Privacy notice.

1. Who controls your data

PonyWheels Logistics is the data controller for customer, recipient and workforce information used to provide our delivery services in Ghana. Service providers may process limited data only under our instructions and safeguards.

2. Data we collect

• Account and contact details, including name, telephone number and optional email address.
• Pickup, delivery, saved-address and recipient information supplied for a booking.
• Booking, assignment, payment, support, rating and notification records.
• Proof of delivery such as recipient confirmation, PIN, signature, photograph or authorised witness record where the service requires it.
• Security and technical records such as device identifier, session, failed sign-in attempts, timestamps and audit events.
• Workforce identity, role, authorised geographic scope, shift status and operational activity.

3. Why we use it

• Create accounts, quote, accept, dispatch, track and complete deliveries.
• Confirm identity, prevent fraud, protect accounts and investigate incidents.
• Process and reconcile authorised payments and issue receipts.
• Provide support, manage complaints, resolve exceptions and improve service quality.
• Meet legal, tax, regulatory, insurance, safety and record-keeping obligations.
• Send marketing only where a person has separately consented and can withdraw consent.

4. Sharing and international processing

We disclose only what is necessary to authorised PonyWheels staff and riders, the sender or recipient, payment processors, hosting and communications providers, professional advisers, insurers, regulators or law-enforcement bodies with lawful authority. Where data is processed outside Ghana, we apply appropriate contractual and security safeguards.

5. Retention and security

We keep personal data only for the period required for service, dispute, accounting, regulatory and security purposes, then delete or de-identify it under our retention schedule. When a customer deletes an account, profile details, saved addresses, registered devices, notifications and active sessions are erased or disabled immediately. Delivery, payment, fraud-prevention and audit records may be retained only where needed for legal, tax, dispute, security or accounting obligations, then deleted or de-identified when that period ends. Controls include role-based access, scoped workforce access, revocable sessions, audit logging, encryption in transit, protected secrets, backups and incident response.

6. Your choices and rights

• Ask for access to, correction of, or deletion of eligible personal data.
• Delete a customer account from Profile → Account controls in the PonyWheels Customer app, or use our account-deletion request page if app access is unavailable.
• Object to or restrict eligible processing and withdraw marketing consent.
• Ask how an automated or material account decision was made.
• Complain to PonyWheels or Ghana's Data Protection Commission.

7. Incidents, children and changes

We investigate suspected personal-data breaches and notify affected people and the Data Protection Commission when required. Our accounts are not intended for children acting without a parent or lawful guardian. Material changes to this notice will be communicated through the website or app.