Data
Deletion Policy

Overview

Okra Technologies is committed to data minimisation and the responsible handling of your personal information. This Data Deletion Policy explains what personal data we collect through the Okra Rides platform, how long we retain it, and how you can request that your data be deleted.

This policy applies to all users of the Okra Rides application, including riders, drivers, and delivery partners, as well as visitors to our support channels.

Data We Collect

We collect only the data necessary to provide, improve, and secure our service. The categories of personal data we process include:

• Identity data: Name, phone number, email address, and profile photo
• Location data: Real-time GPS coordinates during active trips and when drivers are online
• Trip data: Pick-up and drop-off locations, routes, duration, timestamps, and fare amounts
• Payment data: Transaction records and payment method tokens (full card details are not stored by us)
• Device data: Device identifiers, operating system, app version, and IP address
• Communications: Messages sent through the in-app Help Centre and support channels
• Behavioural data: App usage patterns, ratings submitted, and feature interactions

How to Request Data Deletion

You can request deletion of your personal data through any of the channels below. Please include your registered phone number or email address so we can verify your identity.

We will acknowledge receipt of your request within 2 business days and complete the deletion within 30 days, subject to any applicable legal retention obligations described below.

Retention Schedule

Different categories of data are retained for different periods based on operational necessity and legal requirements.

Automated Deletion

Where possible, we automate the deletion of personal data that has reached the end of its retention period. This includes:

• Profile data of inactive accounts (no login for 24 months) is automatically flagged for deletion review
• Anonymisation of trip-level personal identifiers after 12 months for data held for operational purposes
• Purging of device tokens and push notification identifiers when they are no longer active

You do not need to take action for automated deletions to occur. However, if you wish to accelerate deletion of any specific category of data, you may submit a specific request using the channels above.

Third-Party Data

When we share your data with service providers (payment processors, cloud infrastructure providers, notification services), those providers are contractually obligated to honour deletion requests and comply with applicable data protection laws. We will notify relevant third-party processors of your deletion request where applicable.

Note that we cannot control data that you have voluntarily shared with third parties outside of the Okra Rides platform (e.g. social media posts about your trip).

Your Rights

Under applicable Zambian data protection principles and international best practices, you have the right to:

• Request deletion of your personal data at any time
• Request access to a copy of all personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request restriction of processing while a deletion request is being evaluated
• Object to processing for purposes beyond what you originally consented to

We will respond to all data rights requests within 30 days. In complex cases we may extend this by a further 60 days with notice to you.

Contact

For all data deletion requests and data rights enquiries, contact us through the channels below. Please include your registered phone number or email address to help us locate your records.