Last updated: July 2026
Introduction & Scope
This Privacy Policy outlines the data practices of GoCom Synergy & Investment Ltd (trading as "GoCom," "Company," "we," "our," or "us"). It covers how we collect, store, utilize, transmit and dispose of your Personal Information through our website (www.gocomsynergy.com), our mobile applications (including the Rider and Driver Apps), and when you interact with us offline.
This policy strictly applies to GoCom's proprietary services. It does not extend to third-party services, websites or booking platforms that we do not directly own or control. GoCom is fully committed to operating as a responsible Data Controller and Data Processor, handling all individual data in strict compliance with the Nigeria Data Protection Act (NDPA) 2023.
1. Information We Collect
To operate a functional, safe and efficient digital transportation marketplace, we collect and process several categories of Personal Information from our Riders, Drivers, Appointed Drivers and general platform users. This data is acquired when you voluntarily provide it during account registration or through automated device triggers during a trip.
Information you provide voluntarily
- Account & identity data — full name, date of birth, mobile numbers, home/work addresses, active email addresses and account login credentials.
- Verification & regulatory records — photographic identification (National ID card/number, Driver's Licence or International Passport), utility bills for address confirmation, guarantor or referee records (for Service Providers) and tax registration indicators.
- Payment & financial profiles — credit/debit card numbers, expiration dates, billing zip codes, digital wallet linked references and partner banking profile details.
- Communication & interaction logs — written records of support queries, safety alerts, email correspondences, face-to-face chat summaries and in-app feedback forms.
Information collected automatically via app integration
- Live background & foreground geolocation data (GPS) — continuous processing of real-time coordinate streams to calculate localized fares, track route deviations, support active trip manifests, map pick-up points and ensure passenger/driver safety.
- Technical identifiers & Google Advertising ID (GAID) — device hardware models, operating systems, mobile app crash logs, interface functionality preferences, IP addresses and your unique Google Advertising ID (GAID), used for fraud diagnostics, system performance analysis and tailored promotional attribution.
- Cookies & browser storage data — small operational data blocks used on our web interfaces to preserve user authentication states, capture browser environments, prevent repeated password prompts and track regional usage trends.
- Physical facility footage — digital photos or surveillance video clips captured by closed-circuit television (CCTV) security networks running within and around GoCom's physical corporate offices and registration centres.
2. Lawful Basis and Purposes of Processing
GoCom processes your personal data strictly in adherence to the permissible legal pillars established by Section 25 of the NDPA 2023. We rely on the following bases to power our ride-hailing infrastructure:
- Performance of a contract — fulfilling our primary platform obligation to connect Riders with nearby Drivers, calculating trip fares, collecting payments and distributing electronic receipts.
- Legal & statutory obligations — complying with state and federal transport guidelines, tax reporting rules, anti-money laundering (AML) controls and verification laws.
- Legitimate interests — developing app stability, protecting platform software protocols against security threats, debugging systemic infrastructure crashes and running internal fraud detection screens.
- Explicit consent — tailoring optional promotional events, administering user satisfaction surveys and capturing optional device permission flags.
3. How We Use Your Data
- matching Riders with proximity-optimized Drivers;
- generating dynamic pricing structures and fare estimates;
- screening for payment fraud and platform exploitation;
- routing background telemetry for immediate emergency response;
- aggregating metrics to continuously refine mobile stability.
4. Data Sharing, Disclosures and Ecosystem Partners
We are the legal owners of the information logs gathered through GoCom. We do not rent or sell your identifiable historical files to speculative advertising brokers. Data sharing occurs strictly under controlled conditions to maintain operations, verify account integrity or meet statutory mandates:
- Platform ecosystem users — to finalize the digital ride arrangement, we display relevant, non-excessive details of the Rider (name, rating and live pickup coordinates) to the matched Driver, and corresponding Driver details (name, vehicle type and phone contact) to the Rider.
- Payment infrastructure providers — verified payment details are processed securely through our designated third-party payment gateway switch, strictly for fare settlement, authorization holds or late fee collection.
- State and federal regulatory authorities — in accordance with state transportation ministry regulations (including the Lagos State Ministry of Transportation API protocols), GoCom transfers live trip manifests, active coordinator mapping and user licensing indices for safety management and urban planning.
- Law enforcement & civic safety bodies — data is shared with organizations such as the Nigeria Police Force or the Economic and Financial Crimes Commission (EFCC) if required by an enforceable court order, or when necessary to investigate platform manipulation or fraud.
5. Cross-Border Data Transfers
Your data is managed from our central secure database networks inside the Federal Republic of Nigeria. If operations necessitate routing files to cloud infrastructure or technical partners outside Nigeria, the transfer complies with the NDPA 2023:
- we confirm whether the destination country is featured on the Nigeria Data Protection Commission's (NDPC) Whitelist of safe data jurisdictions;
- where no adequacy decision exists, transfers proceed only via verified Standard Contractual Clauses (SCCs), with explicit user consent, or when essential to execute your direct ride-hailing request.
6. Mobile Device Settings & GAID Controls
Riders and Drivers maintain absolute authority over the automated telemetry signals their mobile devices transmit to GoCom:
- Location permissions — GPS data access can be modified or deactivated at any time through your device's operating system settings menu. Disabling background tracking will, however, limit or prevent the app from processing ride requests or calculating proximity fares.
- Google Advertising ID (GAID) controls — in alignment with Google's privacy standards, users can reset their GAID or opt out of personalized ad tracking via their Android device settings (Settings > Privacy > Ads). GoCom strictly limits GAID processing to operational fraud detection, account risk auditing and attribution profiling.
- App deinstallation — you can stop all automated data collection by deleting the GoCom application from your device.
7. Data Principles and Retention Limits
GoCom manages data in accordance with core processing principles:
- Data minimization — we limit our collection to the exact data required to deliver core matching services.
- Retention boundaries — personal data is retained for the duration of your active account relationship. Accounts remaining completely inactive or dormant for eighteen (18) consecutive months will be automatically closed.
- Statutory holds — even after an account is deleted or closed, specific transaction histories, identity records and tax metadata will be retained for mandated statutory periods to satisfy local anti-money laundering and tax guidelines.
8. Your Data Rights under the NDPA
As a Data Subject under the Nigeria Data Protection Act, you possess the following legal rights, which can be exercised without any platform fee:
- Right to access — request an electronic copy of the exact personal information profiles we store about you.
- Right to rectification — modify or complete inaccurate or outdated account registration logs.
- Right to erasure — request total deletion of account logs when there is no overriding legal hold or pending fraud investigation.
- Right to object / restrict — suspend processing of data for marketing or challenge an overriding interest.
- Right to portability — receive your structured data in a common, machine-readable format for transfer.
- Right to withdraw consent — revoke consent for optional data processing pipelines at any time.
9. Data Security Architecture
GoCom enforces stringent online and offline security protocols to safeguard sensitive personal data against unauthorized leaks, theft, cyberattacks or manipulation:
- Online protections — financial details, such as debit card references, are encrypted using industry-standard Secure Sockets Layer (SSL) transmission technology, verifiable via the "https" prefix in our web address.
- Offline access constraints — inside our corporate environment, user information is restricted via role-based access controls. Only verified employees needing specific logs for billing, passenger disputes or support are granted access. Core physical servers are managed within restricted-access facilities.
10. Minor Protection Framework
GoCom maintains an absolute age floor of 18 years to access the platform independently. We do not knowingly harvest information from individuals under this threshold without verifiable parental or legal guardian consent.
If we identify an unauthorized minor account, we will purge the corresponding data files from our active systems. If you believe a minor has created an account without authorization, please notify us immediately at dpo@gocom.ng.
11. Regulatory Compliance and Dispute Management
Our data collection practices are structured to comply with Nigerian laws, including the Constitution of the Federal Republic of Nigeria 1999 (as Amended) and the Cybercrimes (Prohibition, Prevention, Amendment) Act 2024.
In the event of a suspected system security breach or data leak, GoCom will investigate and notify the Nigeria Data Protection Commission (NDPC) within the statutory timeframe, as well as affected users where applicable.
If you believe your privacy rights have been infringed, please contact our Data Protection Team first to allow us to address your concerns directly:
GoCom Synergy & Investment Ltd
Privacy email: dpo@gocom.ng
Corporate office: Suite B2 Ultimate Plaza, Club Road, Abakaliki Street, Awka, Anambra State, Nigeria
You retain the right to escalate unresolved privacy grievances directly to the national oversight body:
Nigeria Data Protection Commission (NDPC)
No. 5, Donau Crescent, Off Amazon Street, Maitama, Abuja, Nigeria
Email: info@ndpc.gov.ng
12. Policy Modifications
GoCom reserves the right to revise or amend this Privacy Policy to reflect changing transport rules, security requirements or technological updates.
Any updates will be posted to this page, and material changes will be accompanied by an email alert or a prominent in-app notification. Your continued use of GoCom after changes take effect indicates your acknowledgement and acceptance of the updated terms.
