Our Privacy Policy is framed in line with the Ghana Data Protection Act, 2012 (Act 843) and, where applicable, the EU General Data Protection Regulation (GDPR). It sets out how Yellow Package collects, uses, stores, and safeguards personal data belonging to customers, riders, vendors, agents, and any other parties who engage with our services.

We recognize that personal data is sensitive, and this document explains your rights and our responsibilities in handling it. It also outlines how Yellow Package applies data protection principles across all our operations to ensure trust, safety, and compliance.

Here, we detail the types of information we collect, why we need it, and how it helps us provide secure, reliable, and efficient delivery services. We also explain who we may share information with, the steps we take to protect it, and the periods for which we retain it.

At Yellow Package, your privacy is not just a legal requirement but a core part of our promise to deliver with integrity, transparency, and care.

By Continuing to use our platforms, you agree to be bound by this privacy policy.

About Us

Yellow Package (“Yellow Package Logistics”, “YPL”, “We”, “Us”, “Our”) is a logistics and transportation tech-driven solutions provider. We operate a courier platform that seeks to offer timely and professional booking, tracking, and delivery of packages across Ghana.

As a business entity, we owe you the duty to respect your right to privacy and that is why we process personal data in accordance with Ghana’s Data Protection Laws, related consumer-protection and e-transactions requirements, and applicable security obligations.

Scope & Roles

This Privacy Policy covers personal data collection through our websites, apps, APIs, and customer support channels, and from partners.

What We Collect

Yellow Package collects only data that is necessary, relevant, and not excessive (under the “minimality” principle).

– Personal: name, phone, email, postal address, national ID etc.

– Transaction: order and cart history, tracking IDs.

– Location: pickup/drop-off addresses, GPS, device identifiers.

– Payment: MoMo number, masked card tokens (no full card details stored).

– Rider/Dropper/Driver Onboarding: license, photo, vehicle info etc.

– Cookies: only for performance/technical improvement of your use of our platforms e.g. for login, preferences, fraud prevention, analytics, marketing etc.

How We Collect It

Your personal data is collected directly from you when you use our platforms-app/website, or from third parties (payment providers, fraud-prevention, identity verification, merchants, corporate clients etc.).

Legal Bases for Processing

Yellow Package will process your personal data either under consent, contractual necessity, legal obligation, and legitimate interests etc.

How We Use Your Data

YPL uses your data to manage deliveries, process payments, verify partners, schedule routes, customer support, fraud detection, service analytics, service messages, marketing etc.

Data Sharing & Disclosures

We share data, only when necessary, with delivery partners, merchants, payment providers, IT vendors, regulators/law enforcement, etc.

Data Retention

We keep data only as long as necessary or legally required, then delete or anonymize securely. For example, data in your shopping cart will be delete hours after you have signed out.

Security

Yellow Package will keep your data secure by use of access controls, encryption, least-privilege, staff training, incident response, breach notification etc.

Your Rights

You have the right to request access, or correct, delete, object, or withdraw consent to any part of your data.

Data Relating to Children

Yellow package does not provide direct services to children under 18. If data is however collected under circumstances beyond our direct control; such data shall be deleted.

Payments & Financial Data

We engage only licensed PSPs and other service providers. We also make sure no sensitive information are stored or used without our consent.

Third-Party Links

You may encounter third-party links on our platforms. By clicking and visiting such linked sites or SDKs, you agree to follow their own privacy policies.

Data Protection Governance

How we treat your data is guided by Act 843’s principles-keep a processing register, maintain processor contracts, and appoint a Data Protection Supervisor.

Data Breaches

If a data breach is detected, we notify the Data Protection Commission and affected users as soon as reasonably practicable.

Policy Updates

In our quest to constantly improve service offerings and performance on our platforms, we may need to update this privacy from time to time.