Sprinta operates under the Ghana Data Protection Act, 2012 (Act 843). KZM Global Ltd, a registered Data Controller with the Data Protection Commission (DPC) of Ghana, collects only necessary user data to operate a fixed-price, 100% cashless logistics platform that connects senders with automatically assigned nearest drivers. Sprinta does not provide transport services directly, does not employ drivers, and does not share data beyond operational needs. Location data is used strictly for automated driver assignment and live parcel tracking. Payments are processed exclusively via licensed Mobile Money and card payment providers; Sprinta does not store financial credentials. Data is used for delivery execution, safety, fraud prevention, and legal compliance.
Sprinta — Privacy Policy
Operated
by KZM Global Ltd | Last Updated: 16 August 2026 |
Effective Date: 16 August 2026
This Privacy
Policy explains how KZM Global Ltd ("KZM Global", "we",
"our", or "us"), a limited liability company incorporated
under the laws of the Republic of Ghana, collects, uses, discloses, and
protects personal data through the Sprinta mobile application and website
(together, the "Platform"). KZM Global Ltd is a registered Data
Controller with the Data Protection Commission of Ghana ("DPC") and
processes personal data in accordance with the Data Protection Act, 2012 (Act
843) ("Act 843") and internationally recognised data protection
principles, including those reflected in the EU General Data Protection
Regulation (GDPR) where applicable to our operations.
Sprinta is a
100% cashless technology platform that connects individuals and businesses
("Senders") with independent, licensed delivery drivers
("Drivers") for parcel delivery services across Ghana. Sprinta is a
technology intermediary only: we do not provide transport or courier services
ourselves, and we do not employ Drivers. Delivery pricing is system-generated
and fixed; the Platform does not support price negotiation or bidding.
By using the
Platform, you acknowledge that you have read and understood this Privacy
Policy. If you do not agree with it, please do not use the Platform.
This Policy
applies to all users of the Platform, including Senders (consumer and
business), parcel recipients, Drivers, and visitors to our website. It covers
personal data collected through the Sprinta app, our website, customer support
channels, and any related services we operate.
We process
personal data only where a lawful basis exists under Ghanaian law, namely:
•
Consent — where you have given
clear, informed consent for a specific purpose (for example, optional marketing
communications).
•
Performance of a contract —
processing necessary to create your account, arrange deliveries, process
payments, and provide the services you request.
•
Legal obligation — processing
required to comply with the laws of the Republic of Ghana, including tax,
regulatory, and law-enforcement obligations.
•
Legitimate interests — processing
necessary for our legitimate business interests (such as fraud prevention,
platform security, and service improvement), provided those interests do not
override your fundamental rights and freedoms.
•
Identity and contact details: full
name, phone number, and email address.
•
Delivery details: pickup and
delivery addresses, recipient name and contact number, parcel descriptions, and
delivery instructions.
•
Communications: in-app chat
messages, support requests, and complaint records.
•
Business information: business
name, registration details, and billing information for corporate and business
(B2B) accounts.
•
Optional information: profile
photograph and preferences you choose to provide.
If you register
as a delivery partner, we additionally collect and verify:
•
National identification (Ghana
Card) or other valid government-issued identification.
•
A valid Ghanaian driver’s or
rider’s licence and vehicle or motorbike registration and roadworthiness
details.
•
Postal and Courier Services
Regulatory Commission ("PCSRC") e-certificate details and
registration status on the Integrated Courier and Logistics Management System
(iCOLMS-GH).
•
A profile photograph (mandatory,
for Sender verification and safety).
•
Ratings, performance data,
delivery history, and GPS location history generated while providing services.
•
Device and technical data: device
type and identifiers, operating system, app version, IP address, and crash
logs.
•
Usage data: in-app activity,
features used, and interaction logs.
•
Location data: real-time GPS
location while the app is in use (and, for Drivers on active deliveries, while
running in the background).
Location data
is used strictly to: (a) automatically match Senders with the nearest available
Driver; (b) enable live, end-to-end parcel tracking for Senders and recipients;
and (c) support delivery safety, accuracy, dispute resolution, and fraud
prevention. You may disable location services in your device settings, but core
Platform features will not function without them.
Personal data
is collected for specified, explicit, and legitimate purposes only, and is not
further processed in a manner incompatible with those purposes. We use personal
data to:
•
Create and administer user and
Driver accounts, and verify identity and regulatory credentials, including
verification of the Ghana Card against official national identification records
where required for onboarding, fraud prevention, or compliance with know-your-customer
(KYC) and anti-money-laundering obligations under Ghanaian law, including the
Anti-Money Laundering Act, 2020 (Act 1044).
•
Facilitate automated dispatch,
routing, tracking, and completion of deliveries.
•
Process system-generated,
fixed-fee electronic payments through licensed payment providers.
•
Provide customer support and
investigate and resolve delivery disputes and complaints.
•
Detect, prevent, and investigate
fraud, theft, unauthorised access, and misuse of the Platform.
•
Maintain the safety and security
of Senders, recipients, and Drivers.
•
Comply with applicable Ghanaian
laws, regulatory directives, and lawful requests from competent authorities.
•
Analyse and improve Platform
performance, reliability, and user experience.
Sprinta uses an
automated matching engine that assigns delivery requests to the nearest
available, verified Driver based on proximity, operational zones, and vehicle
type, and calculates a fixed delivery fee based on distance and operational
parameters. These automated processes do not involve profiling that produces
legal effects concerning you beyond the operation of the service itself. If you
believe an automated assignment or fee was affected by an error, you may
contact our support team for human review.
Sprinta
operates exclusively as a cashless platform. Payments are made via Mobile Money
(MoMo) or credit/debit card (including Visa and Mastercard) and are processed
entirely by third-party payment service providers licensed by the Bank of
Ghana.
•
We do not access, store, or retain
MoMo PINs, card numbers, CVVs, or other sensitive financial credentials.
•
Our payment processors are
contractually required to maintain PCI-DSS compliance and to process data in
accordance with Act 843.
•
We retain limited transaction
records (amount, date, transaction reference, and status) as required for
accounting, tax, dispute resolution, and fraud-prevention purposes.
We do not sell
personal data. We share personal data only where necessary, under strict
operational and contractual controls:
To complete a
delivery, limited information is shared between the Sender and the
automatically assigned Driver: names, contact phone numbers, pickup and
delivery addresses, and parcel details relevant to the delivery. Users must use
this information solely to complete the delivery and for no other purpose.
We engage
vetted third parties to support Platform operations, including cloud hosting
and secure server infrastructure, licensed payment gateways, mapping and
geolocation services, SMS and notification providers, and analytics and
crash-reporting tools. All service providers are bound by contractual
obligations to protect personal data consistent with Act 843 and to process it
only on our documented instructions.
We may disclose
personal data where required or permitted by Ghanaian law, including in
response to court orders, or lawful requests from law enforcement or regulators
such as the PCSRC, the DPC, or the Financial Intelligence Centre (including
suspicious transaction reporting under the Anti-Money Laundering Act, 2020 (Act
1044)), or where disclosure is necessary to protect the rights, property, or
safety of KZM Global, our users, or the public (including the prevention and
detection of crime). We may also share limited data with our licensed payment
providers where necessary for their own statutory KYC, anti-fraud, and
anti-money-laundering compliance.
If KZM Global
is involved in a merger, acquisition, restructuring, or sale of assets,
personal data may be transferred as part of that transaction, subject to
safeguards no less protective than this Policy. We will notify affected users
of any such change.
Some data may
be processed or stored on secure, encrypted cloud infrastructure located
outside Ghana. Where personal data is transferred outside Ghana, we ensure the
transfer complies with Act 843, including through contractual safeguards with
the receiving party, encryption in transit and at rest, and verification that
the recipient provides an adequate level of protection for personal data.
We retain
personal data only for as long as necessary to provide our services, comply
with legal, tax, and regulatory obligations, resolve disputes, prevent fraud,
and enforce our agreements. In general:
•
Account and profile data is
retained while your account is active and deleted or anonymised within 30 days
of a verified deletion request, unless retention is required by law.
•
Transaction and payment records
are retained for the period required under Ghanaian tax and accounting law.
•
Records connected to unresolved
disputes, chargebacks, suspected fraud, or legal proceedings are retained until
the matter is concluded.
•
Driver regulatory verification
records are retained as required by applicable PCSRC and other regulatory
requirements.
When retention
is no longer necessary, data is securely deleted or irreversibly anonymised.
We implement
appropriate technical and organisational measures to protect personal data
against unauthorised access, alteration, disclosure, loss, or destruction,
including:
•
Encryption of data in transit
(SSL/TLS) and at rest.
•
Role-based access controls and the
principle of least privilege for staff and contractors.
•
Secure, monitored server
infrastructure with logging and intrusion detection.
•
Regular security reviews of our
systems and of third-party providers.
While we apply
industry-standard safeguards, no system can be guaranteed to be completely
secure. You are responsible for keeping your account credentials confidential
and for notifying us immediately of any suspected unauthorised use of your
account.
In the event of
a personal data breach that poses a risk to your rights or freedoms, we will
notify the Data Protection Commission and affected users without undue delay,
in accordance with Act 843 and applicable regulatory guidance, and will take
prompt steps to contain and remediate the breach.
Subject to the
conditions and exemptions in Act 843, you have the right to:
•
Access — request confirmation of
whether we hold personal data about you and obtain a copy of it.
•
Correction — request correction of
inaccurate, incomplete, or outdated personal data.
•
Deletion — request deletion of
your personal data (see Section 16, Account Deletion).
•
Objection — object to processing
carried out on the basis of legitimate interests, and opt out of direct
marketing at any time.
•
Complaint — lodge a complaint with
us, and with the Data Protection Commission of Ghana if you believe your data
protection rights have been infringed.
To exercise any
of these rights, contact us using the details in Section 20. We may need to
verify your identity before acting on a request, and we will respond within the
timelines required by Act 843. Exercising your rights is free of charge except
where a request is manifestly unfounded, excessive, or repetitive, in which
case a reasonable fee may apply as permitted by law.
We may send you
service-related communications (such as delivery updates, receipts, and
security notices) as a necessary part of operating the Platform. We will only
send promotional or marketing communications with your consent, and every
marketing message will include a simple means of opting out. Opting out of
marketing does not affect service-related communications.
Our website
uses cookies and similar technologies that are strictly necessary for the site
to function, together with optional analytics cookies that help us understand
how the site is used. You can control non-essential cookies through your
browser settings. Blocking essential cookies may affect website functionality.
You may request
deletion of your Sprinta account at any time, directly in the app: Profile →
Settings → Delete Account → Confirm. You may also submit a deletion request by
email to the contact in Section 20.
•
Timeline — verified deletion
requests are completed within 30 days, unless retention of specific records is
required by law.
•
Effect — your profile is removed,
and personal data not subject to a legal retention requirement is deleted or
anonymised.
•
Data that may be retained —
electronic transaction records, records relevant to ongoing fraud
investigations or disputes, and logs required for regulatory audit purposes may
be retained for the legally required period.
•
Driver accounts — deletion ends
Platform access, removes your public profile, and stops delivery assignments.
Deletion is processed once outstanding deliveries, payments, or compliance
matters are resolved.
The Platform is
intended exclusively for persons aged 18 years or older. We do not knowingly
collect personal data from anyone under 18. If we become aware that personal
data of a minor has been collected, we will delete it promptly. If you believe
a minor has provided us with personal data, please contact us immediately.
The Platform
may contain links to third-party websites or services (for example, payment
provider pages). This Policy does not apply to those third parties, and we are
not responsible for their privacy practices. We encourage you to review the
privacy policies of any third-party services you use.
We may update
this Privacy Policy from time to time to reflect changes in our operations,
legal requirements, or regulatory guidance. Material changes will be notified
through the app, our website, or other appropriate electronic channels before
they take effect, together with the updated "Last Updated" date. Your
continued use of the Platform after the effective date of an updated Policy
constitutes acceptance of the changes.
Data
Controller: KZM Global Ltd, registered Data Controller with the Data
Protection Commission of Ghana [DPC Registration No.: insert].
•
Registered Office: House
Number 36, Manet Road, Genesis Court House, Inside Mariville, Accra, Greater
Accra Region, Ghana.
•
Email (privacy and data
requests): support@sprinta.app
•
General enquiries: info@sprinta.live |
Phone: +233 25 624 8633
Supervisory
authority: Data Protection Commission of Ghana — you have the right to lodge a
complaint with the DPC at any time.
