Privacy Policy

BIGJOE handles information used to provide our phone shop, website and mobile app in Ghana. For privacy requests, email hello@bigjoegh.com or contact +233 59 358 3583 on WhatsApp.

Account information includes your name, phone number, verification status, password hash and any optional profile details you provide. We use it to create and secure your account and provide support. We do not store a readable copy of your password.

Shopping information includes your bag, saved items, orders, payment references, delivery status and notification preferences. Delivery information includes your address and any location coordinates you choose to supply. An order keeps its own address snapshot so later profile changes do not rewrite past deliveries.

Technical and security records can include IP addresses, request details, session identifiers and audit events. We use them to operate the service, detect abuse, investigate incidents and protect accounts.

Processing supports your requested transactions, account security, our legitimate operational purposes and legal obligations. Optional marketing relies on your choice. We do not sell your personal information.

Used-phone sourcing records include the seller’s ID and contact details, a signed sale receipt, proof of purchase and device identifiers or status checks needed to establish lawful ownership. These records support fraud prevention, transaction evidence and legal obligations. They are not published with product listings or customer feedback.

Relevant purchase or verification records may be supplied privately to our payment provider or competent authorities where necessary and lawful. We limit disclosure to what the purpose requires. Retention follows the record’s lawful purpose and applicable obligations; contact us for information about a particular record.

Paystack processes online payments. BIGJOE does not receive your full card number, card security code or Mobile Money PIN. We receive payment references, status and transaction information needed to reconcile an order and handle refunds.

mNotify delivers verification and other enabled text messages. Couriers receive information needed for delivery. Authorised staff and hosting, infrastructure or support providers may process information needed to operate the service. Authorities or professional advisers may receive records where legally required or necessary for a lawful claim.

Providers may process information outside Ghana. Where a transfer occurs, applicable data-protection obligations and appropriate safeguards must be observed. Provider processing is also subject to the provider’s own applicable privacy terms.

Verification and recovery codes are sent when requested. Order updates follow your notification preferences. Marketing SMS is optional and can be disabled in Account → Notifications. Choosing not to receive marketing does not prevent a purchase.

The website uses session cookies to keep you signed in and local storage for appearance preferences. The mobile app stores authentication credentials in platform secure storage and keeps local settings and limited cached account data. Signing out clears the app’s local session. Necessary session storage is used to provide the features you request.

Technical records are cleaned up by the background worker: verification challenges and idempotency records after seven days, and completed or skipped message records after 90 days. Failed messages requiring investigation may be retained longer. These technical periods do not set the retention period for orders or financial records.

Account information is kept while needed to provide your account. Account deletion removes or de-identifies the account profile, clears your bag and saved items, revokes sessions and stops account notifications and marketing.

Deletion does not erase transaction records. Orders, delivery-address snapshots, payment references, refunds and staff audit records can be retained separately for fulfilment, accounting, fraud prevention, disputes and legal obligations. These records may still identify you; de-identifying your profile does not make every past order anonymous.

Retained information should be limited to what is necessary for its purpose and kept no longer than required by applicable law or an ongoing lawful need. If you ask us about a retained record, we will explain its purpose and applicable retention basis. Backup copies may remain until backup rotation; deleting a live account does not instantly erase every backup.

You can edit supported profile fields, manage notification preferences, export your profile and order data, and delete your account in Account → Privacy & account. You can also contact us to request access, correction, restriction, objection or deletion where applicable. We may verify your identity proportionately before releasing or changing personal information.

Deletion does not remove a refund or other obligation owed to you. Contact support with your order reference to continue an outstanding matter after deletion. If a request cannot be fulfilled fully, we will explain the reason.

You may complain to Ghana’s Data Protection Commission. These rights are subject to Ghana’s Data Protection Act, 2012 (Act 843) and other applicable law.

We use access controls, encrypted network connections, password hashing and other safeguards. No system can guarantee absolute security. Keep your device and password secure and contact us promptly about suspected misuse.

We update this policy when our practices change. The date above identifies this version. Changes affecting optional consent do not make a previous opt-out into consent.