dcrides-privacy-policy-v2

20th September 2026

 

DC Rides

Last updated: 2 September 2026

DC Rides Privacy Notice: Riders

When you use DC Rides, you trust us with your personal information. We're committed to keeping that trust. This notice describes the personal information (“data”) we collect from riders who register for, and use, the DC Rides passenger mobile application and website (together, the “App”), how it's used and shared, and your rights regarding this data under the Protection of Personal Information Act, No. 4 of 2013 (“POPIA”).

This Notice applies to all individuals who register as, or apply to become, riders on the DC Rides platform, and who use the App on any device. By registering for, downloading, or using the App, you acknowledge that you have read and understood this Notice, and you consent to the processing of your personal information as described herein, to the extent such consent is required by law.

I. Overview

II. Data collections and uses

A. The data we collect

B. How we use data

C. Data sharing and disclosure

D. Data retention and deletion

III. Your rights and choices

IV. Legal information

A. Responsible party and Information Officer

B. Our lawful basis for using your data

C. Cross-border transfer of data

D. Updates to this Notice

I. Overview

This notice applies when you use DC Rides to request or receive a ride.

This Notice is issued by KZD Solutions (Pty) Ltd (“KZD Solutions”, “DC Rides”, “we”, “us”, or “our”) in accordance with POPIA and explains what personal information we collect from riders, why we collect it, how we use, store, and protect it, and what rights riders have in relation to their personal information.

No personal information is required to browse the App or select a destination as a Guest. Sign-in or account creation is only required when proceeding to book a ride. This Notice does not describe DC Rides' collection and use of data if you use the App as a driver. Please refer to the separate DC Drive Privacy Notice for that information.

II. Data collections and uses

A. The data we collect

DC Rides collects data that you provide directly, data collected automatically when you use the App, and data from third parties.

1. Data you provide

Data category Data types
a. Account information. Sign-up and sign-in currently use email only — phone number and OTP verification are not in use at this time. Full name • Email address
b. Saved locations. Entered by you. Home, work, and other favourite addresses
c. Payment method details. Entered via our third-party payment provider — DC Rides does not directly store full card details. Payment method reference
d. Ride preferences. Selected per booking. Pet Allowed • Extra Luggage Space • Child Seat • Smoke-Free
e. Communications. In-app chat messages • Support ticket details (subject, description, department, priority, attachments)

2. Data collected when you use the App

Data category Data types
a. Location data. Used to determine your pickup point and provide ride tracking. Real-time GPS location
b. Ride history. Trip origin and destination history • Fares • Ratings • Promo code usage • Scheduled ride and rental booking details
c. Wallet data. In-app wallet balance and top-up transaction history
d. Device data. Device identifiers • Push-notification tokens
e. Usage data. App and website usage and diagnostic logs, for troubleshooting and service reliability

3. Data from other sources

Data category Data types
a. Payment gateway provider. Transaction confirmations and payment status information
b. Mapping/location services provider. Location and mapping data facilitated through our third-party provider
c. Matched driver. Provided once you are matched with a driver for an active ride. Driver name • Vehicle details • Live location

B. How we use data

DC Rides uses data to manage your account, match you with drivers, process payments, provide support, and comply with legal obligations.

# Purpose
1 To register Riders and manage your Rider account
2 To match you with an available driver and facilitate your ride, including navigation and trip tracking
3 To process wallet top-ups and ride payments through our payment gateway
4 To provide customer support and respond to queries, tickets, or complaints
5 To send ride-related notifications (driver arrival, trip status, receipts) and, with consent, promotions and platform updates
6 To monitor, maintain, and improve the safety, security, and performance of the App and the wider Platform
7 To detect, investigate, and prevent fraud, abuse, or breaches of our Rider terms and conditions
8 To comply with applicable legal, regulatory, tax, and record-keeping obligations

C. Data sharing and disclosure

DC Rides does not sell rider personal information. We share it only with the recipients below, for the purposes described in this Notice.

Recipient Purpose / data shared
Payment gateway provider Processes rider payments, wallet top-ups, and related transactions as an Operator on our behalf
Maps and location services provider Real-time location data, to enable navigation, distance calculation, and ride tracking
Assigned drivers Your name, pickup location, and contact number, limited to what is necessary to complete a ride
SARS, credit bureaus, regulatory bodies Where required for financial, tax, or legal compliance
Cloud infrastructure and hosting providers Under data processing agreements, for operational purposes
Regulators, law enforcement, other authorities Where required by law, court order, or to protect rights, safety, or property
Professional advisors Auditors or legal counsel, bound by confidentiality obligations
Successor entities In connection with a merger, acquisition, restructuring, or sale of assets, subject to confidentiality safeguards

D. Data retention and deletion

DC Rides retains rider data for as long as necessary for the purposes described in this Notice, or as required by law.

Where a rider's account is deactivated or a rider requests deletion of their information, DC Rides will delete or de-identify the relevant personal information, save to the extent that continued retention is required by law or necessary to establish, exercise, or defend a legal claim.

Measure Detail
Encryption Sensitive data such as banking/payment details and identity or verification documents, in transit and at rest, where applicable
Access control Password-protected systems and role-based access on a need-to-know basis
Endpoint protection Antivirus and endpoint protection software on company devices
Hosting Secure cloud hosting with encryption in transit and at rest
Backups & patching Regular software updates, security patching, and data backups
Incident response Regular review of security practices and prompt action on suspected incidents

Should a data breach occur that is likely to result in a real risk of harm to affected riders, DC Rides will notify the Information Regulator and affected riders as required under POPIA.

III. Your rights and choices

Subject to applicable exceptions under POPIA, riders have the right to:

Right
Be notified that personal information about them is being collected, and for what purpose
Access the personal information that DC Rides holds about them
Request correction, updating, or deletion of inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained personal information
Object, on reasonable grounds, to the processing of their personal information
Withdraw consent to processing at any time, where processing is based on consent
Object to processing of their personal information for direct marketing purposes
Lodge a complaint with the Information Regulator regarding an alleged interference with the protection of their personal information

To exercise any of these rights, contact our Information Officer using the details in Section IV.A. We will respond to legitimate requests within the timeframes required by POPIA.

Direct marketing. We will only send direct marketing communications (promotions, incentives, referral programmes, or platform updates) if you have consented to receive them, in line with Section 69 of POPIA. You may opt out at any time via the unsubscribe instructions in such communications, your notification preferences in the App, or by contacting our Information Officer.

Children's information. The App is not intended for use by Riders under the age of 18. DC Rides does not knowingly collect personal information from minors through the App. If we become aware that we have inadvertently collected such information, we will take reasonable steps to delete it.

How to contact us

If you have any questions, requests, or complaints regarding this Notice or the processing of your personal information, please contact our Information Officer or Deputy Information Officer using the details in Section IV.A, or write to:

125 Bram Fischer Road, Durban Convention Centre, North Beach, Durban, 4001, South Africa

Should you be dissatisfied with our response, or wish to lodge a complaint directly, you may contact the Information Regulator (South Africa) at JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001; email complaints.IR@justice.gov.za; website www.justice.gov.za/inforeg/.

By creating an account or using the App as a Rider, you confirm that you have read and understood this Notice, and you consent to KZD Solutions processing your personal information as described herein, to the extent such consent is required under POPIA.

© 2026 KZD Solutions (Pty) Ltd, trading as DC Rides. Version 1.0.