GO7 Privacy Policy  

Effective Date: May 31, 2025  

GO7 (hereinafter referred to as "we" or "GO7"), operated by CHOICE TAXI & CAR RENTAL Ltd, is committed to protecting user privacy. This policy is formulated in accordance with Rwanda’s Law No. 058/2021 on the Protection of Personal Data and Privacy (DPP Law) and relevant international privacy regulations. It applies to the processing of personal information when you use the GO7 App, official website, and associated mobility services (hereinafter referred to as "Services").  

 1. Data Controller and Processor Responsibilities  

1. Data Controller: GO7 acts as the primary controller, determining the purposes and methods of personal data processing and assuming responsibility for such processing.  

2. Third-Party Processors: In certain scenarios (e.g., payment processing, map services), partners may act as independent processors, subject to their respective privacy policies.  

 2. Data Collection and Usage Scenarios  

 1. User Registration and Account Management  

- Data Categories: Mobile number, email address, name (optional).  

- Purpose: Account creation, identity verification, service notifications.  

 2. Trip Booking and Navigation  

- Data Categories: Pickup location, destination, real-time location (temporarily collected during trips).  

- Purpose: Route optimization, vehicle dispatch, trip navigation (using Google Maps API, with anonymized location data).  

- Special Note: No long-term location tracking or user behavior profiling.  

 3. Trip Service Execution  

- Driver Data Sharing: Passenger name, phone number, and real-time pickup location (automatically deleted post-trip).  

- Service Alerts: Notifications via App or SMS for delays/cancellations.  

 4. Service Improvement and Marketing  

- Data Categories: Trip history, App usage frequency, feedback.  

- Purpose: Feature enhancements, personalized offers (e.g., targeted discounts), ad performance analysis.  

- Legal Basis: Legitimate interest under DPP Law Article 46(7) (service quality improvement).  

 5. Customer Support and Third-Party Bookings  

- Booking via Partners: Hotels/airport partners may collect passenger name, trip time, and pickup/drop-off points.  

- Data Retention: Stored only until service completion and dispute resolution.  

 3. User Rights and Choices  

1. Personalized Communications  

   - Opt-in Scope: Marketing emails, App notifications, third-party ads (e.g., social media).  

   - Opt-out Method: Unsubscribe via email link or disable in App settings (effective within 24 hours).  

2. Data Subject Rights  

   - Access/Correction: Review or edit data via App account settings.  

   - Deletion/Restriction: Submit written requests to customer support (verified identity, response within 30 days).  

   - Data Portability: Request structured trip records (CSV/JSON format).  

 4. Data Security and Cross-Border Transfers  

1. Security Measures:  

   - Dynamic firewalls on servers.  

   - Annual penetration testing and staff privacy training.  

2. International Transfers:  

   - For cross-border data transfers (e.g., overseas partners), compliance with DPP Law Article 49 via Standard Contractual Clauses (SCCs) or equivalent safeguards.  

 5. Data Retention and Sharing  

1. Retention Periods:  

   - Account Data: Retained until 6 months after account deletion (dispute resolution period).  

   - Trip Records: 5 years (tax compliance).  

2. Third-Party Sharing:  

   - Mandatory Disclosure: To law enforcement upon legal request.  

   - Partners: Google Maps.  

 6. Protection of Minors  

- Age Restriction: Users under 16 require parental consent (via additional verification).  

 7. Policy Updates and Contact  

- Policy Changes: Material updates notified via App alerts or SMS.  

- Contact: Email go7@carcarbaba.com.