ROVO E-HAILING LIMITED

WEBSITE PRIVACY POLICY

Effective Date: 17 October 2026

Last Updated: 17 October 2026

Company: ROVO E-Hailing Limited

Country: Kenya

1. INTRODUCTION

ROVO E-Hailing Limited ("ROVO", "we", "our" or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit www.rovo.co.ke, submit an enquiry, apply to become a ROVO driver, access our services, follow links to our applications or communicate with us.

ROVO provides technology-driven mobility services designed to connect customers with drivers and facilitate transportation and related services.

We handle personal information in accordance with applicable Kenyan data protection laws, including the Data Protection Act, 2019, and relevant regulations.

2. WHO WE ARE

Data Controller: ROVO E-Hailing Limited

Website: https://www.rovo.co.ke

Country of Operation: Kenya

Business Location: Nairobi, Kenya

ROVO determines the purposes and means of processing personal information for its website and relevant platform operations, subject to applicable law.

Where another organisation independently determines how it processes your information, that organisation may have its own data protection responsibilities and privacy notice.

3. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with our website and services.

3.1 Information You Provide Directly

When you contact us, complete a form or register your interest in a service, we may collect:

Your full name.
Telephone number.
Email address.
Business or organisation name, where applicable.
The contents of your enquiry or message.
Information submitted when applying to become a driver or business partner.
Other information you voluntarily provide for a specified purpose.

Please do not submit passwords, payment security codes or unnecessary sensitive personal information through general website forms.

3.2 Technical and Usage Information

When you visit our website, we may collect technical information such as:

Internet Protocol (IP) address.
Browser type and version.
Device type and operating system.
Pages visited and relevant interaction information.
Visit dates, times and referral information.
Technical error reports and security logs.
Cookie identifiers and similar technical information, where applicable.

This information helps us maintain website functionality, diagnose errors, protect our systems and understand website performance.

3.3 Driver and Recruitment Enquiries

If you express interest in driving with ROVO or joining our team, we may collect the information you submit through the relevant application process.

Additional identity, driving licence, vehicle, insurance or eligibility documents may be requested through a designated onboarding process where necessary and lawful.

The processing of information through the ROVO Driver App is also governed by the applicable Driver Privacy Policy.

3.4 Customer and Service Enquiries

If you contact us about a ride, promotion, complaint, payment issue or other service, we may process the information necessary to respond.

Where a matter concerns an actual trip, we may use relevant booking references, transaction details or other records lawfully available to us.

3.5 Information From Other Sources

Where lawful and necessary, we may receive relevant information from authorised service providers, payment providers, business partners or verification services.

We will handle such information in accordance with applicable law and the relevant purpose for which it was obtained.

4. HOW WE USE YOUR INFORMATION

ROVO may use personal information for the following purposes:

Responding to enquiries and customer support requests.
Managing driver, recruitment and business partnership applications.
Providing information about ROVO services and operating locations.
Directing users to relevant customer or driver applications.
Administering promotional campaigns and responding to promotion-related enquiries.
Maintaining, securing and improving the website.
Preventing fraud, spam, unauthorised access and other misuse.
Monitoring website performance and diagnosing technical problems.
Communicating material changes to services, policies or terms.
Complying with legal and regulatory obligations.
Establishing, exercising or defending legal claims where necessary.
Carrying out other specified and lawful purposes communicated to you.

We will not use personal information for a purpose incompatible with the original collection purpose unless permitted by applicable law.

5. LAWFUL BASIS FOR PROCESSING

ROVO will process personal information only where an appropriate lawful basis applies.

Depending on the circumstances, this may include:

Consent: Where you have freely consented to a specified processing activity.
Contractual necessity: Where processing is necessary to take requested steps before entering into a contract or to perform a contract with you.
Legal obligation: Where processing is necessary to comply with applicable law.
Legitimate interests: Where permitted by law, for activities such as website security, fraud prevention and service improvement, provided the relevant rights and interests are appropriately considered.
Other lawful grounds: Where another basis expressly permitted by applicable law applies.

Where consent is the relevant basis, you may withdraw it. Withdrawal does not invalidate processing lawfully undertaken before withdrawal or prevent processing supported by another valid lawful basis.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies to support essential website functions, security, user preferences and performance analysis.

Cookies may include:

Essential cookies: Necessary for website functionality or security.
Preference cookies: Used to remember selected settings, where available.
Analytics cookies: Used to understand website traffic and performance, where implemented.
Advertising or marketing cookies: Used only where implemented and handled in accordance with applicable legal requirements.

Where consent is required, non-essential cookies will not be activated before the required consent is obtained.

You can manage cookies through your browser settings and any cookie preference controls available on the website.

Disabling certain cookies may affect website functionality.

ROVO will update its cookie disclosures to reflect the actual technologies used on www.rovo.co.ke.

7. MARKETING AND PROMOTIONAL COMMUNICATIONS

ROVO may communicate information about services, promotions, driver recruitment, referral programmes and other relevant offers where permitted by law.

Where prior consent or another specific permission is required, we will obtain it before sending the relevant communications.

You may opt out of marketing communications using the available unsubscribe option or by contacting ROVO through its official channels.

Opting out of marketing will not prevent us from sending essential service messages or communications required by law.

8. WHEN WE SHARE PERSONAL INFORMATION

ROVO does not sell personal information to third parties as a commercial data product.

We may share information with the following categories of recipients where necessary and lawful:

8.1 Technology and Hosting Providers

Providers that help operate, secure, maintain or host the website and related systems.

8.2 Communications Providers

Providers that help us deliver emails, customer support messages or other communications.

8.3 Analytics and Security Providers

Providers that help us assess website performance, identify technical problems or protect our systems, subject to applicable legal requirements.

8.4 Payment Providers

Where a website feature or linked service involves payment, relevant information may be shared with authorised payment providers to process transactions or resolve payment issues.

8.5 Business and Service Partners

Relevant information may be shared with authorised partners where necessary to respond to an enquiry or deliver a service you request.

8.6 Legal and Regulatory Authorities

We may disclose information where required by law, pursuant to a valid legal process or otherwise lawfully justified.

8.7 Business Transactions

Where ROVO undergoes a merger, acquisition, restructuring or transfer of business assets, relevant information may be transferred subject to applicable law and appropriate safeguards.

We take reasonable steps to ensure that service providers handling information on our behalf are subject to appropriate confidentiality and data protection obligations.

9. INTERNATIONAL DATA TRANSFERS

Some website hosting, cloud storage, communications or other technology providers may process information outside Kenya.

Where personal information is transferred outside Kenya, ROVO will comply with applicable Kenyan data protection requirements concerning international transfers and appropriate safeguards.

We will take reasonable steps to ensure that information receives appropriate protection and is used only for authorised purposes.

10. HOW LONG WE KEEP YOUR INFORMATION

ROVO retains personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal obligations.

Retention may depend on:

The nature of your enquiry.
Whether a business or service relationship remains active.
Applicable accounting, tax or regulatory requirements.
The need to resolve complaints or disputes.
Website security and fraud prevention requirements.
Any lawful requirement to preserve relevant records.

When information is no longer required, we will take appropriate steps to delete it, anonymise it or securely dispose of it, subject to lawful retention requirements.

11. HOW WE PROTECT YOUR INFORMATION

ROVO will implement appropriate technical and organisational safeguards designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

Safeguards may include:

Access restrictions and appropriate user permissions.
Secure account and system controls.
Appropriate encryption and secure communications.
Confidentiality obligations for personnel and service providers.
Security monitoring and incident response procedures.
Backups and appropriate recovery arrangements.
Periodic review of relevant security practices.

No website or electronic transmission can be guaranteed to be completely secure. ROVO will take reasonable and legally required steps to address security risks and respond to personal data breaches.

12. YOUR DATA PROTECTION RIGHTS

Subject to applicable law and any relevant limitations, you may have the right to:

12.1 Be informed: Receive information about how your personal information is collected and used.
12.2 Access: Request access to personal information held about you.
12.3 Correction: Request correction of inaccurate, incomplete or misleading information.
12.4 Deletion: Request deletion of personal information where legally permitted, subject to lawful retention obligations.
12.5 Object: Object to certain processing activities where provided by law.
12.6 Withdraw consent: Withdraw consent where consent is the applicable lawful basis.
12.7 Complain: Raise a complaint with ROVO and, where appropriate, the Office of the Data Protection Commissioner in Kenya.
12.8 Other rights: Exercise any additional rights available under applicable Kenyan data protection legislation.

To exercise your rights, contact ROVO through the official contact details published on www.rovo.co.ke.

We may request reasonable information to verify your identity before processing a request. Requests will be handled within applicable legal timeframes and procedures.

For further information about data subject rights, visit the official ODPC website:

https://www.odpc.go.ke/

13. THIRD-PARTY WEBSITES AND LINKS

Our website may contain links to third-party websites, social media platforms, app marketplaces, payment services or other external resources.

ROVO does not control the privacy practices of independent third parties.

If you follow an external link, your interaction with that service may be governed by its own terms and privacy policy.

We encourage you to review the relevant privacy notice before submitting personal information to a third party.

14. CHILDREN'S PRIVACY

ROVO's website is not intended to encourage children to submit personal information without an appropriate lawful basis and any required parental or guardian authorisation.

Where children's personal information is collected or processed, ROVO will apply the safeguards and legal requirements applicable under Kenyan law.

If you believe a child's information has been collected unlawfully, please contact us through our official channels so that we can assess the matter and take appropriate action.

15. AUTOMATED PROCESSING

Our website may use automated technical systems to detect spam, protect against cyberattacks, monitor performance or support other operational functions.

Where personal information is used for a decision based solely on automated processing that produces legal effects or similarly significant effects on an individual, ROVO will comply with applicable legal requirements and relevant safeguards.

16. CHANGES TO THIS PRIVACY POLICY

ROVO may update this Privacy Policy to reflect changes in our website, services, technology, business practices or applicable law.

The latest version will be published on www.rovo.co.ke with the applicable effective date.

Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

We encourage visitors to review this page periodically.

17. CONTACT ROVO ABOUT PRIVACY

For privacy enquiries, requests to exercise data protection rights or concerns about the handling of personal information, contact ROVO through the official contact details published on:

Website: https://www.rovo.co.ke

Please use the subject line "Website Privacy Request – ROVO" and include sufficient information for us to understand your request.

Do not include passwords, verification codes or unnecessary sensitive information.

If your concern is not resolved, you may contact the Office of the Data Protection Commissioner in Kenya:

Website: https://www.odpc.go.ke/

18. GOVERNING LAW

This Privacy Policy is governed by the laws of Kenya, including the Data Protection Act, 2019, and applicable regulations.

Nothing in this Policy is intended to exclude or restrict any right or protection that cannot lawfully be excluded or restricted.

19. OUR COMMITMENT

ROVO is committed to protecting privacy, handling personal information responsibly and communicating clearly about how information is used.

We aim to build a trusted mobility platform where customers, drivers and partners can engage with confidence.

ROVO E-Hailing Limited

ROVO — Ride. Connect. Go.

Your Destination. Your Choice.