

Email: privacy@zidimobility.co.ke

Data Protection Officer: To be appointed — contact us for current DPO information.

Data Protection Compliance

ZIDI aligns with Kenya Data Protection Act principles and user rights.