Privacy Policy
We are committed to protecting your personal data. This policy explains exactly what we collect, how we use it, and what control you have.
1. Introduction
Bolvs Dealers Club (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit www.bolvs.com and use our vehicle marketplace services.
By using BOLVS you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.
2. Information We Collect
2.1 Personal Information
- Name, email address, and phone number
- Mailing address and billing information
- Government-issued ID (Ghana Card) — stored encrypted, never exposed via API
- Payment information and financial data
- Profile photo and other uploaded images
2.2 Vehicle Information
- Vehicle Identification Number (VIN)
- Make, model, year, and specifications
- Vehicle history and condition reports
- Photos and listing details
- Pricing and negotiation history
2.3 Automatically Collected
- IP address and device information
- Browser type and version
- Pages visited and time-on-site
- Clickstream data and usage patterns
- Cookies and similar tracking technologies
3. How We Use Your Information
- Provide, operate, and maintain our services
- Process transactions and send notifications
- Verify your identity and prevent fraud (KYC/AML)
- Communicate about your account and transactions
- Send marketing communications (with your consent)
- Improve and personalise your platform experience
- Analyse usage patterns to optimise our services
- Comply with legal obligations and enforce our terms
- Detect, prevent, and address security threats
4. How We Share Your Information
With Other Users
When you make an enquiry or purchase, your contact information may be shared with the seller to facilitate the transaction.
Service Providers
We work with trusted third parties for payment processing, identity verification, analytics, and customer support.
Legal Requirements
We may disclose your information if required by law or to protect our rights, safety, or property.
Business Transfers
In a merger, acquisition, or asset sale your information may be transferred to the acquiring entity.
🔒 We never sell your personal information to third parties for their own marketing purposes.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information:
- Fernet encryption of sensitive fields (e.g. Ghana Card numbers) at rest
- TLS/HTTPS for all data in transit
- Regular security audits and vulnerability assessments
- Physical and digital access controls on our data centres
- Two-factor authentication (TOTP) available for all accounts
- Audit logs for all sensitive operations
No method of transmission over the internet is 100% secure. While we use industry-standard measures, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information only as long as necessary to fulfil the purposes in this policy, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 90 days after deletion |
| Transaction records | 7 years (financial regulations) |
| KYC documents | 7 years (legal requirement) |
| Chat & support logs | 2 years |
| Analytics data | 26 months (anonymised) |
7. Your Data Rights
Depending on your location, you may have the following rights:
Access
Request a copy of your personal data
Correction
Correct inaccurate or incomplete information
Deletion
Request erasure (subject to legal obligations)
Portability
Receive your data in a machine-readable format
Objection
Object to processing for certain purposes
Withdraw Consent
Opt out of marketing at any time
To exercise any of these rights, email us at info@datatrux.com. We will respond within 30 days.
9. International Data Transfers
Your information may be transferred to and processed on computers located outside your country. If you are located outside the United States and provide information to us, please be aware that we transfer data to the United States and process it there.
🇪🇺 GDPR Notice (EU/EEA Users)
If you are in the European Economic Area, you have data protection rights under GDPR. Contact us to exercise them.
🇺🇸 CCPA Notice (California)
California residents have rights under the CCPA including opt-out of data sales. We do not sell your personal information.
10. Children's Privacy
Our Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@datatrux.com and we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy here and updating the “Last updated” date. We encourage you to review this page periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, contact us:
Bolvs Dealers Club — Privacy Office
100 Auto Drive, Suite 500, Detroit, MI 48226, United States
Email: info@datatrux.com