Privacy Policy

Xpress Cars LTD ("we", "us", or "our") respects your privacy. This Privacy Policy explains what personal information we collect when you use our website and services in Nakuru, Kenya, how we use it, and the choices you have.

1. Information We Collect

We may collect the following, depending on how you use our services:

• Account details — your name, email address, phone number, and password (stored securely).
• Vehicle information — make, model, and registration details you add to your account.
• Order & booking data — services you request, schedules, and order history.
• Location data — pickup/delivery addresses and map coordinates you provide for services such as carpet pickup.
• Payment information — processed through M-Pesa and other providers; we do not store full payment credentials.
• Sign-in data — if you sign in with Google, we receive your name and email from Google to create or match your account.

2. How We Use Your Information

• To create and manage your account.
• To process bookings, orders, payments, and subscriptions.
• To send service updates, confirmations, and receipts via SMS, WhatsApp, or email.
• To provide customer support and improve our services.
• To comply with legal and regulatory obligations.

3. Sharing of Information

We do not sell your personal information. We share it only with service providers who help us operate (for example payment processors, SMS/email providers, and mapping services), and where required by law.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide services, meet legal obligations, resolve disputes, and enforce our agreements.

5. Security

We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data against unauthorised access.

6. Your Rights

Subject to applicable Kenyan data protection law, you may request access to, correction of, or deletion of your personal information, and you may object to certain processing. To exercise these rights, contact us using the details below.

7. Cookies & Local Storage

Our website uses cookies and browser storage to keep you signed in, remember your preferences and cart, and improve your experience. You can control cookies through your browser settings, though some features may not work without them.

8. Third-Party Services

Some features rely on third parties (such as Google Sign-In, Google Maps, and M-Pesa). Their use of your information is governed by their own privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date above reflects the latest revision.

10. Contact

For any privacy questions or requests, please reach out via our contact page.

This document is provided as general information and does not constitute legal advice. It should be reviewed by qualified legal counsel and aligned with the Kenya Data Protection Act before being relied upon.