Privacy Policy

• Your account: name, phone number, email address (optional if you sign up with your phone), and your password, stored only as a secure hash. If you sign in with Google, we receive your name and email from Google.
• Orders: what you buy, your delivery addresses (and the map pin, if you add one), payments and refunds, returns (including the photos you send), and reviews you write.
• Payments: card and Mobile Money details are entered on Paystack’s page, not ours. We receive the payment reference, amount and fee, never your card number.
• Sellers: shop name and location, your Ghana Card number, name and photos of the card, business registration if you send it, and the Mobile Money or bank account you are paid to.
• What you choose to tell us: support messages, feedback and survey answers, and your email address if you sign up for our newsletter.
• Technical data: your IP address and browser details, used to keep the site secure (for example, to slow down repeated sign-in attempts).

• To run your account, orders, deliveries, returns, refunds and seller payouts.
• To verify sellers and prevent fraud.
• To contact you about your account and orders, by email or SMS.
• To send offers and news, only if you agreed to receive them. Every newsletter has an unsubscribe link.
• To improve the site, using feedback you choose to give.
• To meet our legal, tax and accounting duties.

When you order, the seller gets what they need to send your parts: your name, phone number and delivery address. We do not sell your personal data.

We use these service providers to run Kwame Motors, and they handle your data only for that purpose:

• Paystack: payments, refunds and seller payouts.
• An ID verification provider: checks a seller’s Ghana Card number and name with the National Identification Authority.
• mNotify (SMS) and Resend (email): sending you messages.
• Vercel (hosting and file storage), Neon (database) and Upstash (security limits): running the site.
• Google: only if you choose to sign in with Google.

Some of these providers store data outside Ghana. We only use providers that protect it.

We may also share data when the law requires it, or to protect our users against fraud.

We check your Ghana Card number and name with the National Identification Authority through a licensed ID verification provider, which confirms whether the card exists and the name registered to it. We keep only that result, not other details the provider returns.

Your documents are stored privately, seen only by our verification staff (every view is logged), and deleted 90 days after your verification is reviewed. After that we keep only a masked card number and a one-way fingerprint of it, so the same card can’t open a second shop.

All data is encrypted in transit (TLS). Passwords are hashed and never stored in plain text. ID documents and return photos are kept in private storage that only the people involved can open: the buyer and seller for a return, and our staff.

We only use what the site needs to work: a cookie that keeps you signed in, and storage in your browser for your cart and your choices (such as your cookie answer). We don’t use advertising or analytics cookies. If we add any, we will ask you first.

• Ask for a copy of the personal data we hold about you, or for it to be corrected.
• Delete your account from your account settings. A buyer can do this once nothing of theirs is still in progress. A seller closes their shop first, and the account is deleted once their orders and payments are finished.
• Stop marketing messages at any time.
• Complain to the Data Protection Commission of Ghana if you think we have mishandled your data.

We keep your data while your account is open. When you delete it, we remove your name, email, phone number, saved addresses and ID documents. Records of orders and payments stay, without those details, for as long as tax and accounting law requires.

For privacy questions or to use your rights, contact us.