Privacy Policy

The controller of the personal data described here is D.M. Connecto Digital VBA, a company registered in Aruba (Chamber of Commerce H58301.0), L.G. Smith Blvd (Sasakiweg) 62, Oranjestad, Aruba. You can reach us about privacy at info@drivekariba.com.

Kariba is a booking marketplace. When you make a booking, the rental company you book with receives the personal data it needs and becomes a separate, independent controller of that data. It is responsible for its own compliance with data-protection law and for how it uses and safeguards your data, and Kariba is not responsible for a rental company’s data practices. We share only the personal data reasonably needed for your booking, and we require rental companies by contract to protect it and use it only to fulfil your rental. This Policy covers Kariba’s own processing; the rental company’s handling of your data is governed by its own privacy practices.

Account data: your name, email, phone number and preferred language, and a password (which our authentication provider stores in hashed form — we never see it in plain text).

Booking data: the vehicles, dates, times, pickup and drop-off locations and amounts of your bookings, optional flight numbers, and the messages you exchange with a rental company through the Platform.

Identity and driver data: your driver’s licence number and expiry date, a photo or scan of your driver’s licence if you upload one, and your date of birth. We collect and store this so a rental company can verify your identity, age and licence and meet its requirements for the rental. It is shared with the rental company for your booking. Licence images and identity data are kept only as long as needed for the rental and for applicable legal, insurance and dispute purposes, then deleted or anonymised.

Payment data: handled by our payment processor; Kariba does not store full card numbers. Pay-at-pickup amounts are collected by the rental company directly.

Communications: the emails, WhatsApp messages and support requests you send or receive.

Technical and usage data: device, browser, IP address, and log and cookie data needed to operate, secure and improve the Platform.

To create and manage your account and to process your bookings and payments — to perform our contract with you.

To send booking notifications by email and WhatsApp and to provide customer support — to perform our contract and for our legitimate interest in running the service.

To keep the Platform secure, prevent fraud and abuse, and analyse and improve the service — for our legitimate interests.

To meet legal, tax and accounting obligations — to comply with the law.

For marketing and advertising measurement — only where you have given consent, which you can withdraw at any time.

The rental company for your booking receives the personal data it needs to fulfil the rental (such as your name, contact details, booking dates and, where required, your driver/identity details), as an independent controller.

Service providers that process data on our behalf, under contract and on our instructions: payment processing (Fygaro), email (Resend), WhatsApp messaging (WaSender), hosting, database and authentication (Supabase), file storage (Cloudflare R2), and advertising and analytics measurement (Meta).

Authorities, professional advisers, or a successor in a business transfer, where required by law or to protect rights, safety or property.

We do not sell your personal data.

Some of our service providers process personal data outside Aruba, including in the United States and the European Union. Where data is transferred, we rely on appropriate safeguards and on providers that offer an adequate level of protection.

We use cookies and similar technologies that are strictly necessary to sign you in, remember your preferences and keep the Platform secure. With your consent, we also use analytics and advertising technologies (including the Meta pixel) to measure and improve our marketing. You can manage non-essential cookies through your browser settings or our cookie controls.

We keep personal data for as long as your account is active and as needed for the purposes above, including legal, tax, accounting and dispute-resolution requirements. When it is no longer needed, we delete or anonymise it.

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No online service can be completely secure, but we work to keep your data safe and to limit access to those who need it.

Subject to applicable law, you may request access to your personal data, and its correction, deletion or restriction; object to certain processing; ask for a copy in a portable format; and withdraw any consent you have given. To exercise these rights, contact us at the address below.

We will respond within a reasonable time. If you are not satisfied, you may lodge a complaint with the competent data-protection authority in Aruba.

The Platform is intended for adults (18+). We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.

We may update this Policy from time to time. If a change is material, we will take reasonable steps to notify you, for example by posting the updated Policy with a new “last updated” date. Please review it periodically.

For any privacy question or request, email info@drivekariba.com, or write to D.M. Connecto Digital VBA, L.G. Smith Blvd (Sasakiweg) 62, Oranjestad, Aruba.