GrabTicket respects your privacy. This policy explains what data we collect when you use our website and services, why we collect it, and the choices you have. It applies to traveller accounts on the main marketplace. Operator portals may have separate notices for staff users.
1. Who we are
The data controller for the marketplace passenger service is the entity operating GrabTicket. For privacy enquiries contact us at support@grabticket.zm.
2. Information we collect
- Account data: name, email address, phone number (if provided), and password (stored in hashed form).
- Booking data: routes, dates, passenger names, seat selections, booking references, and payment status.
- Payment data: transaction references and amounts; card or mobile-money details are processed by our payment partners — we do not store full card numbers.
- Technical data: IP address, browser type, device information, and cookies needed for security and session management.
- Communications: messages you send to support and notification preferences.
3. How we use your information
- Create and manage your account.
- Process bookings and share necessary details with the operator fulfilling your trip.
- Send booking confirmations, schedule changes, and service messages.
- Prevent fraud, secure the platform, and comply with legal obligations.
- Improve our services through aggregated, non-identifying analytics.
4. Legal bases (where applicable)
Depending on your location, we rely on one or more of: performance of a contract (bookings), legitimate interests (security and improvement), consent (optional marketing), and legal obligation.
5. Sharing with third parties
We do not sell your personal information to advertisers. We share data only as needed to run the service:
- Bus operators: receive the passenger and trip information required to honour your ticket.
- Payment providers: receive data needed to process your payment.
- Infrastructure providers: hosting, email, and SMS vendors under contractual confidentiality.
- Authorities: when required by law or to protect rights and safety.
6. International transfers
Data may be processed in Zambia or other countries where our service providers operate. We take steps to ensure appropriate safeguards when data leaves your country.
7. Retention
- Account information is kept while your account is active and for a reasonable period after closure for legal and accounting purposes.
- Booking records are retained as required for tax, dispute resolution, and operator reporting.
- Logs and security data are retained for a limited period unless needed for an investigation.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, or object to certain processing. To exercise these rights, email support@grabticket.zm. You may also lodge a complaint with your local data protection authority.
9. Security
We use encryption in transit (HTTPS), access controls, and industry practices to protect your data. No method of transmission over the internet is completely secure; please use a strong, unique password.
10. Cookies
- Essential cookies: required for login sessions and security.
- Preference cookies: remember settings where enabled.
- You can control non-essential cookies through your browser settings.
11. Children
Our services are not directed at children under 16 without parental involvement. Bookings for minors should be made by a parent or guardian responsible for the account.
12. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date above. We encourage you to review this page periodically.
13. Contact
- Email: support@grabticket.zm
- Contact page: https://demo.innovotechsolution.com/contact