Privacy Policy

1. INTRODUCTION

YatGo Logistics Solutions ("YatGo", "we", "us", "our") is a managed dispatch logistics company serving Nairobi and across Kenya. The company operates a technology-enabled logistics coordination platform that connects Clients with verified independent Transporters for the provision of transport and logistics services. YatGo coordinates road transport services through a network of independent transporter partners.

YatGo is committed to safeguarding the personal data and privacy of all users of its platform. This Privacy Policy sets out, in a clear and transparent manner:

• the types of personal data we collect
• the purposes for which we collect and process such data
• the legal basis and manner of processing
• the retention periods applicable to personal data
• the rights available to data subjects in relation to their personal information

This Policy applies to all users of the YatGo platform, including Clients, Transporters (including drivers operating under Transporters), and any other individuals who access or use the platform or related services.

We process personal data strictly in accordance with the Data Protection Act, 2019 of Kenya, the applicable subsidiary legislation, and any other relevant data protection laws and regulations in force from time to time.

2. INFORMATION WE COLLECT

2.1 From Clients

We collect the following personal data:

• Full name
• Phone number
• Email address
• Pickup and delivery addresses
• Booking and transaction history
• Payment records (including M-Pesa references)
• Client ratings and feedback
• Communication records with YatGo

2.2 From Transporters and Drivers

We collect personal data from Transporters and Drivers (collectively referred to as "Transporters") as part of the onboarding, verification, and service delivery process on the YatGo platform. The categories of personal data collected include, but are not limited to:

• National Identification Card or passport details (including number and relevant identifiers)
• Driving licence details, including licence number, class, and expiry date
• Vehicle registration details and logbook information
• Insurance documentation and NTSA compliance records, including vehicle inspection details
• Kenya Revenue Authority (KRA) PIN certificate
• Certificate of Good Conduct details (including reference number and issue date)
• Photographs of identity documents, driving licence, and vehicle-related documents
• Vehicle photographs (minimum of four standard views)
• Passport photograph of the Driver
• Authorisation letters, where applicable (including supporting details of the vehicle owner such as name, ID number, photograph, and signature)
• Bank account details or M-Pesa number for purposes of payment processing
• Performance data, including ratings and service feedback
• Job allocation, completion, and delivery records

Legal Basis and Purpose of Collection: All personal data collected from Transporters is processed strictly for the purposes of verifying identity and eligibility, facilitating onboarding onto the platform, ensuring compliance with applicable regulatory and statutory requirements, and enabling the proper performance and management of transport services under a contractual arrangement between YatGo and the Transporter.

2.3 Automatically Collected Data

When you use the platform, we may automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, features used, and time spent on the platform
• GPS location data for the transporter during active delivery assignments

2.4 Lawful Basis for Processing

We process personal data on the following lawful bases under the Data Protection Act, 2019:

• Contractual necessity - to perform transport booking services
• Legal obligation - compliance with Kenyan law (tax, transport, regulatory requirements)
• Legitimate interest - platform operation, fraud prevention, service improvement
• Consent - for communications such as WhatsApp notifications where required

We do not process sensitive data except where strictly necessary for legal compliance or verification purposes.

3. HOW WE USE YOUR DATA

We use your personal data strictly for the following purposes:

• Processing and managing delivery bookings
• Assigning verified transporters to jobs and communicating driver details to Clients
• Sending delivery updates and driver assignment details via WhatsApp
• Processing payments and generating invoices and delivery confirmation records
• Verifying Transporters identity, eligibility, criminal record, tax compliance, and vehicle roadworthiness
• Operating the two-way driver and client rating system
• Improving the platform and our services
• Responding to claims, disputes, and complaints
• Complying with applicable Kenyan law including the Kenya Revenue Authority, the Data Protection Act 2019, and the Traffic Act Cap. 403

4. WHATSAPP COMMUNICATION

By using the YatGo platform and providing your phone number during registration, you expressly consent to receive communications via WhatsApp from YatGo for purposes strictly related to service delivery and platform operations. These communications may include booking confirmations, transporter assignment details, delivery coordination updates, payment notifications, and other service-related alerts necessary for the proper performance of transport services.

WhatsApp is used solely as an operational communication channel and not for unsolicited marketing, promotional messaging, or unrelated communications. Your phone number is not sold, leased, or otherwise disclosed to third parties for commercial purposes.

Where WhatsApp is used as a communication tool, please note that it is operated by Meta Platforms Inc., and your information may also be subject to Meta's independent data processing terms and privacy policies, which are outside YatGo's control. We recommend that you review WhatsApp/Meta's privacy policy at whatsapp.com/legal.

For purposes of data protection compliance, YatGo remains the data controller in respect of personal data collected through the platform. Any third-party service providers, including Meta (WhatsApp), act as independent data processors or separate controllers under their own terms and policies. While YatGo ensures that only the minimum necessary data is shared with such third-party platforms for operational purposes, YatGo is not responsible for the independent processing activities carried out by those third-party platforms once data is transmitted to them, provided such transmission is lawful and limited to legitimate service requirements.

5. DATA SHARING

We do not sell, rent, or trade personal data to any third party. YatGo only shares personal data in strictly limited circumstances where such disclosure is necessary for the provision, operation, or legal compliance of its services.

5.1 Transport Execution and Service Delivery

We share limited personal data strictly necessary for the execution of transport services, including:

• Driver and Transporter details (such as name and platform-enabled contact information) shared solely for job assignment, coordination, and delivery completion purposes
• Client information limited to what is necessary to facilitate booking, delivery, and successful completion of services

Driver personal contact details are not disclosed directly to Clients; communication is facilitated through the YatGo platform where applicable.

5.2 Service Providers and Operational Partners

We may share personal data with third-party service providers engaged in supporting platform operations, including payment processors such as M-Pesa and banking institutions for transaction processing, and IT infrastructure, cloud hosting, and technology service providers supporting platform functionality. All such service providers are contractually bound by confidentiality and data protection obligations and are only permitted to process data on YatGo's instructions and for specified purposes.

5.3 Legal and Regulatory Disclosures

We may disclose personal data where required by applicable law or lawful request from competent authorities, including but not limited to:

• Kenya Revenue Authority (KRA)
• National Transport and Safety Authority (NTSA)
• Directorate of Criminal Investigations (DCI)
• Courts of competent jurisdiction or other regulatory authorities in Kenya

5.4 Legal Protection and Legitimate Interests

YatGo may also disclose personal data where such disclosure is reasonably necessary to enforce contractual rights and obligations, detect, investigate, or prevent fraud, abuse, or misconduct, protect the rights, property, or safety of YatGo, its users, or the public, or defend or pursue legal claims in any competent forum. In all cases, YatGo ensures that any disclosure of personal data is limited to what is strictly necessary and proportionate to the stated purpose.

6. DATA RETENTION

YatGo retains personal data for the periods specified below, after which data is permanently deleted or anonymised:

After the applicable retention period, all personal data is permanently deleted from YatGo's systems. transporters and Clients may request confirmation of deletion by writing to info@yatgo.co.ke.

7. DATA SECURITY

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, disclosure, or alteration. These measures include:

• Encrypted data storage and secure transmission protocols (HTTPS)
• Access controls limiting who can view personal information to authorised personnel only
• Regular security assessments and platform audits
• Secure password hashing - plain-text passwords are never stored or transmitted
• Staff training on data protection obligations under the Kenya Data Protection Act, 2019

8. YOUR RIGHTS

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

• Right of access - to request a copy of all personal data we hold about you
• Right to rectification - to request correction of inaccurate or incomplete data
• Right to erasure - to request deletion of your data subject to legal retention obligations
• Right to restrict processing - to request that we limit how we use your data
• Right to data portability - to receive your data in a structured, machine-readable format
• Right to object - to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent - to withdraw consent for WhatsApp communications at any time
• Right to lodge a complaint - with the Office of the Data Protection Commissioner of Kenya

9. COOKIES

Our platform uses cookies to maintain session state, analyse platform usage, and improve user experience. The following cookie types are used:

• Session cookies - used for login functionality and maintaining your session while using the platform. These expire when you close your browser.
• Analytical cookies - used to understand how users interact with the platform. These are retained for a maximum of 12 months after which they are automatically deleted.

You may disable cookies through your browser settings. Disabling cookies may affect platform functionality including login persistence and booking history.

10. INTERNATIONAL USERS

While YatGo operates primarily in Kenya, we acknowledge that some Clients may be international businesses or individuals. Where applicable, we commit to handling data in a manner consistent with internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, and data subject rights. The Kenya Data Protection Act, 2019 remains the primary governing framework for all data processed by YatGo.

11. DATA CONTROLLER STATUS

YatGo is the Data Controller of all personal data processed through the platform.

Transporters and Drivers operate as:

• independent data processors only to the extent required for job execution
• not joint controllers unless expressly stated

This distinction is critical for liability limitation.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal obligations. Material changes will be communicated via email or WhatsApp at least 7 days before they take effect. The current version will always be available on the platform at www.yatgo.co.ke. Contact info@yatgo.co.ke for any privacy-related queries.