1. Introduction
SafeRide ("we", "our", "us", or "the Platform") operates an online marketplace that connects passengers ("Users") with independent transportation service providers ("Drivers") in Sri Lanka. This Privacy Policy describes how we collect, use, disclose, and protect personal information in accordance with the Personal Data Protection Act of Sri Lanka (where applicable), and other relevant data protection principles.
By accessing or using the SafeRide platform — whether through our website, mobile application, or any other interface — you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
Full name, email address, and mobile phone number
Profile photo (optional)
Home or frequently visited addresses
Payment card details, bank account information, or mobile wallet credentials
National Identity Card (NIC) or passport number (for Driver verification)
Vehicle registration, insurance documents, and driving licence (Drivers only)
Communications submitted through support channels, feedback forms, or dispute reports
2.2 Information Collected Automatically
Real-time GPS location data during active ride sessions and, if permitted, in the background
Device identifiers (IMEI, advertising ID, OS version, device model)
IP address and approximate location derived from IP
Browser type, referring URLs, and platform session duration
Ride history including pickup and drop-off coordinates, timestamps, and fare amounts
In-app activity logs and feature usage patterns
Crash reports and diagnostic data
2.3 Information from Third Parties
Identity and background-check data from authorised third-party verification providers
Payment processing data from licensed payment gateways
Fraud detection signals from security partners
Social login tokens if you choose to sign in via a third-party authentication provider
3. How We Use Your Information
SafeRide uses collected information for the following purposes:
Account creation, verification, and management of User and Driver profiles.
Facilitating ride bookings, matching Users with available Drivers, and processing payments.
Real-time navigation assistance and estimated time-of-arrival calculations.
Sending transactional notifications, booking confirmations, receipts, and safety alerts via SMS, push notification, or email.
Improving and personalising platform features through analytics and usage research.
Fraud prevention, identity verification, and enforcement of our Terms and Conditions.
Regulatory compliance, including responses to lawful requests from government authorities.
Marketing communications and promotional offers, subject to your opt-in consent where required by law.
Resolving disputes between Users and Drivers.
Conducting internal audits, risk assessments, and legal proceedings.
4. Sharing of Information
4.1 With Drivers
When a booking is accepted, we share the User's first name, pickup location, drop-off location, and contact number with the matched Driver solely to facilitate the ride. Drivers are contractually prohibited from using this data for any other purpose.
4.2 With Users
Users are provided with the Driver's first name, vehicle make and model, licence plate number, and real-time location during the ride.
4.3 With Service Providers
We engage authorised third-party vendors to operate certain platform functions, including:
Payment processing (licensed payment gateways)
SMS and push notification services
Cloud hosting and data storage
Background screening and identity verification agencies
Customer support software providers
Analytics and performance monitoring services
All service providers are bound by data processing agreements that restrict them from using data beyond the scope of their contracted service.
4.4 Legal and Safety Disclosures
We may disclose information without prior notice if required to do so by law, court order, or government directive, or where we believe in good faith that disclosure is necessary to prevent imminent harm, fraud, or illegal activity.
4.5 Business Transfers
In the event of a merger, acquisition, asset sale, or insolvency proceeding, user data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
4.6 No Sale of Personal Data
SafeRide does not sell, rent, or lease your personal data to third parties for their own marketing purposes.
5. Cookies and Tracking Technologies
We and our authorised partners use cookies, web beacons, pixel tags, and similar tracking technologies on our web platform to:
Maintain session state and authenticate users
Remember user preferences and settings
Measure platform performance and page load metrics
Deliver relevant promotional content
Detect fraudulent account activity
You may control cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality. Our mobile applications may use mobile analytics SDKs with equivalent tracking capabilities governed by this Policy.
6. Data Security
SafeRide implements industry-standard technical and organisational security measures to protect your personal information, including:
TLS/SSL encryption for all data transmitted between your device and our servers
AES-256 encryption for data stored at rest
Access controls restricting employee access to personal data on a need-to-know basis
Multi-factor authentication for administrative system access
Regular security assessments and vulnerability testing
DISCLAIMER: No method of electronic transmission or storage is completely secure. While we strive to apply commercially reasonable safeguards, SafeRide cannot guarantee absolute security of your data. You use the platform at your own risk with respect to data security limitations.
7. Your Rights
Subject to applicable law, you may exercise the following rights by submitting a written request to privacy@saferide.lk:
Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data where no legal obligation requires retention.
Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.
Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests, including marketing.
Right to Withdraw Consent: Withdraw previously given consent at any time without affecting prior lawful processing.
We will respond to verified requests within thirty (30) calendar days. We may request proof of identity before processing your request.
8. Data Retention
We retain personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Our general retention periods are:
Active account data: Retained for the duration of the account and for seven (7) years thereafter for financial and regulatory purposes.
Ride history and transaction records: Minimum seven (7) years, in compliance with applicable tax and accounting regulations.
Driver verification documents: Duration of Driver engagement plus seven (7) years.
Marketing data: Until consent is withdrawn or two (2) years of inactivity, whichever is earlier.
Support communications: Three (3) years from the date of resolution.
Upon expiry of retention periods, data is securely deleted or anonymised.
9. Third-Party Links
The platform may contain links to external websites or services not operated by SafeRide. We are not responsible for the privacy practices of third-party services, and we encourage you to review their privacy policies independently.
10. Children's Privacy
The SafeRide platform is not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data without verified parental consent, we will promptly delete such information. If you believe your child has provided data to us, contact us at privacy@saferide.lk.
11. Changes to This Privacy Policy
SafeRide reserves the right to amend this Privacy Policy at any time. Material changes will be communicated via in-app notification or email at least fourteen (14) days before taking effect. Continued use of the platform after the effective date of any updated Policy constitutes acceptance of the revised terms.
12. Contact Us
For privacy-related enquiries, requests, or complaints, please contact:
SafeRide — Data Privacy Officer
Email: privacy@saferide.lk
Address: SafeRide (Pvt) Ltd, [Registered Office Address], Sri Lanka
This Privacy Policy was last updated on 4 May 2025 and is effective as of the same date.