Privacy Policy

Effective date: [●]

1. Who we are

Ejumah is operated by [EJUMAH TECHNOLOGIES LTD.], a company incorporated in Ghana with registration number [●] and registered office at [●] ("Ejumah", "we", "us" or "our").

This Privacy Policy explains how we collect, use, store, share and protect personal data when you use:

• the Ejumah Android application;
• ejumah.com and its web dashboards;
• customer, worker, employee and company accounts;
• support, verification, payment, dispute and communications services; and
• any other service that links to this Privacy Policy.

2. Our role

For most information collected through Ejumah, we act as the data controller because we determine why and how that information is processed. Some service providers process information on our behalf as data processors. Payment providers may act as independent controllers for information they collect to process payments, perform compliance checks or prevent fraud.

3. Information we collect

Depending on how you use Ejumah, we may collect:

3.1 Account and contact information

• full name;
• date of birth;
• email address;
• telephone number;
• password hash and account security information;
• profile photograph;
• language and communication preferences;
• account type and role.

3.2 Identity and verification information

• Ghana Card, passport or other approved identity document;
• document number, issue and expiry information;
• selfie, guided verification video or other identity capture;
• identity verification status, rejection reason and review history;
• business registration documents for companies;
• professional licences, qualifications and certificates;
• records used to prevent duplicate, fraudulent or impersonated accounts.

Identity media is treated as confidential and is not displayed publicly unless you expressly choose a permitted profile image.

3.3 Job and marketplace information

• job descriptions, categories, budgets and schedules;
• photographs, videos, documents and messages uploaded for a job;
• quotations, estimated labour costs, estimated parts costs and inspection requirements;
• accepted quotes, assignments, arrival records and completion status;
• before-work and after-work proof;
• ratings, reviews, complaints, warranties and disputes;
• worker performance information, including completion, punctuality and quotation-accuracy metrics.

3.4 Location information

With permission, we may collect precise or approximate location information to:

• show jobs or workers nearby;
• calculate distance and inspection fees;
• confirm job location;
• verify arrival or attendance;
• prevent fraud and support disputes; and
• improve marketplace safety.

You can control location permission through your device or browser. Certain functions may not work without it.

3.5 Payment and transaction information

We may collect or receive:

• amount, currency and transaction reference;
• payment status;
• payment method type;
• wallet ledger entries;
• payout and withdrawal information;
• refund, reversal, chargeback and dispute records;
• limited account identifiers supplied by a payment provider.

Ejumah should not store full payment-card details. Card and mobile-money credentials are collected and processed by the relevant payment provider.

3.6 Device, security and usage information

• IP address;
• browser and device type;
• operating system and app version;
• login, session and security events;
• crash and diagnostic logs;
• notification tokens;
• pages, screens and features used;
• suspicious activity, rate-limit and fraud signals.

3.7 Communications

We collect messages exchanged through Ejumah, support requests, dispute submissions, emails, notification history and records of consent or opt-out choices.

4. How we use information

We use personal data to:

• create and manage accounts;
• verify users, workers, employees and companies;
• publish and match jobs;
• enable quotations and assignments;
• process marketplace payments, releases, refunds and withdrawals through approved payment providers;
• provide chat, alerts and job-status updates;
• calculate trust, reliability and marketplace-safety indicators;
• confirm location, arrival and completion;
• investigate complaints, disputes, fraud and prohibited conduct;
• provide customer support;
• enforce our agreements and policies;
• comply with legal, tax, accounting, regulatory and law-enforcement obligations;
• protect Ejumah, users and the public;
• maintain, test and improve our services; and
• send service messages and, where permitted, marketing communications.

5. Legal grounds and consent

We process information where it is necessary to:

• perform or prepare to perform a contract with you;
• comply with a legal obligation;
• protect a legitimate interest that is not overridden by your rights;
• prevent fraud, misuse or threats to safety;
• establish, exercise or defend legal claims; or
• act with your consent where consent is required.

You may withdraw consent for optional processing, such as marketing or optional device permissions. Withdrawal does not affect processing already carried out lawfully and may prevent certain features from working.

6. When we share information

We may share information with:

6.1 Other marketplace users

Information necessary to arrange and perform a job may be shared between the customer and the selected worker, employee or company. Public worker profiles may show approved professional information, ratings, completed-job statistics and verification indicators.

We do not publicly display identity documents, payment credentials or private verification media.

6.2 Service providers

We may use providers for:

• cloud hosting and private object storage;
• payment processing and payouts;
• email, SMS, notifications and communications;
• maps and location services;
• analytics, logging and error monitoring;
• identity review and fraud prevention;
• customer support and security.

Providers may only use information for the contracted purpose and subject to appropriate safeguards.

6.3 Companies and employers

Where a worker is linked to a company, relevant job, assignment, performance and account information may be visible to authorised company owners or managers.

6.4 Legal and safety disclosures

We may disclose information where reasonably necessary to:

• comply with Ghanaian law, a court order or lawful request;
• respond to the Data Protection Commission, Bank of Ghana, Ghana Revenue Authority, law-enforcement agency or another competent authority;
• investigate fraud, theft, abuse, threats or safety incidents;
• enforce our agreements; or
• protect the rights, property and safety of Ejumah, users or others.

6.5 Business changes

Information may be transferred as part of a merger, acquisition, financing, restructuring or sale of all or part of the business, subject to appropriate confidentiality and legal safeguards.

7. International transfers

Some service providers may process information outside Ghana. Where this happens, we will use reasonable contractual, organisational and technical measures to protect the information and will make any disclosures required by Ghanaian data-protection law.

8. Data retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected and for legal, accounting, fraud-prevention, safety and dispute requirements.

Indicative periods are:

• active account information: while the account is active;
• transaction, wallet and payment records: for the period required by applicable financial, tax and accounting law;
• job, quote, completion, warranty and dispute records: for the applicable warranty period and a reasonable legal-claims period;
• identity records: only for as long as required for verification, fraud prevention, legal compliance and review;
• security logs: for a limited period proportionate to security needs;
• deleted accounts: removed or anonymised after legal and operational retention obligations expire.

Final retention schedules will be maintained internally and may differ where a dispute, investigation, legal hold or regulatory direction applies.

9. Security

We use reasonable technical and organisational safeguards, including access controls, encryption in transit, restricted identity storage, audit logs, secure session management, monitoring and role-based administrative access.

No system is completely secure. Users must protect their passwords, devices, one-time codes and accounts and must promptly report suspected unauthorised access.

10. Your rights

Subject to Ghanaian law, you may request to:

• be informed about our processing;
• access personal data we hold about you;
• correct inaccurate or incomplete information;
• object to certain processing;
• stop direct marketing;
• request deletion where retention is no longer lawful or necessary;
• withdraw consent where processing relies on consent; and
• complain to us or to Ghana's Data Protection Commission.

We may need to verify your identity before acting on a request. Some information cannot be deleted immediately where retention is required for payments, fraud prevention, disputes, taxation or legal compliance.

Requests may be sent to [email protected].

11. Children's privacy

Ejumah is not intended for persons under 18. We do not knowingly allow a person under 18 to create a worker, customer, employee or company account. If we learn that an account belongs to a child, we may suspend it and delete or restrict the information as legally appropriate.

12. Marketing communications

We may send marketing only where permitted. Every electronic marketing message will provide a reasonable method to unsubscribe. Service and security messages are not marketing and may still be sent while an account remains active.

13. Cookies and similar technologies

The website may use essential cookies for security, authentication and preferences. Optional analytics or marketing cookies should be used only with any consent required by applicable law. A separate cookie notice may provide additional detail.

14. Changes to this policy

We may update this Privacy Policy. Material changes will be notified through the app, website, email or another reasonable method. The effective date above shows when the current version took effect.

15. Contact and complaints

Ejumah privacy contact Email: [email protected] Address: [●] Telephone: [●]

You may also contact Ghana's Data Protection Commission if you believe your rights have been violated.