BAGUP GHANA PRIVACY POLICY
Effective Date: 1st February 2025
1. Introduction
Bagup Ghana ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at bagupghonline.com, our mobile application ("App"), and any related services (collectively, the "Services"). By using the Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Services.
2. Scope of This Policy
This Privacy Policy applies to:
- The Bagup Ghana website (bagupghonline.com)
- The Bagup Ghana mobile application (Android and iOS)
- All related services and features
Where practices differ between the website and mobile app, we note those differences explicitly. Not all third-party services described below are present in both the website and the mobile app — distinctions are noted in the relevant sections.
3. Information We Collect
We may collect the following types of information:
3.1 Personal Information
- Full name
- Email address
- Phone number
- Password (stored in encrypted/hashed form — we do not store plaintext passwords)
3.2 Delivery Address Information
When you place an order, we collect delivery information, which may include:
- Recipient name
- Delivery address
- City and region
- Phone number for delivery contact
- Additional delivery instructions
3.3 Order and Transaction Data
When you place an order, we collect:
- Products purchased
- Product/package details and quantities
- Order ID and order status
- Prices and amounts
- Delivery information
- Payment method type (e.g., card, mobile money)
- Payment/transaction reference from Paystack
- Payment status and date/time
3.4 Payment Information
Payments are processed by Paystack, our third-party payment processor. Bagup Ghana does not collect, store, or have access to your full card numbers, CVV/security codes, or raw mobile money credentials. Paystack processes these directly and securely.
Bagup Ghana receives and stores from Paystack only:
- Transaction reference number
- Payment status (success/failure)
- Amount paid
- Payment method type
- Date and time of transaction
3.5 Device and Technical Information
We (or our service providers) may collect:
- IP address
- Device model and manufacturer
- Operating system version (Android/iOS/Web)
- App version
- Browser type (website only)
- Device identifiers
- Push notification token (mobile app)
- Crash and diagnostic information (website only, via Sentry)
3.6 Usage Data
We may collect information about how you use the Services, including:
- Pages and features accessed
- Time and duration of visits
- Actions taken within the Services
- Referring URLs (website only)
3.7 Push Notification Tokens (Mobile App)
When you use the Bagup mobile application and allow notifications, we collect and process your device's push notification token. This token is transmitted to and processed by Firebase Cloud Messaging (FCM), a service provided by Google. Push notification tokens are used to send you:
- Order confirmation notifications
- Delivery status updates
- Account-related notifications
- Promotional notifications (if you have consented)
3.8 Location Data
Bagup Ghana does not request or collect your precise GPS or device location. Any location context (such as delivery region) is derived solely from information you voluntarily provide when entering your delivery address.
4. How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your account.
- To process and fulfill your orders and arrange deliveries.
- To process payments through Paystack.
- To send order confirmations, delivery updates, and account notifications.
- To send promotional notifications (with your consent, and you may opt out at any time).
- To provide customer support and respond to your enquiries.
- To improve, personalize, and expand the Services.
- To understand and analyze how you use the Services (website analytics via PostHog).
- To monitor and fix errors and crashes (website error tracking via Sentry).
- To detect, prevent, and address fraud, security, and abuse.
- To comply with legal, tax, and accounting obligations.
- To enforce our Terms of Service.
5. Notifications and Marketing Communications
Bagup Ghana sends two categories of notifications:
Essential Notifications — These are required for service delivery and cannot be opted out of while using the Services:
- Order confirmation
- Order status updates
- Delivery notifications
- Account security alerts
Promotional Notifications — These are optional and include promotions, discounts, and news:
- Product deals and discounts
- New feature announcements
- Marketing communications
6. Third-Party Services and Sharing Your Information
We share your information with the following specific third parties as necessary to operate the Services:
Supabase (Database and Authentication)
Our database and authentication infrastructure is hosted on Supabase. Your account information, order data, delivery addresses, and other app data are stored in Supabase databases. Supabase acts as our data processor under applicable data protection laws. See Supabase's Privacy Policy.
Paystack (Payment Processing — Website and Mobile App)
Payment processing is handled by Paystack. As described in Section 3.4, Paystack directly handles your payment credentials. We share order and customer identifying information with Paystack to initiate and verify transactions. See Paystack's Privacy Policy.
Firebase Cloud Messaging / Google (Push Notifications — Mobile App Only)
Push notification tokens are transmitted to Google's Firebase Cloud Messaging service to deliver notifications to your device. See Google's Privacy Policy.
Sentry (Error Monitoring — Website Only)
Our website uses Sentry for error and crash monitoring. Sentry may receive technical information including error details, device information, browser type, app version, and diagnostic data. Sentry is used on the website only and is not included in the Bagup mobile application. See Sentry's Privacy Policy.
PostHog (Product Analytics — Website Only)
Our website uses PostHog to understand how users interact with the Services. PostHog may receive usage data, device information, identifiers, and events describing your interactions with the website. PostHog is used on the website only and is not included in the Bagup mobile application. See PostHog's Privacy Policy.
We may also share your information in the following circumstances:
- Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
- Legal Requirements: Where required by law or in response to valid legal requests by public authorities (e.g., a court or government agency).
- Protection of Rights: Where we believe disclosure is necessary to prevent fraud, protect safety, investigate policy violations, or as evidence in litigation.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. The following table summarises our approach:
| Data Type | Retention / Deletion |
|---|---|
| Account information (name, email, phone) | Deleted when account is deleted |
| Saved delivery addresses | Deleted when account is deleted |
| User preferences | Deleted when account is deleted |
| Push notification tokens | Removed when no longer needed or when account is deleted |
| Authentication/session information | Invalidated and deleted when account is deleted |
| Order history | Retained as required for accounting/legal compliance; anonymised or deleted when no longer needed |
| Payment/transaction records | Retained as required by Ghanaian tax and accounting laws |
| Customer support records | Retained for reasonable business and support purposes |
| Security and access logs | Retained for security and fraud prevention purposes |
Personal data that is no longer needed for any of the above purposes is permanently deleted or anonymised. Bagup Ghana determines retention periods based on operational necessity and applicable law.
8. Security of Your Information
We implement the following security practices to protect your personal information:
- HTTPS/TLS encryption for all data transmitted between your device and our servers
- Secure, authenticated access to our backend services
- Role-based access controls limiting who can access personal data
- Secure storage of authentication tokens and credentials (using platform-standard secure storage on mobile)
- Database access controls and server-side authorisation
- Security monitoring and error tracking (website)
- Passwords are stored in hashed/encrypted form — plaintext passwords are never stored
While we take reasonable steps to secure your information, no method of data transmission or storage is completely secure. We cannot guarantee the absolute security of your information.
9. Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal information:
- The right to access – You may request a copy of your personal data we hold.
- The right to rectification – You may request correction of inaccurate or incomplete data.
- The right to erasure – You may request deletion of your account and personal data (see Section 10).
- The right to restrict processing – You may request that we limit how we process your data, under certain conditions.
- The right to object to processing – You may object to our processing of your data, under certain conditions.
- The right to data portability – You may request that we transfer your data to you or another organisation, under certain conditions.
- The right to withdraw consent – Where processing is based on consent (e.g., promotional notifications), you may withdraw consent at any time.
- The right to contact us with privacy concerns – You may contact Bagup Ghana at any time with questions or complaints about how we handle your data.
We will respond to requests within one month. To exercise any of these rights, please contact us using the information in Section 13.
10. Account and Data Deletion
You have the right to delete your account and your associated personal data. You may initiate account deletion in any of the following ways:
In-App (Mobile App):
Navigate to Account → Settings → Delete Account in the Bagup mobile application.
Web (Website):
Log in to your account, navigate to Dashboard → Settings, and scroll to the bottom of the page to find the account deletion request.
Email Request:
Send an email to bagupgh@gmail.com with the subject line "Account Deletion Request". Please include the email address or phone number associated with your Bagup account to help us verify your identity.
What Gets Deleted:
Once we receive and verify your request, we will process the deletion of your account within 30 days. The following data will be permanently deleted:
- Name, email address, and phone number
- Saved delivery addresses
- User preferences and settings
- Push notification tokens
- Authentication/session information
- Other profile information
Data That May Be Retained:
We may retain the following data after account deletion where required by law or legitimate business necessity:
- Transaction and payment records — retained for tax and accounting compliance as required by the laws of Ghana. This data is not used for marketing purposes and is retained only for the period required by law.
- Order records — retained where required for legal, accounting, or dispute resolution purposes.
- Security and fraud logs — retained for security and fraud prevention purposes.
11. Children's Privacy
The Bagup Services are intended for use by individuals who are at least 13 years of age. To create an account and make purchases, users must be of legal age to enter into contracts in their jurisdiction, or have parental or guardian consent.
We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take prompt steps to remove that information from our systems.
If you believe we have inadvertently collected information from a child under 13, please contact us at bagupgh@gmail.com.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and, where appropriate, notifying you via email or in-app notification. You are advised to review this Privacy Policy periodically. Changes are effective when posted on this page.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:
Bagup Ghana
Banana lane, Madina estate
Accra, Greater Accra, KB 943
Email: bagupgh@gmail.com
Phone: 0257737778