Drove Rides Privacy Policy:
Effective Date: January 25, 2026
Last Updated: October 23, 2026
- Introduction
BNA Drove Rides Technology ("Drove," "we," "us," or "our") operates droverides.com and related mobile applications (collectively, the "Services"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.
By using our Services, you consent to the data practices described in this policy.
- Information We Collect
We collect information to provide and improve our Services. The type of information collected depends on your interaction with us:
Non-Personally Identifying Information: Like most digital services, we automatically collect non-personal data such as browser type, language preference, referring site, device type, and the date/time of your requests. This helps us understand usage trends and improve our platform.
Personally Identifying Information (PII): When you register, book a ride, or interact with us, we may collect PII such as your full name, email address, phone number, and profile picture.
Transaction and Financial Information: To process payments, we collect necessary transaction details. Note: Drove does not store raw credit card numbers or sensitive authentication data. All payment processing is securely outsourced to PCI-DSS compliant third-party providers (e.g., Fidelity Bank).
Location Data: With your explicit permission, we collect precise location data to facilitate ride bookings, track drivers, and calculate fares.
- Data Security Implementations
Drove employs robust technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:
Encryption:
In Transit: All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.2 or higher (HTTPS).
At Rest: Sensitive personal data and database backups are encrypted using AES-256 encryption.
Access Controls: We enforce strict Role-Based Access Control (RBAC) and the principle of least privilege. Administrative access to our systems requires Multi-Factor Authentication (MFA) and is strictly monitored.
Vulnerability Management: We conduct regular security assessments, automated vulnerability scanning, and timely patch management to protect our infrastructure against known threats.
Third-Party Security Vetting: We only partner with third-party service providers (e.g., payment gateways, SMS providers) who undergo rigorous security vetting and are contractually obligated to maintain compliance with recognized security standards (e.g., PCI-DSS).
Incident Response: We maintain a formal Incident Response Plan to rapidly detect, contain, and investigate any suspected security breaches, including notifying affected users and regulatory authorities as required by law.
Data Minimization: We only collect and retain the data strictly necessary to fulfill the purposes outlined in this policy, and we securely delete or anonymize data when it is no longer needed.
- How We Use Your Information
We use the collected information to:
Provide, operate, and maintain our ride-hailing and logistics Services.
Process transactions and send related information (e.g., receipts, OTPs).
Communicate with you, including sending service updates, promotional offers, and responding to support requests.
Monitor and analyze usage trends to improve user experience and platform security.
Comply with legal obligations and enforce our Terms of Service.
- Information Sharing and Disclosure
Drove does not sell, trade, or rent your personally identifying information to third parties. We may share your information only in the following circumstances:
Trusted Service Providers: With employees, contractors, and affiliated organizations that need to know this information to process it on our behalf (e.g., cloud hosting, customer support). These parties are bound by confidentiality agreements.
Legal Requirements: In response to a subpoena, court order, or other governmental request, or when we believe in good faith that disclosure is reasonably necessary to protect the property, rights, or safety of Drove, our users, or the public.
Business Transfers: If Drove, or substantially all of its assets, are acquired, or in the unlikely event that Drove goes out of business or enters bankruptcy, user information would be one of the assets transferred to the acquirer.
- Cookies and Tracking Technologies
We use cookies and similar tracking technologies to identify and track visitors, understand their usage of our Services, and manage access preferences. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some features of our Services may not function properly.
- Your Privacy Rights
In accordance with the Ghana Data Protection Act, 2012 (Act 843) and other applicable laws, you have the right to:
Access the personal information we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your account and associated personal data, subject to legal retention requirements.
Withdraw consent for data processing (e.g., marketing communications) at any time.
To exercise these rights, please contact us using the information provided in Section 10.
- Third-Party Links and Advertising
Our Services may contain links to third-party websites or display advertisements delivered by advertising partners. These third parties may set their own cookies to compile information for targeted advertising. This Privacy Policy covers only Drove’s use of cookies and does not apply to the practices of third-party advertisers or external websites. We encourage you to review the privacy policies of any third-party sites you visit.
- Changes to This Privacy Policy
Drove may update this Privacy Policy from time to time at our sole discretion. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date." For registered users, we may also send an email or in-app notification. Your continued use of the Services after any such changes constitutes your acceptance of the revised policy.
- Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer / Support Team at:
Email: privacy@droverides.com
Write to us: https://droverides.com/ticket