Privacy Policy

Personal Data Protection and Privacy Framework

Document Type: External Legal Policy Document Purpose: Establishes how personal information is collected, used, protected, stored, and disclosed Jurisdiction: Republic of Ghana Applicable Framework: Ghana Data Protection Act, 2012 (Act 843) and related applicable laws Version: 1.0

1. Introduction and Commitment to Privacy

At Beagine ("Company", "Platform", "we", "our", or "us"), we recognize that privacy is a fundamental responsibility and an important part of maintaining trust with Users, Providers, Vendors, Specialists, business partners, employees, and other individuals who interact with our digital ecosystem.

This Privacy Policy explains how we collect, process, use, store, protect, disclose, and manage personal information obtained through our Platform, applications, websites, communication channels, payment systems, verification processes, and related services.

The purpose of this Privacy Policy is to provide transparency regarding our data practices and explain the choices and rights available to individuals whose information we process.

The Company operates a technology-enabled marketplace that connects Users seeking services with independent Providers offering services. To operate this ecosystem effectively, we may need to collect and process certain categories of personal information, including identity information, contact information, location information, transaction information, device information, communication records, and other information necessary to provide safe and reliable services. We are committed to processing personal information responsibly, lawfully, fairly, and transparently.

This Privacy Policy has been developed with consideration of the requirements of the Data Protection Act, 2012 (Act 843) of Ghana, including principles relating to lawful processing, purpose limitation, data quality, security safeguards, openness, and accountability.

Where additional legal requirements apply, including requirements from regulators, financial institutions, payment partners, transportation authorities, or other relevant bodies, the Company may process information in accordance with those obligations.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Scope and Application of This Privacy Policy

This Privacy Policy applies to all individuals whose personal information is collected or processed through the Platform.

This includes:

• Users who request or receive services through the Platform;
• Specialists, Vendors and Providers who offer services through the Platform;
• Business customers and organizational representatives;
• Individuals who communicate with the Company through support channels;
• Individuals whose information is provided during verification, payment, safety, or dispute processes.

This Privacy Policy applies regardless of whether information is collected through:

• mobile applications;
• websites;
• digital platforms;
• telephone communication;
• email communication;
• customer support channels;
• payment systems;
• identity verification systems;
• third-party integrations;
• physical interactions connected to Platform services.

This Policy does not apply to third-party websites, applications, or services that are not controlled by the Company. Those third parties operate according to their own privacy practices and policies.

3. Our Role as a Data Controller

Under applicable Ghanaian data protection principles, the Company may act as a data controller or responsible party where it determines the purpose and method of processing personal information.

This means the Company determines why personal information is collected, how it is used, how it is protected, and how it supports Platform operations.

In certain situations, the Company may act as a data processor where it processes information on behalf of another organization under specific instructions or agreements.

The Company may also engage approved third-party service providers who process information on our behalf. These providers are required to handle personal information according to contractual obligations, security requirements, and applicable legal standards.

We maintain responsibility for ensuring that personal information is handled appropriately throughout our operational ecosystem.

4. Definitions of Key Privacy Terms

For purposes of this Privacy Policy:

"Personal Data" or "Personal Information" means information relating to an identified or identifiable individual.

"Processing" means any activity performed on personal information, including collecting, recording, organizing, storing, accessing, using, sharing, transferring, modifying, or deleting information.

"Data Subject" means the individual to whom personal information relates.

"User" means an individual or entity accessing the Platform to request or receive services.

"Provider" means a specialist, contractor, service partner, or other individual providing services through the Platform.

"Data Controller" means an entity responsible for determining the purposes and methods of processing personal information.

"Data Processor" means an entity processing personal information on behalf of a controller.

"Sensitive Personal Data" means information requiring additional protection due to its nature, including categories recognized under applicable law.

"Platform" means the Company's applications, websites, software systems, databases, communication systems, and related technology services.

5. Information We Collect

To provide Platform services effectively, the Company may collect different categories of information depending on how individuals interact with the Platform.

The information collected may include information provided directly by individuals, information collected automatically through technology systems, information received from third parties, and information generated through Platform activities.

The specific information collected depends on factors including:

• the services being requested or provided;
• account type;
• location;
• payment methods used;
• verification requirements;
• legal obligations;
• security requirements;
• communication preferences.

The Company seeks to collect only information reasonably necessary for legitimate Platform purposes.

6. Information Provided Directly by Users and Providers

When creating an account, requesting services, providing services, communicating with the Company, or interacting with the Platform, individuals may provide personal information including:

• full legal name;
• date of birth where required;
• telephone number;
• email address;
• residential or business address;
• profile photographs;
• government-issued identification information;
• business registration information;
• professional qualifications;
• licenses and permits;
• vehicle information where applicable;
• payment details;
• emergency contact information;
• service preferences;
• support requests;
• feedback and reviews.

Providers may be required to provide additional information necessary to confirm eligibility, maintain safety standards, and comply with legal obligations.

Users and Providers are responsible for ensuring that information submitted to the Company is accurate, complete, and updated when changes occur.

7. Automatically Collected Information

When individuals access or use the Platform, certain technical information may be collected automatically.

This information may include device information, mobile operating system information, browser information, IP address, application usage information, login activity, session information, network information, device identifiers, performance data, technical error reports, interaction with Platform features. This information helps the Company maintain security, improve reliability, diagnose technical problems, analyze usage patterns, and improve user experience.

Automatically collected information may also assist with fraud detection, account security, and prevention of unauthorized access.

8. Location Information and Tracking Data

Because the Platform may facilitate location-based services, the Company may collect and process location information where necessary.

Location information may include current location, service request location, provider availability location, route information, distance information, movement information during active services. Location data may be used for purposes including matching Users with available Providers, estimating service availability, improving navigation, supporting safety features, confirming service completion, preventing fraud, resolving disputes.

Individuals may manage location permissions through their device settings. However, disabling certain location features may limit Platform functionality. The Company processes location information only for legitimate purposes connected to Platform operations and applicable legal requirements.

9. Payment and Transaction Information

To facilitate transactions through the Platform, the Company may collect and process payment-related information necessary to complete, record, verify, and manage financial activities.

Payment information may include:

• payment method details;
• transaction records;
• payment confirmations;
• billing information;
• refund records;
• financial account details where required;
• mobile money information;
• payment provider references;
• transaction history.

The Company may work with licensed financial institutions, payment service providers, mobile money operators, banks, and other authorized partners to process payments securely.

The Company does not necessarily store complete payment card information where payment processing is performed by specialized payment providers. In such cases, payment information may be handled directly by those providers under their own security obligations and privacy practices.

Payment information may be processed for purposes including:

• processing service payments;
• facilitating Provider settlements;
• preventing fraud;
• verifying transactions;
• managing refunds;
• resolving payment disputes;
• maintaining financial records;
• complying with legal and regulatory obligations.

Users and Providers remain responsible for ensuring that payment information submitted through the Platform is accurate and belongs to them or is legally authorized for their use.

10. Identity Verification and Compliance Information

To maintain trust, safety, and regulatory compliance, the Company may collect identity and verification information from Users and Providers.

Verification information may include:

• government-issued identification documents;
• national identification information;
• passport information;
• driver's license information;
• professional licenses;
• certificates;
• business registration documents;
• tax-related information;
• photographs;
• identity verification results;
• guarantors;
• background verification information where legally permitted.

Verification requirements may differ depending on the type of account, services provided, regulatory obligations, safety requirements, and risk management considerations. The Company may use internal systems or approved third-party verification providers to confirm identity information and assess eligibility.

Verification information may be used for:

• confirming identity;
• preventing impersonation;
• protecting Platform participants;
• meeting regulatory obligations;
• reducing fraud risks;
• maintaining service standards.

The Company does not collect verification information for unrelated purposes and applies appropriate safeguards to protect such information.

11. Information Received From Third Parties

The Company may receive information about individuals from third parties where necessary to provide Platform services, maintain security, or comply with legal requirements.

Third-party sources may include:

• payment providers;
• identity verification providers;
• financial institutions;
• business partners;
• service partners;
• referral partners;
• government authorities;
• regulatory bodies;
• publicly available sources;
• fraud prevention organizations.

For example, the Company may receive payment confirmation information from payment providers, verification results from identity verification services, or compliance information from authorized sources.

The Company processes third-party information in accordance with applicable law and ensures that such processing is connected to legitimate Platform purposes.

12. How We Use Personal Information

The Company uses personal information for purposes necessary to operate, maintain, improve, and secure the Platform.

Personal information may be used for the following purposes:

Providing Platform Services

The Company processes information to create accounts, connect Users with Providers, facilitate service requests, enable communication, process payments, provide customer support, and manage Platform activities. Without certain information, some Platform services may not function properly.

Safety and Security

Personal information may be used to protect Users, Providers, employees, and third parties. This may include identity verification, fraud prevention, security monitoring, incident investigation, emergency response support, and enforcement of Platform rules.

Improving Platform Operations

The Company may analyze information to improve technology systems, service quality, user experience, marketplace efficiency, and operational performance. Such analysis may involve aggregated or anonymized information where possible.

Communication

The Company may use personal information to communicate important information relating to accounts, transactions, security, service updates, policy changes, support matters, and legal notices.

Legal and Regulatory Compliance

The Company may process information to comply with legal obligations, regulatory requirements, court orders, government requests, taxation obligations, financial regulations, and lawful investigations.

13. Marketing and Promotional Communications

The Company may use personal information to communicate information about services, promotions, offers, updates, events, and opportunities that may be relevant to Users and Providers.

Marketing communications may be delivered through:

• email;
• SMS;
• application notifications;
• telephone communication;
• other approved communication channels.

Where required by applicable law, the Company will obtain appropriate consent before sending certain categories of marketing communications.

Individuals may manage marketing preferences and may request to stop receiving promotional communications.

Opting out of marketing communications does not prevent the Company from sending essential service-related communications, including security notices, transaction updates, account notifications, or legal information.

14. Sharing and Disclosure of Personal Information

The Company does not disclose personal information indiscriminately. Information is shared only where there is a legitimate business, operational, safety, or legal purpose.

Personal information may be shared with:

Platform Participants

Certain information may be shared between Users and Providers where necessary to complete requested services. For example, Providers may need access to information such as service location, contact details, or service instructions. Users may receive Provider information necessary to identify and communicate regarding service delivery.

Service Providers and Business Partners

The Company may share information with trusted third-party providers supporting Platform operations, including payment processors, cloud hosting providers, technology providers, communication providers, identity verification providers, customer support providers, security providers. These parties are expected to process information according to contractual obligations and applicable privacy standards.

Legal and Regulatory Authorities

The Company may disclose personal information where required or permitted by law, including requests from:

• courts;
• regulatory authorities;
• law enforcement agencies;
• government institutions;
• tax authorities;
• financial regulators.

Business Transactions

If the Company undergoes a merger, acquisition, restructuring, financing transaction, sale of assets, or similar corporate event, personal information may be transferred as part of that transaction, subject to appropriate protections.

15. International Data Transfers

The Company may use service providers, technology infrastructure, or business partners located outside Ghana. Where personal information is transferred internationally, the Company will take reasonable steps to ensure that appropriate safeguards are applied. Such safeguards may include contractual protections, security requirements, confidentiality obligations, and compliance measures designed to protect personal information. Individuals acknowledge that digital services may involve international technology infrastructure and agree that information may be processed in locations necessary for legitimate Platform operations.

16. Data Security and Protection Measures

The Company takes reasonable technical, administrative, and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, destruction, or disclosure.

Security measures may include:

• access controls;
• authentication procedures;
• encryption where appropriate;
• employee confidentiality obligations;
• security monitoring;
• system testing;
• incident response procedures;
• restricted access to sensitive information.

However, no digital system can guarantee absolute security.

Users and Providers are responsible for protecting their account credentials, devices, and personal information.

Individuals should immediately notify the Company if they suspect unauthorized access, account compromise, or security concerns.

17. Data Retention and Record Management

The Company retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet legal obligations, maintain operational records, protect legitimate business interests, resolve disputes, prevent fraud, and enforce agreements. The retention period for personal information may vary depending on the type of information, the purpose of processing, legal requirements, regulatory expectations, and operational needs.

Factors considered when determining retention periods may include the nature of the information, the sensitivity of the information, the purpose for which it was collected, whether continued retention is required by law, whether retention is necessary to protect legal rights, whether the information is needed for dispute resolution, whether the information is required for financial, tax, or regulatory records.

Examples of information that may require longer retention include:

• transaction records;
• payment records;
• tax-related information;
• identity verification records;
• fraud investigation records;
• complaint records;
• legal documentation;
• security records.

When personal information is no longer required, the Company will take reasonable steps to securely delete, anonymize, or otherwise dispose of such information.

However, certain information may remain retained where necessary to comply with legal obligations, protect against fraud, maintain financial records, or establish, exercise, or defend legal claims.

18. Privacy Rights of Individuals Under Ghana Law

The Company recognizes that individuals have rights regarding their personal information under applicable Ghanaian data protection principles. Subject to legal limitations and verification requirements, individuals may have rights including:

• the right to know whether personal information is being processed;
• the right to request access to personal information held by the Company;
• the right to request correction of inaccurate or incomplete information;
• the right to object to certain forms of processing;
• the right to request deletion where legally applicable;
• the right to request information about how personal information is used;
• the right to make complaints regarding privacy concerns.

The exercise of privacy rights may be subject to lawful restrictions, including where information must be retained for regulatory, legal, security, or legitimate operational purposes.

The Company may require sufficient information to verify the identity of a person making a privacy request.

This verification process exists to prevent unauthorized disclosure of personal information.

19. Access, Correction, and Personal Information Requests

Individuals may request access to personal information held by the Company.

A request for access should provide sufficient details to allow the Company to identify the individual and understand the information being requested.

Where personal information is inaccurate, incomplete, outdated, or misleading, individuals may request correction or updating of that information.

The Company encourages Users and Providers to maintain accurate account information by updating details through available Platform tools where possible.

The Company will review requests and respond within a reasonable period, taking into account the complexity of the request, applicable legal requirements, and the need to protect other individuals' privacy rights.

The Company may refuse or limit requests where permitted by law, including where disclosure would:

• violate another person's privacy;
• compromise security measures;
• interfere with legal investigations;
• conflict with regulatory obligations.

20. Cookies and Similar Technologies

The Company may use cookies, software development tools, tracking technologies, analytics tools, and similar technologies to improve Platform performance and user experience. These technologies may collect information such as device information, usage patterns, preferences, interaction with Platform features, performance data, security information.

Cookies and similar technologies may be used for purposes including maintaining account functionality, improving navigation, remembering preferences, understanding Platform usage, improving security, detecting unusual activity, measuring service performance.

Individuals may manage certain cookie preferences through their device or browser settings. Disabling certain technologies may affect Platform functionality or limit access to some features. Where required by applicable law, the Company will provide appropriate notices or obtain necessary consent regarding cookie usage.

21. Children's Privacy Protection

The Platform is not generally intended for use by individuals who do not have the legal capacity to enter into agreements or use Platform services independently.

The Company does not knowingly collect personal information from children in violation of applicable laws.

Where a service involves minors, information may only be processed where appropriate authorization exists from a parent, guardian, legal representative, or where permitted by law.

If the Company becomes aware that personal information has been collected from a child improperly, reasonable steps will be taken to review and address the situation.

Parents or guardians who believe that information relating to a child has been improperly collected may contact the Company through official privacy channels.

22. Provider-Specific Privacy Requirements

Providers have additional responsibilities regarding personal information accessed through the Platform.

Providers may receive User information necessary to complete services, including contact information, location information, service instructions, and other relevant details.

Providers must only use User information for legitimate service-related purposes.

Providers must not:

• store User information unnecessarily;
• share User information with unauthorized persons;
• use User information for personal marketing;
• contact Users outside legitimate service purposes;
• sell or misuse User information;
• attempt to identify, monitor, or track Users beyond service requirements.

Providers must protect User privacy and comply with applicable data protection obligations.

Failure to properly handle User information may result in Platform enforcement action, including suspension or termination.

23. User Responsibilities Regarding Privacy

Users also have responsibilities when using the Platform.

Users must protect their own account information and avoid sharing unnecessary personal details through Platform communication channels.

Users must not request, collect, misuse, or distribute personal information belonging to Providers or other Platform participants.

Users must respect Provider privacy and must only use Provider information for legitimate service-related purposes.

Users should notify the Company if they believe another participant has improperly accessed, used, or disclosed personal information.

24. Data Breach Response

The Company maintains procedures designed to identify, assess, manage, and respond to personal data incidents.

A data breach may include unauthorized access, disclosure, loss, alteration, destruction, or misuse of personal information.

Where a personal data incident occurs, the Company may take reasonable steps including:

• investigating the cause;
• containing the incident;
• assessing potential impact;
• implementing corrective measures;
• notifying affected parties where required;
• notifying relevant authorities where legally required.

The Company will respond to incidents in accordance with applicable Ghanaian data protection obligations and internal security procedures.

25. Privacy Complaints and Contact Procedures

Individuals who have concerns regarding the processing of their personal information may contact the Company through designated privacy or support channels.

Privacy complaints should include sufficient information to allow investigation, including:

• the identity of the person making the complaint;
• details of the concern;
• relevant dates or transactions;
• supporting information where available.

The Company will review privacy concerns fairly and take reasonable steps to address valid concerns.

Individuals may also have the right to contact the Ghana Data Protection Commission or other relevant authority where appropriate.

26. Changes to This Privacy Policy

The Company may update this Privacy Policy periodically to reflect changes in:

• legal requirements;
• technology;
• business operations;
• Platform features;
• data processing practices.

Where significant changes are made, the Company may provide notice through appropriate communication channels.

The updated Privacy Policy becomes effective upon publication unless otherwise stated.

Continued use of the Platform after changes become effective indicates acceptance of the updated Privacy Policy.

27. Governing Law

This Privacy Policy is governed by the laws of the Republic of Ghana.

The Company will process personal information in accordance with applicable Ghanaian data protection requirements, including the Data Protection Act, 2012 (Act 843), and other relevant legal obligations. Where disputes arise regarding privacy practices, individuals are encouraged to first contact the Company for resolution before pursuing available legal remedies.

28. Final Privacy Commitment

The Company is committed to maintaining responsible data practices that protect the privacy, security, and trust of all Platform participants.

By using the Platform, individuals acknowledge that:

• personal information may be collected and processed to provide Platform services;
• information may be shared where necessary for legitimate operations, safety, security, and legal compliance;
• reasonable measures are taken to protect personal information;
• individuals retain rights regarding their personal information;
• responsible use of personal information is a shared responsibility between the Company, Users, and Providers.

Data Deletion

You have the right to request the deletion of your personal data. You can delete your account and associated data directly within the Beagine mobile app via the Account Settings. Alternatively, you can contact us at support@beagine.com to request account deletion. For more detailed instructions, please visit our Data Deletion page.

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Email: support@beagine.com