Bolt is a ride-hailing, scooter, and delivery platform operated by Bolt Operations OÜ (as data controller for the passenger app) and its Estonian parent-adjacent group entity Bolt Technology OÜ, both registered at the same Tallinn address, per Bolt's own Global Privacy Notice for Passengers and its published Group Companies and Controllers list. The privacy notice discloses collection of identity documents and selfie photos for verification, payment card/bank details, demographic data (age, gender), and precise/approximate geolocation via GPS and IP address. It discloses use of email/link-tracking pixels for marketing measurement and states Bolt 'may also share your personal data with third parties, or collect data regarding your visits and actions on third-party apps or websites, for the purposes of personalised ads' — a cross-app/cross-site ad-tracking and sharing arrangement. The notice also states Bolt has implemented data encryption in transit/at rest and information-security policies and controls; no independently confirmed breach or regulator order was found in this research.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
6 ON FILE
COLLECTION
Bolt's Global Privacy Notice for Passengers discloses collection of government-issued or national identity documents (passports, driver's licences, national ID cards) and a self-submitted photograph (such as a selfie) for identity verification, and separately discloses collection of demographic data such as age and gender.
Bolt's Global Privacy Notice for Passengers names the data controller as Bolt Operations OU (styled Bolt Operations OÜ), an Estonian entity, describing it as responsible for how Bolt and its group companies and third-party partners collect and use passenger personal data.
Bolt's published Group Companies and Controllers list names both Bolt Operations OÜ (Estonian registration no. 14532901) and Bolt Technology OÜ (Estonian registration no. 12417834), both registered at the same Tallinn, Estonia address, alongside dozens of named country-level Bolt subsidiaries and third-party operating partners.
Bolt's privacy notice states it may share personal data with categories of recipients including Bolt Group Companies (local subsidiaries) and third-party partners, Drivers (who see the passenger's name, phone number, pickup/destination and geolocation for an active ride), and third parties for personalised-advertising purposes.
Bolt's privacy notice states the company has implemented data encryption in transit and at rest, data-privacy and security training, and information-security policies and controls around confidentiality, integrity, and availability of its data and systems; this is a governance statement, not an independent audit, and no breach or regulator order specific to Bolt was found via primary sources in this research.
Bolt's privacy notice discloses use of pixels and similar technologies to track when marketing emails are opened and which links are clicked, and separately states that Bolt may collect data about users' visits and actions on third-party apps or websites for the purposes of personalised advertising, and may share personal data with third parties for the same purpose.