1. Introduction
Goobygo ("we", "us") is committed to protecting your privacy in compliance with the data-protection laws applicable in your country (POPIA in South Africa, UK/EU GDPR, and equivalent laws elsewhere). This policy explains how we collect, use, and safeguard your personal information.
2. Information We Collect
We collect the following types of personal information:
- Identity: Full name, ID number, date of birth
- Contact: Email address, phone number, physical address
- Identity (KYC) Documents: ID copies, proof of address, selfie verification, license photos, vehicle details
- Financial: Bank account details for payouts, transaction history, wallet balances
- Usage Data: Booking history, ratings, reviews, location data during service delivery
- Technical: IP address, browser type, device information
3. How We Use Your Information
- To verify your identity (KYC compliance)
- To process bookings, payments, and payouts
- To match clients with appropriate providers
- To facilitate shuttle dispatch and route optimization
- To send booking confirmations, status updates, and notifications
- To maintain ratings, reviews, and platform quality
- To prevent fraud, abuse, and illegal activity
- To comply with legal obligations
4. Identity (KYC) Data & Sensitive Information
Identity verification documents (ID copies, selfies, biometric data) are classified as special personal information under your local data-protection law (POPIA in South Africa, GDPR in the EU/UK). These documents are:
- Encrypted in transit and at rest
- Accessible only to you and authorized admin reviewers
- Retained for the period required by your local KYC/AML legislation (typically 5 years)
- Automatically deleted after the retention period unless legally required
5. Information Sharing
We do not sell your personal information. We may share data with:
- Payment processors (for transaction processing)
- Service providers (for email, SMS, cloud hosting)
- Law enforcement (when legally required)
- Other users (limited to what's necessary for bookings — e.g., client address shown to assigned provider/driver)
6. Data Security
We implement industry-standard security measures including SSL encryption, secure cloud storage, access controls, and regular security audits. Despite these measures, no system is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Under your local data-protection law (e.g. POPIA in South Africa, GDPR in the EU/UK), you have the right to:
- Access your personal information ("download my data")
- Request correction of inaccurate information
- Request deletion of your data (subject to legal retention requirements)
- Object to processing of your data
- Withdraw consent for marketing communications
- Lodge a complaint with your local data-protection authority (e.g. the Information Regulator in South Africa)
8. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies for advertising without your consent.
9. Data Retention
We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law. Identity verification documents are retained for 5 years per local KYC/AML requirements. Booking and transaction data is retained for 7 years per tax regulations.
10. Contact
For privacy enquiries, data access requests, or complaints, please contact our Information Officer through the Platform's support channels.