Privacy Policy

Information we collect

When you create an account

• Your mobile number and a password (stored only in scrambled, hashed form, never in plain text).
• Profile details you add: name, email address, username and a profile picture.
• Whether you are a reseller (agent), and your reseller upgrade payment.

When you place an order or top up

• The recipient number, network, package and order details.
• The mobile money number that paid, and the payment reference and status. We do not see or store your mobile money PIN.
• Your wallet top-ups, wallet balance and transaction history, and any refunds.
• If you order as a guest, we keep the same order and payment details, without an account.

Automatically

• Technical information such as your IP address, browser and device type, and the pages you visit, recorded in server logs and session records.
• Cookies and browser storage, described in our Cookie Policy.
• Login codes we send you and when they were used.

When you contact us

Messages you send us, including through our WhatsApp support community, and details we need to look into your request.

How we use it

• To deliver what you ordered: process payments, send bundles to the recipient number, show your order history and track orders.
• To run wallets and refunds: credit top-ups, apply payments and settle refunds.
• To keep accounts and payments secure: log you in, send one-time codes, detect fraud and enforce our Acceptable Use Policy.
• To contact you: order and account messages by SMS, email or in the app, and occasional service announcements or offers to customers. You can ask us to stop non-essential messages at any time.
• To improve the service: measure visits and fix problems, using aggregated statistics where we can.
• To meet legal duties: keep financial records and respond to lawful requests.

We rely on the need to perform our contract with you, our legitimate interests in running and securing the service, legal obligations, and your consent where the law requires it.

Who we share it with

We do not sell your personal data. We share only what is needed with the providers that help us run Bundleyard:

• Payment partner (Moolre): to collect Mobile Money payments and to send refunds.
• Data supply partners (such as Hubnet): the recipient number, network and bundle size, so the bundle can be delivered.
• SMS provider (Arkesel): your number and the message, to send codes and notifications.
• Analytics (Google Tag Manager and related tools): information about how the site is used.
• Real-time notification and hosting providers: to show live order updates and to run the servers the service sits on.
• Authorities and professional advisers: when the law requires it, to prevent fraud, or to protect our rights.

Some of these providers are based outside Ghana, so your information may be processed in other countries. We only use providers that protect it appropriately.

How long we keep it

• Account details, while your account is open.
• Orders, payments, wallet and refund records, for as long as needed to resolve disputes and to meet accounting, tax and other legal obligations, even after an account is closed.
• Login codes and technical logs, for a short period needed for security and troubleshooting.

When we no longer need information, we delete it or make it anonymous.

Keeping it safe

Passwords are hashed, connections to the site are encrypted, sensitive actions can require a one-time code, and staff access is limited to what a person's role needs. No system is perfectly secure, so please also protect your password and codes. If a breach affects you, we will tell you and the Data Protection Commission as the law requires.

Your rights

Under the Data Protection Act you can:

• ask what personal information we hold about you and get a copy;
• ask us to correct information that is wrong or out of date (you can also edit most of it in your profile);
• ask us to delete information we no longer need a reason to keep, or to restrict how we use it;
• object to us using your information for marketing or in other ways;
• withdraw consent you gave us, without affecting what we did before.

You can delete your account from your profile page. To use any other right, contact us using the details below; we may need to confirm who you are first. If you are not happy with our answer, you can complain to the Data Protection Commission of Ghana.

Children

Bundleyard is for people aged 18 and over. We do not knowingly collect information from children. If you think a child has given us their information, contact us and we will remove it.

Links to other sites

Our pages may link to other sites, such as WhatsApp. We are not responsible for how they handle your information, so please read their policies.

Changes to this policy

We may update this policy. The “last updated” date above shows the latest version, and we will tell account holders about significant changes.

Contact us

Questions about this page, or a request under it? Reach Bundleyard through any of these:

• WhatsApp: our support community
• Address: Tamale, Ghana

Bundleyard