LIVE
Legal & Privacy

LEGAL
CENTRE

VehicleDistrict is committed to transparency, data security, and compliance with international and African data protection standards.

GDPR AlignedPOPIA Compliant (ZA)NDPR Compliant (NG)Kenya DPA 2019ISO 27001 PrinciplesSSL/TLS Encrypted

PRIVACY POLICY

1. Data Controller

VehicleDistrict ("we", "our", "us") is the data controller for personal data collected through this platform. We are committed to protecting your privacy in compliance with applicable data protection laws including GDPR, South Africa's POPIA (Protection of Personal Information Act), Nigeria's NDPR (Nigeria Data Protection Regulation), and Kenya's Data Protection Act 2019.

2. Data We Collect

We collect: (a) Identity data: name, email address, phone number; (b) Usage data: pages visited, content viewed, search queries; (c) Device data: IP address, browser type, operating system; (d) Transaction data: booking requests, rental enquiries; (e) Communications: messages sent through the contact form or booking forms.

3. How We Use Your Data

Your data is used to: provide and improve our platform services; process rental booking requests; send transactional communications; display personalised content; comply with legal obligations; prevent fraud and ensure platform security.

4. Legal Basis for Processing

We process your data under the following lawful bases: Performance of a contract (rental bookings); Legitimate interests (platform improvement, fraud prevention); Consent (marketing communications, analytics cookies); Legal obligation (compliance with applicable laws).

5. Data Sharing

We share your data with: Rental partners (when you submit a booking request — only the data necessary to facilitate the rental); Service providers (hosting, email, analytics — under strict data processing agreements); Law enforcement (where legally required). We do not sell your personal data.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Booking request data is retained for 3 years. Account data is retained until account deletion.

7. Your Rights

You have the right to: access your personal data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict processing; data portability; object to processing; withdraw consent at any time. To exercise any of these rights, contact us at privacy@vehicledistrict.com.

8. International Transfers

As a Pan-African platform, data may be transferred between African nations. We ensure appropriate safeguards are in place for any cross-border data transfers, in compliance with applicable regulations.

9. Security

We implement industry-standard security measures including: TLS/SSL encryption in transit; encryption at rest; access controls; regular security audits; vulnerability assessments.

10. Children's Privacy

VehicleDistrict is not directed at children under 18 years of age. We do not knowingly collect personal data from minors.

Last Updated: April 2026

For questions about this policy, contact: legal@vehicledistrict.com