Privacy Notice for Vehicle Owners (Kenya)

This Privacy Notice for Vehicle Owners provides information about how Bolt Support KE Limited (Company Registration Number PVT-AAAFUB9) located at 10th Floor, Riverside Square, Riverside Drive, Nairobi, Kenya (“Bolt Kenya”) processes personal data of Vehicle Owners on the Bolt platform. The privacy notice describes what data and why we process, how we keep personal data safe and what choices and controls are available to you. You can also find information about your privacy rights in the privacy notice.

If you are a Vehicle Owner on the Bolt platform, please read this privacy notice as it contains important information about the processing of your personal data.

The terms “you” and “your” refer to an owner of a vehicle who lends, rents, borrows or otherwise provides their vehicle to a Bolt driver for use on the Bolt app.

Please note, that our websites and apps may contain links to other third-party websites. If you follow a link to any of those third-party websites, know that they have their own privacy policies and that we do not accept any responsibility or liability for their policies or their processing of your personal data. Please check these policies before you submit any personal data to such third-party websites.

1. Controller Information and Contact Details

  • Bolt Kenya is the controller of personal data of vehicle owners. The term "us" or "we" collectively refers to Bolt Kenya and the owner of the Bolt app, Bolt Operations OÜ (“Bolt”), a private limited company, founded in the Republic of Estonia. Bolt may act as an independent controller and/or a processor of your personal data.

  • We have an appointed Data Protection Officer who can be contacted by email at privacy@bolt.eu.

2. Personal data we process

  • We process the following personal data that you provide to us:

▪ Your name, surname, ID number, and phone number; and ▪ Information about your vehicle, such as: (i) your vehicle Logbook, which includes the following: vehicle make, model, year, chassis number, engine number, and license plate/registration number); (ii) your vehicle PSV inspection status (valid/invalid); and (iii) the insurance status of for your vehicle (valid/invalid and expiry date).

  • In addition to the data you provide to us, we collect and receive your data from other sources, which include service providers who conduct background checks.

3. Purposes of the processing

  • In order to fulfil our commitment to safety and in order to comply with our legal obligations, we collect and process personal data provided by you as an owner of a vehicle used on the Bolt app, during the registration and onboarding of new Bolt drivers. We may also process your personal data to verify and validate existing Bolt drivers.

  • The primary purposes for processing your data are to:

▪ confirm ownership of vehicles used on the Bolt app; ▪ confirm the public service vehicle (PSV) status of vehicles used on the Bolt app; ▪ validate that Bolt drivers are driving a vehicle that is registered with the relevant local transport authority; ▪ validate that the vehicle used by a Bolt driver has been authorised by its owner; ▪ verify the identity of Bolt drivers, by assessing whether they are driving a recognised vehicle; ▪ contact you, as a vehicle owner, and provide assistance to local authorities in the event of an emergency or incident involving your vehicle on the Bolt app; and ▪ to otherwise prevent issues such as driver impersonation and unauthorized vehicle sharing.

  • For our service provision, the Bolt app also displays vehicle details for Bolt passengers to identify Bolt drivers and vehicles.

  • Where personal data is processed for a new purpose other than that for which the personal data are originally collected and the processing is not based on your consent, we carefully assess the permissibility of such new processing. We will, in order to ascertain whether processing for a new purpose is compatible with the purpose for which the personal data are initially collected, take into account, inter alia:

▪ any link between the purposes for which the personal data are collected and the purposes of the intended further processing; ▪ the context in which the personal data are collected, in particular regarding the relationship between you and us; ▪ the nature of the personal data, in particular whether special categories of personal data are processed or whether personal data related to criminal convictions and offences are processed; ▪ the possible consequences of the intended further processing for you; and ▪ the existence of appropriate safeguards, which may include encryption or pseudonymisation.

4. Legal basis

  • Legitimate interest: we may process your personal data on the grounds of legitimate interest for the following purposes:

▪ to protect the safety of our users on the Bolt app (by conducting driver and vehicle verifications); ▪ to investigate and detect fraudulent and/or other malicious activities on the Bolt app, which your vehicle may be involved in; and ▪ to establish, exercise or defend legal claims, or instruct our legal advisors.

  • Legal obligation: we may process your personal data to comply with legal obligations in your country, including during the investigation of a crime by law enforcement, or during a security or emergency incident involving your vehicle. We may also disclose your personal data under a court order or where we cooperate with a regulator or public authority in handling complaints or investigations. In any scenario, we will always make sure that we have a lawful basis upon which to share your data, and we will make sure that we document our decision.

  • Vital interests: we may process your personal data in order to protect the vital interests of a Bolt driver who uses your vehicle, or the passengers in your vehicle.

5. Recipients

  • Verification provider: Your personal data is shared with a local third party verification service provider who helps Bolt verify the validity of your vehicle ownership documentation and the compliance status of your vehicle.

  • Local authorities: Your personal data may be disclosed to local authorities, including to police services during an investigation involving a Bolt driver or an incident involving your vehicle. We will always ensure that we have a lawful basis to share this information before doing so.

  • Bolt: Your personal data may be disclosed to other Bolt Operations OÜ entities, representatives, affiliates, agents, etc. Processing of personal data by another Bolt entity will occur under the same conditions as established in this privacy notice.

  • When transferring your personal data to third parties, including outside of your country, we comply with applicable data protection requirements.

6. Security and access

  • Personal data collected in the course of our vehicle verification process may be transferred to and stored in the data centres of Zone Media LTD and/or Amazon Web Services, Inc., which are located in the territories of Member States of the European Union. Only authorised employees of Bolt Operations OÜ group companies and partners have access to the personal data and they may access the data only for the purpose of resolving safety issues associated with the use of the services.

  • We require the recipients of your personal data to implement appropriate and reasonable technical and organizational security measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction.

  • We process your personal data in a responsible manner where we are able to demonstrate the compliance of personal data processing with the purposes set and the applicable regulations. All our processes, guidelines and activities related to personal data processing are based on the following principles: lawfulness, fairness, transparency, purposefulness, minimisation, accuracy, storage limitation, integrity, confidentiality, and data protection by default and by design.

7. Access, correction, retention, deletion and objection

  • As a data subject you have following rights:

▪ the right to access and to request copies of your personal data. ▪ the right to request that we correct any information that is inaccurate. ▪ the right to request that we erase your personal data, under certain conditions. Please note that personal data that is processed pursuant to a legal obligation or where we have an overriding legitimate interest will not be deleted upon request. ▪ the right to object to our processing of your personal data, under certain conditions. ▪ If we process your personal data using consent as legal basis, then you have the right to withdraw your consent at any time. Withdrawing your consent won’t change the legality of processing done before withdrawal. ▪ the right to file a complaint to the Office of the Data Protection Commissioner in Kenya.

  • If you make a data subject request, we have one month to respond to you. If you would like to exercise any of these rights or need more information on your rights, contact us at privacy@bolt.eu. Please note, that there may be certain preconditions of fulfilling your request. In addition, we may need to identify you before granting you any of the rights connected to your personal data.

8. Retention

  • Your personal data will be stored by us for as long as your vehicle is active on the Bolt app.
  • We will also retain your personal data for a longer period of time if we are required to do so by law, or if we believe that it is necessary to protect our rights or interests, including:

▪ data necessary for accounting purposes, which shall be stored for 7 years; ▪ in the event of suspicions of an administrational or criminal offence, fraud or false information, in which case the data shall be stored for 10 years; ▪ in the event of disputes, in which case the data shall be retained until the claim is resolved or until the expiry date of such claims; and ▪ in respect of recorded calls, which shall be stored for a period of 1 year.

9. Direct Marketing

  • We may send direct marketing messages to your e-mail address and/or phone number when you have given us permission to do so, or under a soft opt-in basis. We may personalise direct marketing messages using information on how and where you use Bolt’s services, such as how frequently you use the Bolt app, and your transportation preferences, where applicable.

  • If you no longer wish to receive direct marketing messages, please click the "Unsubscribe" link in the footer of one of our emails, or opt-out in the profile section of the Bolt app. Easy.

  1. Dispute resolution

  • Disputes relating to the processing of personal data are resolved through customer support (info@bolt.eu) or by contacting Bolt’s Data Protection Officer (privacy@bolt.eu).

  • The Office of the Data Protection Commissioner in Kenya can be contacted at https://www.odpc.go.ke/).

11. Changes

  • This privacy notice applies to vehicle owners’ personal data processing done by us. We have the right to unilaterally amend this privacy notice. We will notify you of all important material changes on our website.

This privacy notice was last updated on 15 June 2023

Scan to download

Almost there!

Scan the QR code with your phone’s camera to download the app.