What we hold, and who can see it.

For members: a name, an email address, an optional phone number, and the record of what you have done on the platform. Cars you saved, requests you made, events you RSVP'd to, orders you placed, detailing you booked.

For vaults: the business details you enter, your stock, your products, your services, and the record of transactions that ran through the platform.

No payment card details are ever stored by QuikCars. Card payments are handled by Paystack, and the platform only records that a payment succeeded and for how much.

In a managed Postgres database hosted by Supabase in London, in the United Kingdom, on the eu-west-2 region, with encryption in transit and at rest and daily backups. The application itself runs in the same city.

A vault can see its own members and its own business. It cannot see another vault's. That separation is enforced in the database itself with row-level security keyed on the vault, rather than by application code remembering to filter, which is the part that usually goes wrong.

A member sees their own record and the vaults that invited them. Members never see each other, and no member list is ever browsable.

The QuikCars team can access data for support and for the manual work the platform does on a vault's behalf, such as brokering a sourcing referral.

The vault does. It is exportable at any time and it leaves with you if you leave. QuikCars never markets to your members, never sells to them, and never sells or shares their data with anyone. The only email a member gets from the platform is one the platform owes them: their invitation, a confirmation of something they booked or ordered, or an update on a request they made.

There is one vault on the platform today, so this does not arise yet. When there is more than one, and a car your member wants sits at another of them, that introduction only happens with your agreement and you are paid for it. Never behind you.

For the personal information of its own clients, the vault remains the responsible party under the Protection of Personal Information Act, and QuikCars acts as an operator processing that information on the vault's instruction.

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Deletion removes personal details; the anonymised record that a transaction occurred is retained where it has to be for accounting.

Any question about data, from either side of the platform, goes to the same place: reach out through the vault enquiry form or reply to any email QuikCars has sent you.