Global Privacy Policy

This Privacy Policy describes how RIDESHARE LIMITED ("Rideshare", "we", "us", "our") collects, uses, shares, and protects personal data when individuals ("you", "users") access or use our websites, mobile applications, brand platforms, products or services.

Rideshare operates several branded platforms including Football Rideshare, Mountain Rideshare, Surf Rideshare, and Festival Rideshare (together, the "Brand Platforms").

We are committed to processing personal data lawfully, fairly, and transparently.

By using our Services, you agree to this Privacy Policy. If you do not agree, please discontinue use.

For all data processing activities described in this Policy, the data controller is:

RIDESHARE LIMITED

Company No. 07986677

7 Blossom Close, London, England, W5 4YE

Email: legal@ridesharelimited.com

This Policy applies to:

• Drivers
• Passengers
• Website visitors
• Individuals participating in promotions, rewards, or partnerships
• Individuals who contact our support teams

It applies across all countries where we operate or provide Services.

We collect the following categories of data:

4.1 Identity Data: full name, email address, phone number, profile photos, date of birth / age verification.

4.2 Driver Verification Data: driving licence details, vehicle registration, insurance documents (self-declared), identity verification results.

4.3 Trip & Usage Data: trip listings, routes, estimated times, distances, pickup/drop-off points, price contributions, cancellations and attendance.

4.4 Location Data: real-time or approximate GPS location (with permission), trip mapping and matching data.

4.5 Device & Technical Data: IP address, device identifiers, browser / operating system information, cookies and tracking technologies (see Cookie Policy).

4.6 Communications: messages exchanged via the Platform, support queries and call logs, complaint or safety reports.

4.7 Payment & Transaction Data: payment method (via third-party providers), transaction history, refunds and cancellations. We never store full card numbers; these are handled by certified payment processors.

4.8 Ratings & Reviews: ratings, comments and behavioural feedback.

4.9 Gamification & Sustainability Data: CO₂ savings calculations (estimated), vehicle emission profiles, eco-badges and engagement metrics.

4.10 Marketing Preferences: communication preferences, cookie and tracking consent status.

We process your data for the following purposes:

• Providing and operating the Platform and Services
• Managing your account and verifying your identity
• Processing payments and handling transactions
• Matching Drivers and Passengers for Trips
• Sending service notifications and operational communications
• Detecting and preventing fraud and abuse
• Improving Platform performance and user experience through analytics
• Calculating CO₂ savings and supporting gamification features
• Complying with legal and regulatory obligations
• Administering optional partner promotions (with your consent)

We never sell personal data.

6.1 Other Users: limited profile information is shared between Drivers and Passengers for Trip coordination.

6.2 Service Providers: payment processors, cloud hosting providers, geolocation/mapping providers, fraud detection and safety services, analytics tools, identity verification providers. All service providers are bound by contractual data protection obligations.

6.3 Partners (Optional Participation): if you join a partner programme (e.g., sports clubs, events, outdoor brands), we may share limited data necessary to administer the programme.

6.4 Legal Authorities: we may disclose information if required by law enforcement, government agencies, courts or regulatory bodies.

6.5 Corporate Transactions: if Rideshare Limited is acquired or undergoes restructuring, your data may be transferred under confidentiality obligations.

Your data may be transferred outside the UK or EEA.

We ensure compliance using:

• UK International Data Transfer Agreement (IDTA)
• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Additional security and contractual safeguards

We retain data for only as long as necessary:

• Account data: while your account is active. Deleted or anonymised when you delete your account
• Trip and payment data: 6 years (UK tax and accounting obligations)
• Ratings and behavioural data: duration of your active account
• CO₂ and gamification data: aggregated or anonymised after 12 months
• Support and safety records: up to 6 years

After retention periods, data is securely deleted or anonymised.

We use cookies to keep you logged in, track preferences, analyse performance, and deliver optional marketing or partner offers.

For full details, see our Cookie Policy.

You may receive:

• Service notifications (always required)
• Optional marketing emails
• Optional partner promotions

You may opt out at any time by clicking "unsubscribe", updating your app settings, or emailing privacy@ridesharelimited.com

Depending on your location, you may have:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint (e.g., ICO in the UK)

We will respond to requests within statutory timelines. Contact us at privacy@ridesharelimited.com

You can delete your account yourself, at any time, from Profile → Account → Delete my account in the app. The same page is also available in a web browser at the /delete-account address of our web app, so you do not need to reinstall the app to use it.

When you delete your account:

• Your name, photo, contact details, date of birth, location and vehicles are deleted
• Messages you sent are replaced with a placeholder, so the other person’s side of the conversation stays readable
• Comments you left in ratings are removed. The score remains, because removing it would change another member’s public average
• You are signed out and can no longer sign in. Your email address is released

We cannot delete your account while a trip is still upcoming with a booked passenger or driver, or while a payment or payout is still settling. The app tells you which of these applies so you can resolve it first.

What we keep, and why:

• Booking and payment records — 6 years, for UK tax and accounting obligations (UK GDPR Art 17(3)(b))
• Safety and moderation reports where an investigation is open or concluded (Art 17(3)(e))
• Aggregated, non-identifying journey statistics

These records are no longer linked to your name or contact details. To ask about data held after deletion, contact privacy@ridesharelimited.com

Our Services are not intended for persons under 18.

We do not knowingly collect data from minors. If you believe a minor has registered, contact us for deletion.

We use encryption, firewalls, access controls, secure data centres, regular audits, and staff training to protect your data.

No online system is entirely secure; users must protect their login credentials.

We use automated systems for matching riders, fraud detection, route optimisation, and CO₂ savings calculation.

These processes do not produce legally significant decisions about you.

Our Services may link to external websites or integrated services.

We are not responsible for their privacy practices.

We may update this Policy from time to time.

Significant changes will be communicated by email, notification, or in-app message.

Data Protection Officer

RIDESHARE LIMITED

7 Blossom Close, London, England, W5 4YE

Email: privacy@ridesharelimited.com

You can also contact the Information Commissioner's Office (ICO) if you are in the UK.