Who handles your information
ZoomRide Tours & Car Hire, Nairobi, Kenya, is responsible for personal information collected through this website and our rental service. This notice explains our handling of personal data under Kenya’s Data Protection Act, 2019.
What we collect
Account information includes your name, email and sign-in details. For a rental we collect your phone, residence, identification number, ID images, driving licence and expiry, chosen vehicle, rental dates and Kenya times, pickup location, agreement details and acceptance records. We retain booking and payment references when applicable. Security information can include limited request and authentication records; payment details should only be provided through approved payment channels.
Google sign-in provides the account information needed to authenticate you. We do not request access to your Gmail inbox.
Vehicle owner partnership applications
When you offer a vehicle to ZoomRide, we collect your name, ID or passport number, phone, email, location, ownership authority, vehicle specifications, registration number, mileage, tracker status, insurance, availability and any additional details you choose to provide. We record your consent, application date and review status. These details are stored in our private database and accessed through the authorised admin workspace to assess your application and arrange contact, document checks, inspection and rental discussions. Confirmation and staff notification emails do not include your identification number. You can use our privacy request form to ask for access, correction or deletion of your application.
Why we use it
We process information to provide the requested rental, check identity and driving eligibility, communicate about bookings, prevent fraud, protect vehicle security, manage lawful payments and claims, and meet legal obligations. Our grounds include steps toward and performance of the rental contract, applicable legal duties and proportionate legitimate interests. Where a separate use requires consent, we request it clearly; marketing is not a condition of renting.
Your ID and driving licence
These documents are used for identity confirmation, driving eligibility, rental security and related lawful investigations or claims. They are stored privately and reviewed by authorised staff. We do not publish or sell them, use them for advertising, or make them visible to other customers. Do not upload documents belonging to someone else without their authority.
Who may receive information
Authorised ZoomRide staff receive only information needed for their work. Our hosting and infrastructure providers include Cloudflare, Supabase for database and storage, and Resend for transactional email. Email providers receive the recipient and message contents; we do not attach your identity documents to routine booking emails. Insurers, payment providers, professional advisers, police or other authorities may receive necessary information for a legitimate claim, payment or legal obligation. We do not sell personal data.
Some service providers process information outside Kenya. We must use appropriate contractual and technical safeguards and satisfy applicable requirements for international transfers. Contact us to ask about the safeguards for your information.
Security and retention
Access controls protect accounts and private documents. Signed document access is time limited, and the server checks account permissions. No internet service can guarantee absolute security.
We keep information only for as long as needed for identity verification, an active or returning-customer rental relationship, accounting and legal requirements, or unresolved claims. Retention is reviewed against those purposes; a legal hold may delay deletion. Keeping documents on file for a future rental is not permission to retain them indefinitely. You can request deletion or ask which retention period applies to your records.
Your choices and rights
You can ask to access or correct your personal information, object to processing, restrict a disputed use, request deletion where applicable, or withdraw consent for a consent-based use. Contractual or legal requirements may mean some information must be retained. We may verify your identity using proportionate means before acting on a request. Declining required identity checks means we cannot approve a self-drive rental.
Send a privacy request to ZoomRide or call +254 748 694 714. Transactional emails come from noreply@zoomridetours.co.ke; that sending address is not a monitored inbox. You may also raise a concern with the Office of the Data Protection Commissioner.
Cookies, devices and children
We use essential sign-in and security cookies. Customer sessions last up to 30 days and administrator sessions up to 12 hours. Your browser may remember account status and theme preferences. We do not currently use advertising cookies; any future optional tracking will need an appropriate choice. Signing out clears the relevant session.
This rental service is for adults aged 18 or over. Age confirmation alone does not establish driving eligibility; the licence, vehicle class and any disclosed insurer restrictions are also checked.
Changes to this notice
We show the effective date above. Material changes will be explained before information is used for a materially different purpose. The version accepted for a booking is recorded with that request.