This notice explains what personal data BoraRide collects from this website, why we collect it, and what you can do about it. It is written to meet Section 29 of the Kenya Data Protection Act 2019.
Where we are right now. BoraRide has not launched. This website does one thing: it collects a waitlist so we can tell you when your route opens. We are not taking bookings, not taking payments, and not asking anyone for identity documents. When the platform launches, this notice will be replaced with a fuller one covering trips, payments and verification, and we will tell everyone on the waitlist before that happens.
BoraRide is operated by BoraRide Carpool Ltd, a company incorporated in Kenya.
For anything in this notice, contact us at info@boraridecarpool.com.
BoraRide Carpool Ltd is the data controller for the personal data described here — meaning we decide what is collected and why.
When you join the waitlist, we ask for four things. That is the entire list.
| What | Why we need it | Our lawful basis |
|---|---|---|
| Full name | To address you properly when we get in touch | Your consent |
| Phone number | To notify you by SMS or WhatsApp when your route opens | Your consent |
| Email address | To send you the launch announcement | Your consent |
| Route you travel most | To decide which corridor we open next | Your consent |
We also record the date and time you gave consent, so we can show that you agreed. Our website hosting provider automatically logs technical information such as your IP address and browser type as part of serving the page; this is standard and is used for security and to keep the site working.
No national ID numbers. No copies of identity documents. No photographs or selfies. No driving licences, logbooks or insurance certificates. No payment card or M-Pesa details. No location data. Those will only ever be requested inside the BoraRide app once it launches, and only with a separate explanation and separate consent.
When the platform opens, verification and travel will involve a good deal more — identity numbers, document images, trip locations and payment records. That processing is not covered by this notice. A separate one will be published in the app before anything is collected, and BoraRide Carpool Ltd will be registered with the Office of the Data Protection Commissioner before that happens.
Nothing bad. You simply won't be on the waitlist, so we won't be able to tell you when your route opens. You can still browse this website, and you can always email us directly instead. There is no other consequence.
We do not sell your data. We do not share it with advertisers. We do not pass it to other carpooling or transport companies.
A small number of service providers process data on our behalf so that the website and our email work:
Each of these acts on our instructions only. We may also disclose data where a Kenyan court or regulator lawfully requires it.
You should know this clearly: the providers listed above operate servers outside Kenya, so your name, phone number and email are stored abroad.
We rely on the safeguards in Sections 48 and 49 of the Data Protection Act. Each provider is bound by contractual data-protection terms, and the transfer is necessary to provide the service you asked for. By joining the waitlist you consent to this transfer.
If you would rather your details were not stored outside Kenya, don't use the form — email us instead and say so, and we'll note your route preference without creating a record on the platform.
Until the earlier of: 24 months from the day you sign up, or the day you ask us to remove you. If you become a BoraRide user at launch, your account data will then be governed by the launch privacy notice instead.
If we decide not to proceed with BoraRide, we will delete the entire waitlist and tell you we have done so.
Under Part IV of the Data Protection Act you have the right to:
Email info@boraridecarpool.com and we will act on it. We aim to respond within seven days and will not take longer than the period allowed by the Act.
Every email we send carries an unsubscribe link. Every SMS carries a STOP instruction. Either one works immediately and permanently, and you never have to explain yourself.
Consenting to the waitlist does not consent you to anything else. We will not use your details for any purpose beyond telling you about the BoraRide launch.
This site uses only what is needed to display the page and remember your cookie choice. If we add analytics later, we will ask for your consent first through a banner, and you will be able to decline and still use the site normally.
If a breach occurs that puts your data at risk, we will notify the Office of the Data Protection Commissioner within 72 hours of becoming aware of it, and we will tell you directly where the risk to you is high.
This waitlist is for adults. We do not knowingly collect data from anyone under 18. If you believe a child's details have been submitted, tell us and we will delete them.
Please raise it with us first at info@boraridecarpool.com — most things are quicker to fix directly.
You also have the right to complain to the regulator at any time:
Office of the Data Protection Commissioner
Britam Tower, Upper Hill, Nairobi
www.odpc.go.ke · info@odpc.go.ke
If we change anything material — particularly when the platform launches and we begin verification and payments — we will update the date at the top and email everyone on the waitlist. We will not quietly widen what we do with your data.
