PRIVACY POLICY
Last Updated: December 26, 2025
1. INTRODUCTION
This Privacy Policy describes how <strong>Lymngo</strong> ("we," "us," or "the Platform") collects, uses, and shares your personal information. By using our Platform, you agree to the collection and use of information in accordance with this policy. This policy adheres to the Trinidad and Tobago Data Protection Act (2011) and international best practices for data security.
2. INFORMATION WE COLLECT
To facilitate vehicle rentals and ensure trust between users, we collect the following categories of data:
A. Identity Verification Data (The "KYC" Check)
- Government ID: A digital scan or photo of your Driver's License and/or National ID/Passport.
- Selfie: A live photo to match against your ID.
- Purpose: To verify you are a real person, hold a valid license, and meet the age requirements (21+).
B. Vehicle Data (For Owners)
- Vehicle Registration Certificate (Certified Copy).
- Insurance Certificate.
- Photos of the vehicle (Interior/Exterior).
C. Payment Information
- We do not store full credit card numbers on our servers. All transactions are processed by a third-party payment processor (e.g., WiPay, PayPal) which is PCI-DSS compliant. We only retain the last 4 digits for transaction history.
D. Usage & Location Data
- IP Address, device type, and login timestamps (used for fraud detection).
- Note: If a vehicle is equipped with a GPS tracker, the Vehicle Owner may have access to location data. The Platform does not actively monitor vehicle location unless a theft or safety incident is reported.
3. HOW WE USE YOUR DATA
We use your data strictly to operate the marketplace:
- Facilitating Bookings: Sharing your Name and Driver's License status (but not the full ID image) with the Vehicle Owner upon booking confirmation.
- Safety & Verification: To screen for suspended licenses, previous fraudulent activity, or "PH" (illegal taxi) usage history.
- Legal Compliance: To comply with requests from the Trinidad and Tobago Police Service (TTPS) or insurance adjusters in the event of an accident or crime.
4. INTERNATIONAL DATA TRANSFER (The "US Server" Clause)
⚠️ IMPORTANT: YOUR DATA MAY BE STORED OUTSIDE TRINIDAD AND TOBAGO
- Storage Location: You acknowledge that our servers and database providers (e.g., Amazon Web Services, Cloudflare) are located in the United States and other jurisdictions.
- Consent: By using the Platform, you explicitly consent to the transfer of your personal data outside of Trinidad and Tobago.
- Safeguards: We rely on your consent and standard contractual clauses to ensure your data is treated with the same level of security required by Trinidad and Tobago law.
5. SHARING YOUR INFORMATION
We do not sell your personal data. We only share it in these specific scenarios:
- With the Vehicle Owner: Once a booking is confirmed, the Owner receives your Full Name, Phone Number, and Driver Verification Status.
- With Authorities: We will disclose your personal information to the TTPS or Licensing Authority if we are presented with a valid warrant or if we reasonably believe the vehicle is being used for illegal activities (e.g., drug trafficking, robbery).
- With Insurance Providers: In the event of a claim, relevant rental logs and identity data will be shared with the insurance company to facilitate coverage.
6. DATA SECURITY
We use industry-standard AES-256 Encryption to protect your sensitive documents (like Driver's Licenses) both in transit and at rest. Access to these documents is restricted to authorized personnel only for verification purposes.
7. DATA RETENTION & DELETION
- Retention: We retain transaction and identity records for seven (7) years as required by Trinidad and Tobago tax and anti-money laundering laws.
- Deletion Request: You may request the deletion of your account by contacting support. However, if you have rented a vehicle, we must retain the core transaction record for legal liability reasons.
8. YOUR RIGHTS
Under the Data Protection Act, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of any inaccurate data.
- Withdraw your consent for marketing communications.
9. CONTACT US
If you have questions about this Privacy Policy, please contact our Data Protection Officer at:
- Email: [email protected]
- Address: Port of Spain, Trinidad and Tobago