The term “us” or “we” refers to Kgosigadi Rides, a private limited company incorporated and registered under the laws of the Republic of South Africa with registration No. 2023/876810/07.

The term “you” or “your” refers to the passenger or rider who requests, hires and/or receives a transportation service through their Kgosigadi app account.

1. Personal data we process We only process information that we need, so that we can provide you with the best service on our transportation marketplace. The data categories are as follows:

Contact details: things like name, phone number and e-mail address, home address. Profile information: things like your profile picture, saved addresses, For some of our services we might require a little more, like your driver license details. Geolocation: such as where you need a ride from, or the location of nearby scooters to you, the time, the journey progression and the final destination of your trip. Payment information like the amount charged and the payment card used. Communication and correspondence records such as when you engage with our in-app chat. Limited identification data of the device, like the IP address, on which the Kgosigadi app has been installed Data about the usage of the transportation services: things like data about journey status, times and data about your conduct as assessed by drivers. In addition to above mentioned sources, we may collect and receive your data from other sources, which include: Drivers and third parties who provide information and content in connection to the service or in regard to possible claims and disputes; and Users who participate in our referral campaigns. In that case we receive the referred person’s information from that user. A lack of (or inaccurate) personal data may prevent us from fulfilling our contract with you, or from doing something expected of us in law. It may also mean that we cannot operate your account. For example, we collect and process the personal data submitted by you in the course of installing and using the Kgosigadi app; refusing to share geolocation data via the App means we cannot direct a driver to your location for pick-up. We will not be able to fulfil our obligations to you in other circumstances, you will not be able to register as a driver or rider.

2. Purpose of the processing We process your personal data so we can provide you with one or more of our transportation services: We connect you with a driver, help find you a scooter or hire a vehicle: We collect and process personal data for the purpose of connecting passengers with drivers so you can be picked up and dropped off; Instant messages directly in the Kgosigadi app are processed in order to provide service and customer support (including resolving disputes between driver and rider), for security purposes as well as to improve our products and services, and for analysis. We get you to where you want to go: We display geolocation data and the phone number of passengers to drivers when ride-hailing to enable efficient pick-up and drop-off, and make the journey and route transparent. This data is collected only when the Kgosigadi app is activated. The collection of geolocation data stops after closing the Kgosigadi app. We make sure your journey goes smoothly: We use geolocation data to make sure you get to your destination and resolve quality issues related to our services. We make sure the app is optimal: We use contact details to notify passengers and riders of updates to the Kgosigadi app so you can keep using our services. We also gather limited data from the device that you use to connect you with our internet, mobile and telephone services, and to help keep your account safe through authentication and verification checks. We make sure your ride is the quickest, cheapest and most convenient to you: We collect data on the routes taken by our passengers and riders to analyse geographic coverage. We collect your payment: We obtain payment details to process passenger payment on behalf of drivers for ride-hailing. We maintain and promote standards: We collect data about journey statuses, time and passenger ratings from driver feedback to encourage user safety, and make sure we’re providing a quality and enjoyable service to our Queens. Customer support data and correspondence is collected for the purposes of feedback, and resolving disputes and service quality issues. Your name, phone number and email address will be used to communicate with you for things like letting you know that your journey has been completed, sending you trip confirmation slips and receipts.

3. Legal Basis We are allowed to use personal information in the ways described above if we have a proper reason to do so. Entry into and performance of the contract (including provision of service): Personal data is generally processed in order to provide the services contracted through the Kgosigadi app with you. This means that to give you the service we promised you, and to meet our terms and conditions, we’ll process your personal data to meet those obligations. Depending on the particular circumstances, we may, from time to time rely on alternative legal basis when it is more appropriate to do so, these may include: when it is necessary to comply with a legal obligation such as for processing data when the law requires it, including, for example, if there is a valid legal request to disclose personal information to a third party such as a Court or regulatory authority; when it is necessary to protect your vital interests, or those of others, for example in the event of an emergency or an imminent threat to life; and/or when you have given us clear consent to do so for another specific purpose for which you have been fully informed. The context in which the personal data are collected, in particular regarding the relationship between you and us; the nature of the personal data, in particular whether special categories of personal data are processed or whether personal data related to criminal convictions and offences are processed; the possible consequences of the intended further processing for you;

4. Recipients We only work with trusted partners and authorities. We only share when there is a proper reason to do so. We limit sharing to only that which is required. We do not sell your personal information. The personal data of the passenger is only disclosed to the ride-hailing drivers when they engage with a ride on in the Bolt app; in such a case, the driver will see the name, phone number , rating and geolocation data of the passenger. After providing the transportation service, the name and the telephone number of the ride-hailing passenger will remain visible to the driver for 12 months. This is necessary for drivers to resolve any issues with the passenger like getting something special back to you which might have been left in the car. Feedback given by passengers regarding the quality of the ride-hailing service is anonymous. Your rating is private between you and Kgosigadi Rides. Processing of personal data by Kgosigadi Rides group companies and partners will occur under the same strict conditions as established in this privacy notice. In any scenario, we’ll always satisfy ourselves that we have a lawful basis on which to share the information, and we’ll make sure that we document our decision. 5. Security and access We want you to stay in control of your personal data. Kgosigadi Rides provides you with controls through the app where you can view your personal information including your profile data and trip history. Your right of access You can access your personal data via the Kgosigadi Rides app. You have the right to ask us for copies of your personal information. There are some exemptions, such as when we have to balance the rights of others, which means you may not always receive all the information we process. Your right to rectification You can access and update your personal data via the Kgoaigadi Rides App. You have the right to ask us to erase your personal information. Your right to restriction of processing You have the right to ask us to restrict the processing of your information in certain circumstances. This means that your data can only be used for certain things, such as legal claims or to exercise legal rights. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you, in certain circumstances. This only applies to information you have given us. The retention period for the data about instant messages directly in the Kgosigadi Rides app messages is as long as you have the Kgosigadi Rides account, except cases where messages are related to a reported incident - in which case we will store them for as long as you have a Kgosigadi Rides Account.

7. Retention Kgosigadi Rides retains user data for only as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the type of data, the transportation service it relates to, and the purposes for which we collected the data. Your personal data will be stored as long as you have an active passenger account. If your account is closed, personal data will be deleted (according to our retention schedule and rules), unless such data is still required to meet any legal obligation, or for accounting, dispute resolution or fraud prevention purposes. Financial data regarding transportation services provided to passengers will be stored safely as long as you still have the Kgosigadi Rides App . Data required for other accounting purposes will be stored for seven years after the last journey. In the event that there are formal investigations of a criminal offence, fraud or false information having been provided, the data will be stored as long as necessary according to the internal, legal, and regulatory requirements. In case of payment disputes, data will be retained until the claim is satisfied or the expiry date of such claims. Journey history data and the data about usage of transportation services will be stored for three years, after which the data will be anonymized. Please note that the deinstallation of the Kgosigadi Rides app in your device does not cause the deletion of your personal data. If the Kgosigadi Rides app has not been used for 2 years, we’ll get in touch and ask you to confirm whether you wish to keep your account active for future use. If no reply is received in a reasonable time, the account will be closed and personal data will be deleted unless such data is required for any purpose mentioned earlier in this privacy notice.

8. Direct marketing We may send direct marketing messages to your e-mail address and/or phone number when you have given us permission to do so. If you no longer wish to receive direct marketing messages, please click the "Unsubscribe" link in the footer of one of our emails, or opt-out in the profile section of the Kgosigadi Rides app.

9. Automated decision making We use automated decision-making in order to verify you which is necessary to ensure the safety of our platform and the enforcement of our terms and conditions. We may also use automated decision-making for complaint resolution purposes. We may use the complaints information you provide to our customer support team via our chat function. The information relating to your complaints may be used to generate an automated response which will be evaluated by a human agent to make the final decision. Please note that certain exceptions and limitations may apply to your right to object to automated decision-making, as permitted by applicable laws and regulations. We will provide you with clear information regarding the implications of exercising your rights and the processes involved in objecting to automated decision-making.

10. Dispute resolution Disputes relating to the processing of personal data are resolved through customer support at info@kgosigadirides.co.za, in the first instance. You have the right to contact Kgosigadi Ride's Data Protection Officer at privacy@kgosigadirides.co.za. We hope you have found this privacy notice easy to understand. Data protection laws are important. They strengthen rules and enhance your information rights. Many of these rules may appear complicated, but most are grounded in common sense. We take our responsibilities with your data seriously. Bolt will continue to make changes to this privacy notice as part of our commitment to protecting your privacy and affording you even more transparency.