Last updated: June 2026
GM Rides ("we", "us", "our") operates a transport booking platform offering intercity travel, airport transfers, and private hire across Kenya. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
We are committed to handling your data responsibly and in accordance with the Kenya Data Protection Act, 2019, and other applicable laws. By using GM Rides, you agree to the practices described in this policy.
We collect information you provide directly when you make a booking or create an account, including your name, email address, phone number, and travel details (origin, destination, dates, and number of passengers).
When you make a payment, payment processing is handled by our third-party providers (M-Pesa, Stripe). We do not store full card numbers or M-Pesa PINs on our servers. We retain transaction references and booking confirmation details.
If you sign in with Google, we receive your name and email address from Google to create or access your account.
We may also collect limited technical information such as your browser type and general usage data to keep the service running smoothly.
We use your information to process and confirm your bookings, send you booking confirmations and travel updates (by SMS and email), provide customer support, calculate loyalty discounts, and improve our services.
We may use your contact details to communicate important information about your trips. We do not sell your personal information to third parties.
We share information only as necessary to provide the service: with payment processors to complete transactions, with SMS providers to deliver booking confirmations, and with transport operators to fulfil your bookings.
We may disclose information if required by law, or to protect the rights, safety, and security of GM Rides, our users, or others.
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Passwords are stored in encrypted (hashed) form and are never visible to us.
While we work to safeguard your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Under the Kenya Data Protection Act, 2019, you have the right to access the personal data we hold about you, request corrections, request deletion, and object to certain processing.
To exercise any of these rights, please contact us using the details below. We will respond to your request within a reasonable timeframe.
We retain your booking and account information for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.
Our website uses minimal local storage to remember your preferences (such as your selected currency and login session). We do not use invasive tracking cookies for advertising.
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of GM Rides after changes constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or how we handle your data, contact us at hello@gmrides.net. GM Rides is based in Nairobi, Kenya.