Zuka Lift (“we”, “our”, “us”) values your privacy and is committed to protecting your personal information.
This policy applies to all users of the Zuka Lift platform, including passengers, drivers, delivery partners, and business clients. It outlines:
What personal information we collect
How and why we use your data
How we protect your data
Your rights and choices under POPIA and GDPR
We collect information necessary to provide and improve the Zuka Lift service.
Account Details: Name, surname, email, phone number, password, and profile photo
Identity Verification: Driver’s license, national ID or passport, vehicle registration, proof of insurance, background check documents
Payment Details: Bank account, credit/debit card information, or mobile-money wallet
Feedback and Support: Messages, ratings, complaints, and customer-service interactions
Location Data: Real-time GPS data while using the app for trip tracking, pickup, and safety purposes
Device Information: IP address, device model, operating system, app version, and unique device identifiers
Usage Data: Ride history, in-app activity, crash logs, and analytics events
Cookies and Tracking: When you access our website, we may use cookies and analytics tools to improve performance and personalize content
Background-check providers (for driver screening)
Payment processors (for transactions)
Identity-verification services (for security)
Marketing partners (for referral and loyalty programs)
We process your data only for lawful, legitimate purposes such as:
Service Delivery: Matching riders with drivers, enabling in-app communication, and processing payments
Identity Verification: Preventing fraud, ensuring passenger and driver safety, and verifying accounts
Customer Support: Responding to inquiries, resolving disputes, and improving service quality
Legal and Regulatory Compliance: Complying with POPIA, GDPR, tax, and transport regulations
Analytics and Improvements: Monitoring app performance, improving algorithms, and enhancing user experience
Marketing and Notifications: Sending trip receipts, promotions, and service updates (you may opt out anytime)
We process personal data based on one or more of the following legal bases:
Consent: You have given consent for specific purposes (e.g., marketing communications)
Contractual Necessity: To perform a contract with you (e.g., provide a trip or pay a driver)
Legal Obligation: To comply with national laws or transport authority requirements
Legitimate Interest: For fraud prevention, safety monitoring, or product enhancement
Data is securely stored in encrypted databases within approved data centers (including cloud environments).
We retain your data only for as long as necessary to fulfill service or legal requirements:
Trip and payment data: up to 5 years (for tax and audit purposes)
Account information: until your account is deleted
Support messages: up to 24 months
When data is no longer required, it is permanently deleted or anonymized.
We never sell your data. However, we may share limited information with:
Drivers and Riders: To complete bookings (e.g., first name, pickup/drop-off details, and contact number via in-app masking)
Service Providers: Payment gateways, cloud-hosting, analytics, and SMS/email providers under confidentiality agreements
Regulatory Authorities: When required by law, court order, or law-enforcement requests
Business Transfers: In case of merger, acquisition, or restructuring, subject to strict data-protection safeguards
Zuka Lift uses industry-grade security controls to protect your data:
End-to-end encryption of sensitive data (TLS 1.3)
Two-factor authentication (2FA) for administrative access
Regular security audits, penetration testing, and vulnerability assessments
Role-based access control (RBAC) to limit data exposure
Despite these measures, no online system is entirely risk-free; we encourage users to use strong passwords and update apps regularly.
As a user, you have the following rights under POPIA and GDPR:
Access: Request a copy of your personal information
Correction: Update or rectify inaccurate or outdated data
Deletion (“Right to be Forgotten”): Request account or data removal when legally permissible
Restriction: Limit how your data is processed in specific cases
Portability: Request your data in a machine-readable format
Objection: Opt out of marketing or processing based on legitimate interests
To exercise your rights, contact us at privacy@zukalift.com.
Your data may be stored or processed outside your country (e.g., in secure cloud regions). We ensure all transfers comply with POPIA and GDPR by using standard contractual clauses and data-processing agreements with our service providers.
Zuka Lift services are not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us for immediate removal.
We use cookies to enhance the user experience. You can manage or disable cookies through your browser settings. Some cookies are essential for the website or app to function correctly (e.g., login or security cookies).
We may update this Privacy Policy periodically to reflect changes in technology, law, or business operations. The updated version will be posted with a revised “Last Updated” date. We encourage you to review it regularly.
