Privacy Policy

YOKS Rent A Car ("YOKS", "we", "us", or "our") is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our vehicle rental services, website, mobile applications, and related services (collectively, the "Services"). This policy applies to all customers, website visitors, mobile app users, and anyone who interacts with our Services. By using our Services, you consent to the collection and use of your information as described in this Privacy Policy. We are based in Accra, Ghana and operate under the Data Protection Act, 2012 (Act 843) of Ghana.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact our Data Protection Officer at: YOKS Rent A Car Accra, Ghana Email: privacy@yoksrentacar.com Phone: +233 540-614-545 We aim to respond to all data protection inquiries within 30 business days.

When you create an account, make a booking, or use our Services, we may collect the following personal information: - Full name (first name and last name) - Email address - Phone number - Physical address - Date of birth - Government-issued identification (driver's license, Ghana Card, passport) - Driver's license number and expiration date - Payment information (credit/debit card details, mobile money numbers) - Emergency contact information - Employer information (for corporate accounts) - Vehicle registration details (for Insurance on the Go) All personal information is collected directly from you and with your knowledge.

When you use our website or mobile applications, we automatically collect certain technical information, including: - IP address and approximate geographic location - Browser type and version - Device type, operating system, and device identifiers - Pages visited, time spent on pages, and navigation patterns - Referring website or application - Booking and rental history - Service usage patterns and preferences - Cookies and similar tracking technologies (see our Cookie section below) This information helps us improve our Services and provide a better user experience.

With your consent, we may collect precise location data from your device to: - Provide pickup and drop-off location suggestions - Calculate driving distances for pricing - Facilitate airport transit services - Enable vehicle tracking for safety and security (chauffeur-driven rentals) - Provide real-time estimated arrival times You can disable location services through your device settings at any time, though some features may be limited without location access.

We collect payment information necessary to process your transactions, including: - Credit and debit card numbers - Mobile money account information - Billing address - Transaction history and payment references Payment card data is processed securely through Paystack, our PCI-DSS compliant payment processor. We do not store full card numbers on our servers. Paystack handles all sensitive payment data in accordance with industry security standards.

We use your personal information primarily to provide and improve our Services, including: - Processing and managing your vehicle bookings and reservations - Facilitating vehicle rental agreements and insurance policies - Communicating with you about your bookings, confirmations, and reminders - Providing customer support and resolving disputes - Processing payments and refunds - Assigning drivers for chauffeur-driven services - Managing airport transit pickups and drop-offs - Administering insurance policies and claims - Generating invoices and receipts

We may use your data for safety and security purposes, including: - Verifying your identity and driver's license validity - Preventing fraud, unauthorized access, and misuse of vehicles - Investigating accidents, damage, or theft - Complying with traffic and law enforcement requests - Maintaining records for legal and regulatory compliance - Monitoring vehicle condition and mileage - Enforcing our Terms of Service

We may use your contact information to: - Send booking confirmations, reminders, and status updates via email and SMS - Notify you of changes to our Services, policies, or pricing - Send promotional offers, newsletters, and marketing communications (with your consent) - Conduct customer satisfaction surveys - Provide personalized service recommendations You can opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly. Transactional messages (booking confirmations, payment receipts) cannot be opted out of.

We use aggregated and anonymized data to: - Analyze usage trends and service performance - Improve our website, mobile apps, and booking systems - Develop new features and services - Optimize vehicle fleet allocation and pricing - Train and improve our customer support processes - Generate business reports and insights This data does not identify individual users and is used solely for improving our Services.

We may share your information with trusted third-party service providers who assist us in operating our Services, including: - Payment processors (Paystack) for processing transactions - Insurance partners for policy administration and claims - SMS and email service providers for communications - Cloud hosting providers for data storage - Analytics providers for service improvement - Map and navigation services (Google Maps) for location features - Customer support tools These providers are contractually obligated to protect your data and may only use it for the specific services they provide to us.

We may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to: - Comply with applicable laws, regulations, or legal proceedings - Respond to valid requests from government authorities or law enforcement - Protect the rights, property, or safety of YOKS, our customers, or the public - Investigate or prevent fraud, security issues, or technical problems - Enforce our Terms of Service or rental agreements We will notify you of such disclosures where legally permitted.

We may share limited information with our business partners, including: - Insurance companies providing vehicle coverage - Corporate account partners (with employee consent) - Tourism and travel partners for bundled services - Vehicle fleet partners (Peer-to-Peer Car Rental providers) In all cases, we share only the minimum information necessary for the specific business purpose, and our partners are required to maintain appropriate data protection standards.

We want to be clear about what we never do with your data: - We never sell your personal information to third parties - We never share your data for unrelated advertising purposes - We never disclose your financial information to unauthorized parties - We never use your data for automated decision-making that produces legal effects without your knowledge - We never retain your data longer than necessary for the purposes described in this policy

We implement robust technical and organizational measures to protect your personal data, including: - Encryption of data in transit (TLS/SSL) and at rest - Secure authentication with hashed passwords and session management - Role-based access controls limiting data access to authorized personnel only - Regular security assessments and vulnerability testing - Secure payment processing through PCI-DSS compliant providers - Database-level row security policies - CSRF protection on all API endpoints - Regular security patches and software updates While we strive to protect your data using industry-standard practices, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that may compromise your personal information, we will: - Investigate the breach promptly and take steps to contain it - Notify affected individuals within 72 hours of becoming aware of the breach - Report the breach to the Data Protection Commission of Ghana as required - Provide information about the nature of the breach and steps taken - Recommend actions you can take to protect yourself - Document the breach and response actions for compliance records

Access to your personal data within YOKS is strictly limited to: - Customer support staff who need it to assist you with your bookings - Administrative staff managing fleet operations - Finance staff processing payments and refunds - Management for oversight and compliance purposes All employees with access to personal data are trained on data protection practices and are subject to confidentiality obligations.

We retain your personal data only as long as necessary for the purposes described in this policy. Our retention periods are: - Active account data: Retained for the duration of your account plus 2 years after account closure - Booking and rental records: 5 years from the completion of the rental (for legal and tax compliance) - Payment transaction records: 7 years (as required by Ghana Revenue Authority regulations) - Insurance policy records: Duration of the policy plus 3 years - Communication logs: 2 years from the date of communication - Website analytics data: 26 months (anonymized) - CCTV and vehicle tracking data: 90 days unless needed for an investigation After the retention period expires, data is securely deleted or anonymized.

You may request deletion of your account and personal data at any time by contacting us at privacy@yoksrentacar.com. Upon receiving your request: - We will verify your identity before processing the request - Your account will be deactivated within 7 business days - Personal data will be deleted within 30 business days - Some data may be retained longer where required by law (e.g., tax records) - Anonymized data that cannot identify you may be retained for analytics - Active bookings or outstanding payments must be resolved before deletion You will receive confirmation once your data has been deleted.

Under the Data Protection Act, 2012 (Act 843) of Ghana, you have the following rights regarding your personal data: - Right of Access: You can request a copy of the personal data we hold about you - Right to Rectification: You can request correction of inaccurate or incomplete data - Right to Erasure: You can request deletion of your data (subject to legal retention requirements) - Right to Restrict Processing: You can request that we limit how we use your data - Right to Data Portability: You can request your data in a structured, commonly used format - Right to Object: You can object to processing of your data for certain purposes, including direct marketing - Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time To exercise any of these rights, contact us at privacy@yoksrentacar.com. We will respond within 30 business days.

If you are dissatisfied with how we handle your personal data, you have the right to: - Contact our Data Protection Officer at privacy@yoksrentacar.com - Lodge a complaint with the Data Protection Commission of Ghana Data Protection Commission No. 10, Switchback Lane, Cantonments P.O. Box CT 3540, Accra, Ghana Website: www.dataprotection.org.gh We take all complaints seriously and will work to resolve them promptly.

Cookies are small text files stored on your device when you visit our website. They help us provide a better browsing experience by remembering your preferences and understanding how you use our site. We use the following types of cookies: - Essential cookies: Required for the website to function (login sessions, CSRF tokens, language preferences). These cannot be disabled. - Analytics cookies: Help us understand how visitors use our website (page views, navigation patterns). We use these to improve our Services. - Preference cookies: Remember your settings and choices (dark mode, language, currency display).

You can control cookies through your browser settings: - Most browsers allow you to view, delete, and block cookies - You can set your browser to notify you when a cookie is being set - Blocking essential cookies may prevent parts of our website from functioning correctly - Clearing cookies will log you out and reset your preferences For more information about cookies and how to manage them, visit www.allaboutcookies.org.

Our website may include integrations with third-party services that set their own cookies: - Google Maps: For location search and distance calculation - Paystack: For payment processing - Analytics services: For website usage insights These third-party services have their own privacy policies governing how they use data collected through their cookies. We recommend reviewing their policies for more information.

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@yoksrentacar.com, and we will take steps to delete such information. Rental agreements require the renter to be at least 21 years of age with a valid driver's license held for a minimum of 2 years.

Your personal data is primarily stored and processed in Ghana. In some cases, data may be transferred to or accessed from other countries where our service providers operate (e.g., cloud hosting, payment processing). When data is transferred internationally, we ensure that appropriate safeguards are in place, including: - Contractual clauses requiring equivalent data protection standards - Selecting service providers in jurisdictions with adequate data protection laws - Implementing additional technical measures such as encryption We will always ensure your data receives the same level of protection regardless of where it is processed.

If you use our Peer-to-Peer (P2P) Car Rental service, additional data sharing occurs: - Vehicle owners: Your name, phone number, and booking details are shared with the vehicle owner to facilitate the rental - Renters: Vehicle details, pickup instructions, and owner contact information are shared with you - Both parties: Rental reviews and ratings may be visible to other users By participating in the P2P service, you consent to this limited sharing necessary for the rental transaction. Both parties are expected to handle each other's information responsibly and only for the purpose of the rental.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes: - The "Last updated" date at the top of this policy will be revised - For significant changes, we will notify you via email or a prominent notice on our website - Continued use of our Services after changes take effect constitutes acceptance of the updated policy - We encourage you to review this policy periodically If you do not agree with any changes to this Privacy Policy, you should stop using our Services and contact us to request deletion of your data.

This Privacy Policy is governed by and construed in accordance with the laws of Ghana, including the Data Protection Act, 2012 (Act 843) and the Electronic Transactions Act, 2008 (Act 772). Any disputes arising from or related to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Ghana.