Privacy Policy
Last Updated: December 20, 2025 | Effective Date: December 20, 2025
Introduction
Welcome to Tolo Freight ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our freight logistics platform and related services (collectively, the "Services").
Tolo Freight operates in accordance with the Federal Democratic Republic of Ethiopia's data protection laws, including the Computer Crime Proclamation No. 958/2016, the Electronic Transactions Proclamation, and emerging data protection regulations. We also align our practices with international standards including GDPR principles where applicable.
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with these terms, please do not access or use our Services.
Information We Collect
1. Personal Information You Provide
We collect information you voluntarily provide when registering, using our Services, or contacting us:
- Identity Information: Full name, date of birth, photograph, gender
- Contact Information: Email address, phone number, physical address
- Business Information: Company name, TIN (Tax Identification Number), trade license, business registration documents
- Financial Information: Bank account details, mobile money accounts (Telebirr, CBE Birr), payment history
- KYC Documents: National ID (Kebele ID), passport, driver's license, vehicle registration certificates
- Vehicle Information: Vehicle type, plate numbers, capacity, insurance documents
- Shipment Details: Origin, destination, cargo type, weight, dimensions, special handling requirements
2. Information Collected Automatically
When you access our Services, we automatically collect:
- Device Information: Device type, operating system, unique device identifiers, browser type
- Location Data: GPS coordinates, IP address-based location (with your consent for real-time tracking)
- Usage Information: Pages visited, features used, time spent, click patterns, search queries
- Transaction Data: Bid history, completed shipments, payment records, ratings, and reviews
- Log Data: Access times, error logs, referral URLs
3. Information from Third Parties
We may receive information from:
- Payment Processors: Telebirr, Chapa, and banking partners for transaction verification
- Government Databases: Vehicle registration verification, business license validation (where legally permitted)
- Business Partners: Freight forwarders, insurance providers, customs authorities
How We Use Your Information
We use your information for the following purposes:
Service Provision
- Create and manage your account
- Facilitate connections between shippers and carriers
- Process bids, bookings, and shipments
- Enable real-time shipment tracking
- Process payments and manage wallets
Verification & Trust
- Verify identity and business credentials (KYC/KYB)
- Prevent fraud and ensure platform security
- Maintain trust scores and reputation systems
- Comply with Ethiopian anti-money laundering regulations
Communication
- Send service-related notifications (bid updates, shipment status)
- Provide customer support
- Send marketing communications (with your consent)
- Notify you of policy changes
Platform Improvement
- Analyze usage patterns to improve features
- Develop new services and functionalities
- Conduct research and analytics
- Optimize route suggestions and pricing algorithms
Legal Compliance
- Comply with Ethiopian laws and regulations
- Respond to legal requests from authorities
- Enforce our terms of service
- Protect against legal liability
Legal Basis for Processing
Under Ethiopian law and international best practices, we process your data based on:
- Contractual Necessity: Processing required to provide the Services you requested when you register and use our platform
- Consent: Where you have given explicit consent, such as for marketing communications, location tracking, or optional features
- Legal Obligation: Processing required to comply with Ethiopian laws, including tax regulations, transport authority requirements, and financial regulations
- Legitimate Interest: Processing necessary for our legitimate business interests, such as fraud prevention, security, and platform improvement, balanced against your rights
Data Sharing and Disclosure
We may share your information with:
Platform Users
Shippers can view carrier profiles, ratings, and vehicle information. Carriers can see shipment details and shipper business information. This is necessary for the marketplace to function.
Service Providers
Third parties that help us operate our platform, including cloud hosting providers, payment processors (Telebirr, Chapa, banks), SMS/notification services, and customer support tools.
Freight Forwarders & Partners
When using freight forwarding services, relevant shipment and documentation information is shared with licensed freight forwarders and customs clearing agents.
Government Authorities
Ethiopian government bodies when required by law, including the Ethiopian Revenues and Customs Authority (ERCA), Transport Authority, Financial Intelligence Center, and law enforcement agencies with valid legal requests.
Insurance Providers
Shipment and cargo information shared with insurance partners for coverage and claims processing.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with appropriate notice provided.
We never sell your personal data to third parties for marketing or advertising purposes.
Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encryption: All data transmitted between your device and our servers uses TLS/SSL encryption
- Secure Storage: Data at rest is encrypted using AES-256 encryption
- Access Controls: Strict role-based access controls limit who can access your data
- Two-Factor Authentication: Available and recommended for all accounts
- Regular Audits: Security assessments and vulnerability testing
- Secure Payment Processing: PCI-DSS compliant payment handling
Data Location
Your data is primarily stored on secure cloud servers. Some data may be processed or stored outside Ethiopia by our cloud service providers, but we ensure such transfers comply with applicable data protection requirements and appropriate safeguards are in place.
Data Retention
We retain your data for the following periods:
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of account + 5 years after deletion |
| Transaction Records | 10 years (Ethiopian tax requirements) |
| KYC Documents | 7 years after account closure (AML compliance) |
| Shipment Records | 7 years |
| Communication Logs | 3 years |
| Location Data | 90 days (unless part of shipment record) |
| Usage Analytics | 2 years (anonymized thereafter) |
Your Rights
You have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data, subject to legal retention requirements. Note: We cannot delete data required for legal compliance or ongoing transactions.
Right to Restrict Processing
Request limitation of how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Withdraw Consent
Withdraw consent for processing based on consent at any time, without affecting prior lawful processing.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, please contact us using the details provided below. We will respond within 30 days of receiving your request.
Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential Cookies: Required for authentication, security, and basic functionality
- Performance Cookies: Help us understand how you use our Services
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Collect anonymized usage statistics
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Services.
Children's Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.
Ethiopian Regulatory Compliance
As a platform operating in Ethiopia, we comply with specific local requirements:
Computer Crime Proclamation (No. 958/2016)
We maintain appropriate security measures and cooperate with law enforcement when required under this proclamation while protecting user rights.
Financial Regulations
We comply with National Bank of Ethiopia regulations regarding payment processing, including mobile money transactions through Telebirr and other licensed providers.
Transport Authority Requirements
Carrier and vehicle information is maintained in compliance with Ethiopian Transport Authority licensing and documentation requirements.
Anti-Money Laundering (AML)
We conduct KYC verification and transaction monitoring in accordance with Ethiopian Financial Intelligence Center requirements to prevent money laundering and terrorist financing.
Customs & Revenue Authority (ERCA)
Shipment records and documentation comply with ERCA requirements for domestic and cross-border freight movements.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email or in-app notification
- Where required, obtain your consent for new data processing activities
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Tolo Freight Data Protection Officer
Ethiopia
For urgent matters or if you believe your data has been compromised, please contact us immediately at the above email address with "URGENT: Data Security" in the subject line.
By using Tolo Freight's Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.
This Privacy Policy is provided in English. In case of any discrepancy between this English version and any translated version, the English version shall prevail.
© 2026 Tolo Freight. All rights reserved.