Privacy Policy — Moon Ghana

Moon Delivery (Ghana) ("Moon", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use the Moon delivery platform, website, and mobile application (the "Service"). This Policy is made in accordance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana.

1. Information We Collect

We collect the following categories of personal information:

Account information: Full name, phone number, email address, password hash, and account type (customer, merchant, or rider).
Delivery information: Delivery addresses, GPS location coordinates, and delivery instructions.
Order information: Order history, items purchased, payment method, and transaction amounts in GH₵.
Payment information: Mobile Money number, card details (processed securely by our payment processor — we do not store full card numbers), and cash-on-delivery records.
Location data: Real-time GPS location of riders during active deliveries (with rider consent). Customers may optionally share location for delivery accuracy.
Device and usage data: Device type, IP address, browser type, app version, and interaction data with the Service.
Verification data: National ID (Ghana Card) details for riders and merchants, business registration numbers, and KYC documentation.
Communications: Chat messages with Moon AI support, support tickets, and feedback.

2. How We Use Your Information

To create and manage your account and provide the delivery service.
To process payments and facilitate transactions in GH₵ via Mobile Money, card, or cash on delivery.
To match customers with riders and merchants, and to optimize delivery routes.
To verify the identity of riders and merchants (KYC) for trust and safety.
To communicate with you about orders, promotions, and service updates (you may opt out of marketing communications).
To improve the Service, analyze usage patterns, and develop new features.
To prevent fraud, ensure account security, and comply with legal obligations.
To provide customer support through Moon AI and human support channels.

3. Cookies and Similar Technologies

We use cookies and similar tracking technologies (including local storage and session storage) to: remember your login session, keep items in your cart, remember your language and currency preferences (GH₵), analyze site traffic, and ensure security (including CSRF tokens). You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of the Service, such as maintaining a login session.

4. Data Sharing and Disclosure

We share your personal information only in the following circumstances:

With riders: Your name, phone number, and delivery address are shared with the assigned rider to complete delivery.
With merchants: Your order details and delivery location are shared with the merchant fulfilling your order.
With payment processors: Payment details are shared with authorized payment processors (e.g., Mobile Money operators, card processors) to complete transactions.
Legal compliance: We may disclose information when required by law, court order, or to cooperate with lawful requests from Ghanaian authorities, including the Data Protection Commission.
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, subject to the same privacy protections.

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: encryption of data in transit (TLS/SSL), hashed passwords, CSRF protection, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. If we detect a data breach affecting your personal information, we will notify you and the Data Protection Commission as required by Act 843.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service and for legitimate business purposes, including: maintaining transaction records for tax and accounting purposes (required under Ghanaian tax law), preventing fraud, and resolving disputes. When your data is no longer needed, we securely delete or anonymize it. You may request deletion of your account and associated data at any time (subject to legal retention requirements).

7. Your Rights Under Act 843

Under the Data Protection Act, 2012 (Act 843), you have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data (where legally permissible).
Object to or restrict certain processing of your data.
Withdraw consent for processing based on consent at any time.
Lodge a complaint with the Data Protection Commission of Ghana if you believe your rights have been violated.

To exercise any of these rights, contact us at support@moonghana.com. We will respond within 30 days.

8. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it. Parents or guardians who believe their child has provided us with personal information should contact us.

9. Cross-Border Data Transfers

Your data is stored and processed primarily within Ghana and on secure servers. Where data may be transferred outside Ghana (e.g., to cloud infrastructure providers), we ensure such transfers comply with Act 843 requirements, including adequate data protection safeguards and, where required, your consent.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email, in-app notification, or prominent notice on the website. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the revised Policy.

11. Contact Us

For privacy-related questions, requests, or complaints, please contact our Data Protection Officer at:

Email: support@moonghana.com
Support: Moon Support Center
Location: Accra, Republic of Ghana