Global Privacy Notice for Drivers
Global Privacy Notice for Drivers
At Bolt, we are focused on making cities for people. To do this, we offer a number of alternative transport solutions including ride-hailing, shared cars, e-scooters, e-bikes and food and grocery delivery. Your safety as a Driver is our priority and this includes the safety of your personal data that we process when you use the Bolt services on the “Bolt Platform” (being the technology infrastructure made available by Bolt to facilitate online intermediation of ride-hailing services, including the Bolt Driver Portal and the Bolt Driver app (“Bolt App”)).
Date when this Privacy Notice was last updated: 28 August 2025
Table of Contents
1. About this Privacy Notice
2. How can you contact us?
3. What personal data do we process?
Personal Data provided by you to Bolt
Personal Data we collect about you when you use Bolt services
Personal Data we collect about you from other sources
4. What purposes do we use your personal data for and what is our Legal Basis for Processing?
For the provision of the Bolt services (including the Bolt Platform)
For Customer Support
For Safety and Security
For marketing and advertising
For service communications
For research and improvement of the Bolt services
For Legal Proceedings and Compliance with the Law
5. Who do we share your personal data with?
6. Does Bolt transfer your personal data to other countries?
7. How do we keep your personal data safe?
8. How long do we retain your personal data for?
9. What are your rights?
10. How do we use your personal data for direct marketing?
11. How do we notify you of changes to this Notice?
1. About this Privacy Notice
This Privacy Notice (“Notice”) describes how Bolt Operations OÜ (“Bolt”, “We” or “Us”), its group companies and third party partners collect and use the personal data of persons providing transportation services via the Bolt Platform - known as “Drivers” (including persons who are in the process of registering or have registered to Bolt as Driver, as well as persons who have previously owned an account as a Bolt Driver). More information about Bolt and its group companies, such as the relevant Bolt group company for your market, is set out here.
The term “you” or “your” refers to a Driver. This Notice lets you know how we promise to look after your personal data and tells you about your privacy rights and the choices and controls available to you.
This Notice applies to all Drivers globally who access the Bolt Platform to fulfil passenger transportation services (and other ancillary transportation services such as package delivery services), whether acting on their own behalf as an independent service provider or acting on behalf of another service provider (for example, acting on behalf of a fleet or another individual). This Notice should be read in combination with all terms and conditions, guidelines and policies that apply to your use of the Bolt services as are made available at https://bolt.eu/legal.
The way we collect, use, and share your personal data may differ depending on the legal requirements of the country or region where you access or provide services through the Bolt Platform. Local laws can influence the types of personal data we process, the purposes for which we process it, the legal basis we rely on and the rights available to you. If you operate or travel across borders, please be aware that the data practices outlined in this Notice may be adapted to comply with the applicable laws of each location. In all cases, we apply safeguards to ensure compliance with relevant legal standards.
2. How can you contact us?
Bolt (or the relevant Bolt group company for your market - as set out here in more detail) is the data controller of your personal data processed under this Notice. We have appointed a Global Data Protection Officer and an Office of the Data Protection Officer Team who can be contacted by emailing our Privacy Mailbox at privacy@bolt.eu - please mark the subject line of the email ‘For the attention of Bolt’s Data Protection Officer’. You can also raise data subject rights requests via our Privacy Web Form available at https://bolt.eu/en/privacy/data-subject/, or raise any privacy-related requests or questions in the Bolt App when you go to the main menu and tap ‘Support’. Our Customer Support Team will then forward the issue internally to the Bolt Privacy Team.
3. What personal data do we process?
We collect and process personal data;
- provided by you to Bolt;
- when you use the Bolt services; and
- from other sources such as Fleet Owners and Fleet Partners, authorised third parties who administer services on behalf of Bolt and Passengers, and in some countries, governmental or public databases.
The table below sets out the different categories of personal data we process about you.
Category of Personal Data | Description of Personal Data |
---|---|
Personal Data provided by you to Bolt | |
Profile Data | We collect personal data about you when you register to access the Bolt Platform including:
|
Vehicle Data | Following market practices and requirements we may collect information about your vehicle and its roadworthiness status, including:
|
Payment Data | Following market practices and requirements we may collect your payment details and banking data, including:
For billing and invoicing purposes, we also collect full name, postal address, date of birth, country of birth, tax identification numbers with issuing countries and TIN (tax identification number) type. |
Identification / Verification Data | We collect identification documents as part of your sign up application. This may include:
|
Demographic Data | We collect demographic data, including:
|
Survey / Interview Data | We collect the contents of your replies or attachments you may send us during the course of surveys and interviews that we conduct. During surveys and interviews, we collect data such as your feedback on your satisfaction with the Bolt Platform, your needs, and any issues you encounter while using the Bolt Platform. |
User Generated Data | We collect personal data when you use certain features. For example, to provide recordings such as audio recordings generated during the trip (as part of our safety toolkit trip audio recording feature, where such feature is available - for more information, please visit https://bolt.eu/en-ee/driver/safety/), or to submit content like pictures, videos, files in connection with a Customer Support request or ratings or feedback about other users. This also includes metadata relating to the method you use to communicate with Bolt. We also collect the feedback and rating you provided to a Passenger after each trip. It is mandatory to give a 1-5* (stars) rating to the Passenger for every trip and leave feedback for those Passengers you rate 1-3* (stars). |
Personal Data we collect about you when you use Bolt services | |
Account Data | We generate and collect information used to identify your specific Bolt account, including:
|
Geolocation Data | We collect data about your precise and/or approximate geolocation (including GPS and IP address) depending on your app settings and device permissions, and your driving routes (including the time, the trip progression, the final destination of a trip and average speed), when you open and use the Bolt App. |
Order Data | We collect details about scheduled trips and specific trips taken via the Bolt Platform, including:
We also collect general information about your trips taken via the Bolt Platform, including:
If you accept cash-rides, we also collect data relating to your preferred payment method (cash or in-app payment method), your on-time or delayed payments to Bolt (such as the commission amount), and in case you get cash-blocked, data about how you repay any commission towards Bolt. |
App and Platform Usage Data | We collect personal data via the Bolt App about your use of the Bolt Platform such as your information on how long you’ve been using the Bolt Platform, your engagement and interactions on the Bolt Platform including:
|
Cookies, SDKs, Analytics, and Third-Party Technologies Data | We collect information through the use of cookies, tracking pixels, data analytics tools, SDKs, and other third-party technologies like advertising IDs, to understand how you navigate through the Bolt App, to make your experience safer, to improve your site and Bolt App experience, to serve you better ads on other sites (according to your marketing preferences), and to save your preferences. For more information about cookies, see our Cookie Declaration. |
Billing and Earnings Data | We collect information on applicable pricing structures that you have selected within the parameters provided by the Bolt App (where applicable). We also collect information on the prices applicable to specific trips taken via the Bolt Platform (including applicable taxation and any prepaid amounts), as well as information on your earnings over certain periods of time (including your gross fare, balance, trips fees, bonuses, tips and overall distance travelled). |
Communication Data | We collect communication and correspondence data when you engage with our Customer Support Team via the in-app chat function, report an incident, communicate via emails, web forms, or speak with our Customer Support agents, or communicate with Passengers via the Bolt App using the in-app chat function or via internet calls (where available). We record the date and time of the communications and its content and your phone number (where you use the call feature). We will record calls, only where you are notified in advance that the call may be recorded. In the markets where we facilitate phone calls and text messages between Drivers and Passengers without sharing either party’s actual phone number with the other, we protect your personal data by using a masked numbers application. |
Identification / Verification Data | We generate and collect information (including biometric information, where permitted by law) relating to the status and results of any verification checks. |
Warning / Suspension Data | We collect details of suspensions or termination that have been issued to a Driver, including:
|
Device Data | We collect data about the devices you use to access our services, including:
|
Consent Data | We collect records of any consents you have provided to Bolt, the time and date of such consent, the means of consent, and any related information (e.g., the subject matter). |
Personal Data we collect about you from other sources | |
Background Check Data | According to relevant local law requirements, we may collect personal data about you from external databases after you submit your registration to check you meet the relevant local regulatory requirements to use the Bolt services, including:
This information may also be collected by an authorised third party service provider on our behalf. |
Identification / Verification Data | Where applicable and according to market practices and requirements, we collect data from third party identity verification providers to verify data related to you, including:
|
Driver Compliance Data | To meet local requirements, we may collect personal data from service providers who carry out vehicle and driver compliance checks. This includes details about your car insurance, liability insurance (if required), vehicle registration, certifications, and other documents needed to provide transportation services in your area. We may also collect screenshots from public databases as evidence that we verified the documents you submitted during registration. |
Contact Data | We collect contact data about you when you connect to the Bolt App via a third party service such as Google, Apple or Facebook, or when a Driver refers you through our referral campaigns, including your:
|
Driver Rating Data | We collect personal data about you, including ratings, feedback, complaints, and safety reports from Passengers about the transportation services you provided. These ratings are combined into an average rating. You won’t see individual ratings or know which Passenger gave which feedback. However, in the Bolt App, you will be able to see the compliments you received from the last 6 months in relation to completed trips (this will include the positive feedback you received after a Passenger left you a 5-star rating). |
Fleet Driver Data | We collect personal data about you from fleet owners and fleet partners, such as your email address, your phone number, your profile picture and your referral code. In addition we collect your National ID, driver license, tax identification number, car license number, pictures of vehicle’s exterior and interior and personal code. Moreover, where permitted by law, we collect background and criminal records data. |
4.What purposes do we use your personal data for and what is our Legal Basis for Processing?
The table below sets out:
- our purposes for processing your personal data;
- our legal grounds (known as a 'legal basis') under data protection law, for each purpose; and
- the categories of personal data we use for each purpose. Learn more about what personal data these categories include in Section 3 “Personal Data that we process about you” above.
Here is a general explanation of each 'legal basis' that Bolt may rely on to process your personal data to help you understand the table below:
- Performance of a Contract: When it is necessary for Bolt (or a third party) to process personal data to provide services under our Bolt Platform terms. Where the legal basis for processing personal data is performance of a contract, and you choose not to provide the information, you may be unable to benefit from the applicable Bolt's services.
- Legitimate Interests: When we process your personal data based on legitimate interest grounds. This includes our commercial and non-commercial interests in providing an innovative, personalised and safe service to you, other Drivers, and other third parties (including Passengers). Where the table below states that we rely on legitimate interests, we have provided a brief description of the legitimate interest. If you would like more information about this (including the balancing test), please contact us using the methods set out in Section 2 “How can you contact us?” above. In countries where legitimate interest is not an available lawful basis for Bolt’s processing activities, we will instead rely on an alternative valid legal basis.
- Consent: When we ask you to actively indicate your agreement to our use of your personal data for a certain purpose, which you have been informed of. Where we rely on consent to process your personal data, you can withdraw your consent to such activities at any time. Withdrawal of the consent does not affect the lawfulness of any processing that took place prior to you giving your consent to us.
- Compliance with Legal Obligations: When we must process your personal data to comply with laws or regulations in the markets we operate in, such as to comply with our licensing conditions and obligations under tax and accounting laws. Where the legal basis for processing your personal data is compliance with legal obligations, and you choose not to provide the information, you may be unable to use the Bolt services.
- Vital Interests: When we process your personal data where it is necessary to protect your vital interests or those of others, for example, in the event of an emergency or an imminent threat to life.
Purpose of processing | Legal Basis | Categories of Personal Data |
---|---|---|
For the provision of the Bolt services (including the Bolt Platform) | ||
To create, update and maintain your Bolt account We collect information about you during the registration process to direct you to the appropriate registration flow and to enable you to create a Bolt account. We also process certain information to enable you to switch between different profiles (for example, profiles where you are acting on your own behalf as an independent service provider or profiles where you are acting on behalf of another service provider). |
|
|
To authenticate your account and verify your identity We collect information to verify who you say you are and in certain circumstances to verify your age and eligibility for a Bolt account, when required by local law. If we ask you to verify your identity (either upon registration, periodically or as a result of unusual activity being detected on your Bolt account) and you are not able to verify your identity, the Bolt services will be suspended to prevent harmful activities (including fraudulent activities) until the verification process is completed. As part of the verification process, you may be asked to submit a selfie and/or ID document to prove your identity. To verify your identity quickly and securely, we may use facial recognition technology to confirm that your selfie shows a clear face and matches the face on your identity document. This involves processing your facial measurements. Your biometric data may be shared with trusted verification providers to confirm your identity. If you prefer not to use facial recognition technology, you can opt for your identity to be manually verified by a member of our team, though this may take longer. You can withdraw consent at any time by contacting our Customer Support Team. When verifying your identity for the purposes of setting up a profile through which you can fulfill services on behalf of another service provider, your data may be shared with that service provider. |
|
Verification Data
|
To enable, improve and customise the transportation services and other services and features like delivery of packages, by connecting Passengers requesting Bolt services with Drivers We use automated processes to ensure that Drivers and Passengers are connected quickly and efficiently. These processes are triggered when a Passenger requests a ride, and we evaluate certain data to determine appropriate trip(s), optimize trip matching, and improve the overall experience on the Bolt Platform, including:
We are continually developing and improving our processes for connecting Drivers with Passengers, and may consider different factors depending on the location in which you are using Bolt’s services. During (and for a defined period after) an active order, we also connect Drivers and Passengers through Bolt’s in-app call and messaging system. |
|
|
To process and verify Driver registrations and compliance documentation We process certain data to facilitate the registration and compliance verification process for Drivers, Fleet Owners and Fleet Companies, and vehicle registrations:
|
|
|
To make sure your ride is the quickest and the most convenient and smooth for everyone We collect Geolocation Data and data on the routes taken during the trip to analyse geographic coverage. This lets us improve recommendations to Drivers about the most efficient routes and facilitate the trip in the best possible way. |
|
|
To calculate prices and process payments We use automated processes to calculate the prices of the trips. These processes are triggered when a Passenger requests a ride, and they evaluate certain data including pickup and drop-off locations, estimated distance, trip duration, and demand conditions to determine both estimated and final trip fees. These fees may be influenced and adjusted based on various factors, including:
We are continually developing and improving our processes for calculating prices, and may consider different factors depending on the location in which you are using Bolt’s services. Depending on your profile type, we also process certain data to allow you to suggest preferred prices and agree prices with prospective Passengers within parameters set by the Bolt App and as adjusted based on trip conditions (where applicable). Price submissions in this context will be shared with the Passenger. Additionally, we process Payment Data to facilitate Passenger payments on behalf of Drivers and Profile Data to process Driver payouts. We also use your Billing and Earnings Data to generate financial documents such as invoices, balance reports and tax reports. |
|
|
To facilitate additional services and programs with third parties We will use Order Data and App and Platform Usage Data, where applicable, to confirm if a Driver is eligible to incentive programs and to give Bolt points or equivalents to the Drivers. Partners can also have visibility of Drivers' data (depending on the specific partner, the data can include name, email address, referral code, phone number, information on the Driver’s tier, photograph and licence plate number) when they want to redeem specific benefits. We also process certain data to determine your eligibility for discounts facilitated by third parties. |
|
|
To connect Drivers with Fleet Partners through Bolt Vehicle Marketplace We process your data to facilitate connections between drivers and Fleet Partners via Bolt Vehicle Marketplace, a feature that allows Fleet Partners to list available vehicles for the Drivers to connect with them directly. As part of this process, we facilitate Fleet Partners to ask drivers for information, such as age, gender, home address, experience in ride-hailing, and expected working hours. This information helps Fleet Partners determine eligibility and match drivers with available vehicles. Some of these questions are optional, and all information collected is used solely for evaluating applications within the Bolt Vehicle Marketplace feature. |
|
|
To ensure marketplace efficiency and compliance with our Bolt Platform Terms We process your data to enable Fleet Owners and Fleet Partners to manage, supervise and support Drivers who operate under their fleet via the Bolt Platform. This includes access via the Fleet Owner Portal to Driver activity, compliance documentation, communication data (if submitted through the fleet interface) and order history to ensure platform and legal obligations are met. Fleet Owners may also receive general account status updates (e.g., suspension) for operational awareness but do not receive full safety or incident reports. |
|
|
For Customer Support | ||
To provide customer support services and receive and process feedback We process your personal data to investigate and address requests for support, including reported safety incidents / alleged criminal acts and complaints submitted to us. We also use the data you share to address possible violations of our Bolt Platform Terms and to improve the Bolt Platform. For safety related incidents, your Warning and Suspension Data will be consulted by Bolt’s Customer Support and/or Safety Team when investigating a safety/criminal incident on the Bolt Platform involving you. The Teams will also review Passengers' reasons for issuing low ratings to Drivers, and the circumstances surrounding potential safety incidents. We may use some automated processes for basic complaint resolution purposes via our automated chat function. For further information regarding how to object to the above activities, please see Section 9 “What are your rights?” below. |
|
|
For Safety and Security | ||
To enable and provide safety features We use data to ensure Bolt services are secure and have implemented a variety of safety features to enhance the safety of our Bolt Platform users. Depending on your country of operation, these may include:
|
|
|
To determine an average Driver Rating and identify potential non-compliance with our Bolt Platform Terms To provide a safe and accountable marketplace environment, Passengers may rate and provide feedback on their experience after each trip. We use this information to calculate your average Driver Rating and may apply a minimum threshold for continued access to the Bolt Platform. The Driver Rating feature allows Passengers to make informed choices by showing the average rating a Driver has received from other Passengers. In addition, to provide reliable services to Passengers, we may monitor Drivers’s compliance to our Bolt Platform Terms to ensure that Drivers:
|
|
|
To prevent, detect, and address harmful activities (including fraudulent activities) and ensure platform integrity We process certain data to identify and mitigate harmful activities, including fraudulent behaviour, unauthorized use of accounts, and other actions that may compromise the safety and integrity of the Bolt Platform:
In addition to automated fraud detection, cases flagged for suspicious activity undergo manual review by our team to ensure fair decision-making. Our fraud detection systems analyze patterns in Order Data, App and Platform Usage Data, Geolocation Data, and Profile Data to identify potential fraudulent behavior. Automated checks are used to flag suspicious activity, but no final decisions—such as account suspensions or terminations—are made without human review. |
|
|
To unmatch a Driver and a Passenger in order to ensure a safe platform environment for Drivers and Passengers If either you or a Passenger gives a 1-star rating after a trip, that person can choose to block future rides with the other. Just tap the ‘Block Future Requests’ button. Once selected, you won’t be matched with that Passenger again, unless one of your accounts is deleted. |
|
|
To temporarily suspend and/or terminate Drivers who do not comply with our Bolt Platform Terms If you continue to violate our Bolt Platform Terms after we’ve warned you, your Driver account may be temporarily suspended or permanently closed.For information regarding how to object to the above activities, please see Section 9 “What are your rights?”. |
|
|
To implement feature access restrictions in cash-heavy markets where suspicious activities regarding commission payments to Bolt are detected and reviewed (e.g. cash-block limits). We implement access restrictions to certain features based on unusual activities, as defined by our experience with our Bolt Platform users. We define these unusual activities through various parameters. When a specific threshold of a parameter is reached, access to the corresponding feature is restricted. We set a restriction on cash rides based on the risk assessment. When there's an increased risk of unpaid commissions, the ability to perform further cash rides is restricted to prevent financial losses. To do that, we check App and Platform Usage Data and Profile Data to determine the Driver’s eligibility to perform more cash rides. We retain the data necessary for this purpose for up to one year, considering both lifetime behavior (past 12 months) and recent activity (last 90 days). |
|
|
To ensure the security of the Bolt services (including the Bolt Platform) Depending on the issue, all Data may be used for technical, fraud and cyber security reasons: for example measures for combating piracy and ensuring the security of the service, website, and Bolt Platform as well as for making and storing back-up copies and preventing/repairing technical issues. |
|
|
For marketing and advertising | ||
To market and advertise Bolt services and those of partners according to your preferences and measure the effectiveness of Bolt’s ads on third party apps and websites This includes using your personal data to send and personalise emails, text messages (including WhatsApp messages), push notifications, in-app messages and other communications marketing Bolt’s products, services, features, offers, promotions, news and events of Bolt and our partners, as well as to facilitate your participation in competitions, campaigns, giveaways, sweepstakes, and events. We use pixels and similar technologies to track which emails are opened and which links are clicked by you, to help us measure the results of our campaigns. We may also share your personal data with third parties, or collect data regarding your visits and actions on third-party apps or websites, for the purposes of personalised ads and conversion analytics. |
|
|
For car branding purposes We will use and share your email address, phone number, car model and licence plates with our branding partners to contact you and organise the branding of your car. |
|
|
For service communications | ||
To communicate with you, including sending service-related / operational communications Your name, phone number and email address will be used to communicate and send you communications via email, text messages (including WhatsApp messages), push notifications, in-app messages, and updates and reports, including about you and your use of the Bolt Platform and experience. |
|
|
To get your feedback on your level of satisfaction with Bolt services through surveys and interviews to take informed business decisions These surveys and interviews are designed to understand your feedback on our services, to measure your satisfaction and perception of safety and enable us to take actions to improve the experience. The Survey and Interview Data may be shared with research partners we use to understand your feedback. |
|
|
For research and improvement of the Bolt services | ||
To perform research, testing, and analytics to understand better our business and services and improve our websites and apps We collect data, for example, Geolocation Data, such as the routes taken, to analyse the geographic coverage to make recommendations to you or we collect for example App and Platform Usage Data to revise our security practices, algorithms, machine learning and other modeling and improve our operations, processes and platform. |
|
|
To develop new products, features, partnerships, and services |
|
|
To prevent, find, and resolve software or hardware bugs and issues We also collect certain information to resolve quality issues related to your use of the Bolt App. |
|
|
For Legal Proceedings and Compliance with the Law | ||
To look into and respond to complaints or disputes about your use of Bolt, and to meet legal obligations or respond to requests from courts, regulators, or law enforcement Depending on the claim, all data may be processed for establishing, exercising or defending legal claims, including;
In some cases, we have a legal obligation to share your information with third parties - for example, if we receive a court order or need to cooperate with a data protection authority, or other relevant authority. We also respond to lawful requests from police or other public bodies, especially in emergencies, legal disputes, or where someone’s safety is at risk. We always check that we have a lawful basis to share your data and keep a record of the decision. |
|
|
To fulfill our legal and regulatory obligations (including tax obligations to comply with tax legislation) and where applicable, KYC (know-your-customer) and AML (anti-money laundering) obligations under applicable law. |
|
|
To financially manage Bolt’s business We process certain data for general financial management purposes, including corporate audit. |
|
|
To reorganise or make changes to our business |
|
|
When we process your personal data for a new purpose different from the purpose your personal data was originally collected for and we haven't asked for your consent, we take steps to check that this new purpose is compatible with the initial purpose we collected it for. We will take into account any link between the two purposes and decide if the personal data can be used for this new purpose. Otherwise, we will take appropriate steps to ask for your consent or refrain from processing your personal data.
5. Who do we share your personal data with?
We may share your personal data with the following categories of recipients.
Category of Recipients | Description |
---|---|
Bolt Group Companies and partners | We may share your personal data with our Bolt Group Companies (including Bolt local subsidiaries), Partners and their representatives who may similarly use your personal data in the manner described in this Notice. If Bolt Group Companies are responsible for processing your personal data, they may share your personal data with Bolt Operations OU as the main data controller for Bolt. |
Our Passengers | Your name and photo is disclosed to Passengers, when you have offered an order. When you get matched with a Passenger and decide to offer the ride, Passengers will see your name and photo vehicle make, model, colour and vehicle photo, license plates, phone number, photo and geolocation data (before and during the trip). Additionally, Passengers will have access to your average rating and total number of trips. Passengers also see your personal data like your full name, service license number (if applicable), the registration number of the vehicle, the date, the time, the start and end locations and route map in the receipt. Passengers will also see the preferred and agreed prices (as applicable) that you submit for relevant orders. |
Other Drivers | If you are referred to us by an existing Driver, we’ll receive personal data (referral code) about you from other Drivers participating in the Bolt Driver Referral Programme. When verifying your identity for the purposes of setting up a profile through which you can fulfill services on behalf of another service provider, your Identification / Verification Data may be shared with that service provider, as well as your Trip Data. |
Bolt Business Clients and other Bolt account owners | Some rides you offer may be requested or paid for by others than the Passengers like Bolt Business Clients or other Bolt account owners. In this case we may share with that other party some of your data like your name, your license plates and trips (pick up and drop off points). This information will be disclosed to our Business Clients via reports they can access on their Business Accounts. |
Bolt Partners | Depending on your location, your personal data may be disclosed to third-party vehicle suppliers and/or Fleet Partners (including rental and proxy fleets). Via the Fleet Owner Portal, they will have access to your order history and vehicles, including the model, license plate of such vehicles and transport license expiration dates, your name, mobile phone number, email and they will view your Bolt Platform activities, including possible violation of our Bolt Platform Terms and finished order metrics, your earning reports and payouts, your receipts and/or invoices issued by you to the Passengers after the ride taken via the Bolt Platform, your receipts and/or invoices issued by Bolt to you, and by you to Bolt, compensation invoices issued by Bolt to the Fleet Partners, and the terminations/suspensions imposed on you or any other persons authorised to provide transportation services on behalf of you. |
Promotional, marketing and strategic partners | We may share limited data like your email address with our promotional, marketing and strategic partners so that they can inform you about promotional events and provide you with information and marketing messages about our products or services that may interest you. When you also enroll in partnerships programmes (discounts/loyalty programmes) some limited data will be shared with these partners such as information about your use of the programmes. These parties will use your personal data in accordance with their own privacy policies as separate data controllers. In addition, we may share your personal data with marketing platform providers, including social media advertising services, advertising networks, third-party data providers, to reach or better understand our users and measure the effectiveness of our ads on other platforms. |
Insurers | We will share your data with insurers, where you, or a family member in your absence, request for a claim to be processed, to facilitate the processing of insurance claims and for reporting purposes due to contractual requirements from the insurers. We will also share data with insurers, to manage and settle claims to avert further damage to us. |
Third Party Service Providers | Our third party vendors and other service providers and contractors have access to your personal data to help carry out the services they are performing for us or on behalf of us. This may include vendors and providers who provide email or moreover electronic communication services, tax, legal and accounting services, product fulfillment, background checks and identity/verification processes, payment processing, and facilitation, insurance coverage (data sharing with insurers, where you, or a family member in your absence request for a claim to be processed, to facilitate the processing of insurance claims and for reporting purposes due to contractual requirements from the insurers) and financial instruments, customer support, fraud prevention and detection, data enhancement, web hosting and cloud storage, research, including surveys, analytics, crash reporting, performance monitoring and artificial intelligence, machine learning and statistical services. In addition, we will share data like your geolocation and your driving routes with Google in connection with the use of Google maps in our apps and data like your license plates or other data with airports in case it is required by the airport as a condition for operating at the airport. |
Other Third Parties | In the event of a likely change of control of the business (or a part of the business) such as negotiations for a sale, an actual sale, a merger, and acquisition, or any transaction, or reorganisation, we may share your personal data with interested parties, including as part of any due diligence process with new or prospective business owners and their respective professional advisers. We may also need to transfer your personal data to that third party or re-organised entity after the sale or reorganisation for them to use for the same purposes as set out in this policy. We may also need to check your information against public and/or government databases to confirm the validity of certain compliance documents that you have provided. |
Law Enforcement, Data Protection, Tax, Transport and Licensing Authorities and other relevant Third Parties | We may disclose information under a court order or where we cooperate with a data protection supervisory authority or a licensing authority in handling complaints or investigations. For example certain information must be recorded and shared with the relevant licensing authority when investigating complaints, including the complainant's details, complaint details, driver involved, the date of the alleged incident, and the details of the investigation and actions taken as well as the date the complaint was resolved. We may also share your personal data with law enforcement or other public authorities, such as tax, transport and licensing authorities, including responding to requests when the information is required by law or furthers a public interest task or for example as a result of DAC7 implementation. We may also share your data to other relevant third parties, including emergency services, where the information furthers a public interest task, is necessary in the context of a legal dispute, and/or someone’s life is at risk. In any scenario, we will take steps to ensure that we have a lawful basis on which to share the information, and we’ll make sure that we document our decision. |
Please note, that our websites and apps may contain links to other third-party websites. If you follow a link to any of those third-party websites, please be aware that those websites may have their own privacy notices and that we do not accept any responsibility or liability for their notices or their processing of your personal data. Please check these notices before you submit any personal data to such third-party websites.
6. Does Bolt transfer your personal data to other countries?
We operate internationally and as a result, your personal data may be transferred to, stored and/or processed by Bolt Group Companies, subcontractors and partners when undertaking the activities described in this Notice outside the country where you are located. Please see our Bolt Group Companies table for details of the countries where your personal data may be transferred to within the Bolt Group.
When we transfer your personal data outside of a country or region, such as the European Economic Area (“EEA”), we will make sure that we take steps necessary to comply with applicable legal requirements and rely on the following transfer mechanisms:
- Adequacy Decisions: We will rely on decisions from the European Commission where they recognise that certain countries and territories outside of the European Economic Area ensure an adequate level of protection for personal information. Please click here ↗ to see the list of countries deemed ‘adequate’ by the European Commission and click here ↗ to see the list of countries deemed ‘adequate’ by the UK Government. We rely on these adequacy decisions when we transfer personal data we collect from the EEA and the United Kingdom to the United States (where some of our third party service providers are based).
- Standard Contractual Clauses (SCCs): We will utilise standard contractual clauses approved by the European Commission for transfers outside the EEA and by the UK Government for transfers outside of the United Kingdom. Please click here ↗ to see the EEA SCCs and click here ↗ to see the UK SCCs. We will rely on SCCs when we transfer personal data we collect from the EEA and the United Kingdom to the United States, Singapore and Nigeria where some of our third party service providers are based.
There may be certain situations (such as responding to law enforcement requests - see Section 4 “What purposes do we use your personal data for and what is our legal basis for processing?” above) where a transfer of personal data will take place on the basis of exemptions provided for under applicable data protection legislation. In these circumstances, we will take steps to minimise and protect the personal data transferred.
7. How do we keep your personal data safe?
The security of your personal data is very important to us, and we have implemented appropriate technical and organisational controls to protect your personal data against unauthorised processing and against accidental loss, damage or destruction. We have implemented data encryption in transit and at rest, data privacy and security training, information security policies and controls around the confidentiality, integrity and availability of our data/systems.
Any personal data collected in the course of providing Bolt Services is transferred to and stored in our data centres which are located within the EEA. Only authorised employees of Bolt group companies and partners have access to the personal data and they may access the data only for the purpose of resolving issues associated with the use of the services (including disputes regarding transportation services and customer support services in the respective countries https://bolt.eu/cities/).
For our research and scientific purposes, all data, like bulk Geolocation Data, is anonymised so you can never be identified from it. Regarding anonymised data, we will not attempt to re-identify your personal data that has been deidentified, in the course of sharing your data with other organisations.
You are responsible though for choosing a secure password when we ask you to set up a password to access parts of our sites or apps. You should keep this password confidential and you should choose a password that you do not use on any other site.
8. How long do we retain your personal data for?
We keep your personal data only as long as necessary to provide you with the Bolt Services and for the purposes described above.
This means that the retention periods will vary according to the type, the amount and sensitivity of your personal data, the potential risk of harm from unauthorised use or disclosure of your personal data and the reason that we have collected the personal data in the first place.
Here are some of the categories of our retention periods:
Retention Periods Criteria | Description |
---|---|
Personal data retained until you remove/delete it | It's your right to request that we delete certain of your personal data. See Section 9 “What are your rights” for more information. |
Personal data that expires after a specific period of time | We have set certain retention periods so that some data is not retained after a specific period of time. See table below for further details. After a retention period has lapsed, the personal data is securely deleted, unless it is necessary for the establishment, exercise or defence of legal claims. |
Personal data retained until your Bolt account is deleted | We keep your data, including your selfie and identification documents, until your Bolt account is deleted unless further retention of certain personal data are required for the purposes described in the second table below. |
We have listed below the specific retention periods that apply to the personal data we process about you:
Category of Retention Periods | Description |
---|---|
Accounting and financial reporting purposes | We retain data for 10 years after the last trip if your personal data is necessary for accounting purposes and for 3 years after the last trip regarding financial data in relation to transportation services provided to Passengers. |
Provision of services purposes | We retain your data for the life of Drivers’ accounts if such data is necessary to provide our services. But if your account will be closed the personal data will be deleted unless such data is still required to meet any legal obligation, or for accounting, dispute resolution or fraud prevention purposes. You may request deletion of your account at any time through the Bolt App. See Section 9 “What are your rights?” below for more information. |
Formal investigations of a criminal offence, fraud or false information | We retain data for as long as necessary according to the internal, legal, and regulatory requirements, if there are formal investigations of a criminal offence, fraud or false information having been provided. |
Disputes | We retain data in the event of disputes, until the claim is satisfied or the expiry date of such claims. |
Complaints | We retain a record of all complaints which we make available to an authorised officer of the licensing authority on request in the case of an investigation for 12 months. |
Instant Messages | We retain data about instant messages between you and the Customer Support Team directly in the Bolt App for 60 days from the last communication and in Bolt’s databases for 3 years from the last communication. Instant messages between Drivers and Passengers are kept in the Bolt App only until the order is completed and for 30 days after in our systems. |
Audio Trip Recording | We retain Audio Recording Data through our Audio Trip Recording Feature: 24 hours, while stored locally on the device of the person who generates the recording. The recordings are automatically deleted after 24 hours if a report to Bolt’s Customer Support team is not created and the recording is not explicitly shared with Bolt’s Customer Support team as part of the report. Recordings shared and investigated by Bolt will be automatically deleted after 7 days unless the retention period is manually extended for investigation/legal reasons. |
Customer Support | We retain data in relation to support tickets, phone calls and chats for 3 years. |
Geolocation Data | We retain your Geolocation Data for 2 years from the time it is collected. |
9. What are your rights?
Where applicable, you have following data subject rights:
- Access your personal data (known as “Right of Access”): You have the right to access and to request copies of your personal data by contacting our Customer Support Team. Depending on where you are, you can access a copy of your personal data via our data export tool by navigating to the ‘Privacy’ section of the Bolt App.
- Update/correct your personal data (known as “Right of Rectification”): You have the right to request us to correct personal data that is inaccurate or incomplete. You can change and correct certain personal data yourself within the Bolt App or by contacting our Customer Support Team.
- Delete your personal data (known as “Right of Erasure”): You have the right to request that we erase your personal data, under certain conditions (e.g., we are processing your personal data under your consent). Personal data that is processed pursuant to a legal obligation or where we have an overriding legitimate interest may not be deleted upon request. You can request erasure of your personal data by contacting our Customer Support Team.
- Restrict use of your personal data (known as “Right to Restrict Processing”): You have the right to request that we restrict the processing of your personal data, under certain conditions (e.g., we are processing your personal data under consent). You can request restriction of the use of your personal data by contacting our Customer Support Team.
|
- Object to solely automated decisions being made about you which has legal or similarly significant effect on you (known as “Right to object to automated decision making”) - You have the right, under certain circumstances, to object to any solely automated decisions we have made which have a legal effect or similarly significant effect which does not involve human review. You can ask that a person review the decision, obtain an explanation of the decision reached after such assessment and challenge the decision by contacting our Customer Support Team. Please note that certain exceptions and limitations may apply to your right to object to automated decision-making, as permitted by applicable laws and regulations. We will provide you with clear information regarding the implications of exercising your rights and the processes involved in objecting to solely automated decision-making.
- Port your personal data (known as “Right to Data Portability”): You have the right to request that we transfer the personal data that you have given us to another organisation, or directly to you, under certain conditions. This only applies to information you have given us. You can request for your personal data to be ported by contacting our Customer Support Team.
- Withdraw your consent: If we process your personal data using consent as legal basis, then you have the right to withdraw your consent at any time (e.g., by unsubscribing from marketing communications or by updating your communication preferences in the Bolt App). Where we rely on consent as the primary legal basis to process your personal data, your withdrawal of your consent may affect your ability to use the Bolt Platform. Withdrawing your consent won’t change the legality of processing undertaken by Bolt before you withdraw your consent.
- File a complaint: If you have any concerns regarding the processing of your personal data, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (“AKI”) ↗who is our lead supervisory authority or your local data protection authority. You can find their contact details on their websites. You may also have a right to seek a judicial remedy.
To exercise any of the above rights, you can contact our Customer Support Team via the Bolt App or via our website. You can also contact the Office of the Data Protection Officer Team by emailing our Privacy Mailbox at privacy@bolt.eu - please mark the subject line of the email “For the attention of Bolt’s Data Protection Officer”. You can also contact our Customer Support Team via the Privacy Web Form available at https://bolt.eu/en/privacy/data-subject/ or in the Bolt App when you go to the main menu and tap ‘Support’. Our Customer Support Team will then escalate the issue internally to the Bolt Privacy Legal Team.
10. How do we use your personal data for direct marketing?
Please be aware that you may from time to time receive updates about special offers and promotions related to our services. We send these communications based on our legitimate interests (soft opt-in) in providing you with information about opportunities that could be beneficial to you. In countries where soft opt-in is not an available lawful basis for Bolt’s processing activities, we will instead rely on an alternative valid legal basis. You have complete control over these communications, and if you decide at any time that you do not wish to receive them, you can stop them by clicking the “unsubscribe” link at the bottom of our emails, typing “STOP” for messages and SMS, or updating your communication preferences in your account settings.
Additionally, we may seek your opt-in consent for specific direct marketing activities where this is required by law. For example, we might request your consent to send you information regarding third-party promotions and offers that we think might be of interest to you. You always have the ability to opt out by changing your communication preferences in your account settings. We also personalise direct marketing messages using information about how you use the Bolt services (for example, how often you use the Bolt App).
11. How do we notify you of changes to this Notice?
We may make changes to this Notice from time to time. If we make significant changes, we will notify you (as required) via the Bolt App, website or via another method such as email.