Privacy notice

01About this notice

This notice explains what personal data V-DeviceCare collects, why, who sees it, how long we keep it and the rights you have. It covers the website, the app and our support team.

V-DeviceCare is the data controller for the personal data described here. We follow the Data Protection Act, 2012 (Act 843), and we register with the Data Protection Commission before we collect any identity documents.

02What we collect

• Your account: your name, phone number, email address and password. We keep your password only in a form that cannot be read back.
• Your identity: your Ghana Card number, a photo of your Ghana Card and a selfie, used to check that you are who you say you are.
• Your devices: make, model, storage, IMEI or serial number, the photos the app asks for and, if you add one, your proof of purchase.
• Your cover and payments: your policies, renewals, payment history, receipts and any account credit. Payments go through Paystack; we do not see or keep your full card number or your mobile money PIN.
• Claims and swaps: what happened, the photos and documents you send, police reports for thefts, and the results of repairs, replacements and grading.
• Contact with us: messages, complaints and the record of calls our support team makes to you.
• How the app and website are used: technical details such as your device type and app version, used to keep the service working and secure.

03Why we use it

• To provide your cover: to check your identity and devices, take payments, issue certificates and receipts, and handle renewals, claims and swaps.
• To keep everyone safe from fraud: to check devices against lost and stolen device lists, and to spot and stop false claims.
• To meet the law: insurance, anti-money laundering, tax and data protection rules require us to keep certain records.
• To talk to you: to send reminders, receipts, claim updates and answers to your questions.

We rely on your consent, which you give when you sign up and before your identity check; on the agreement between us when you insure a device; and on our legal obligations.

04Do you have to give us this data?

• To insure a device you must give us your account details, your Ghana Card and selfie, your device's details and photos, and what we need to take payment. Without them we cannot provide cover, because the law and your insurer require us to know who we insure and what we cover.
• To make a claim or a swap you must give us what the claim or swap needs, such as photos, a police report for a theft, or the device itself.
• Everything else is up to you, such as a business name on your certificate or a reason when you cancel.
• You can withdraw your consent at any time. If you do, we stop collecting new data, but we may have to end your cover and keep what the law requires.

05Decisions made automatically

• Some checks are automatic: the lost and stolen device check, and the claim rules that depend only on dates and limits, such as a claim filed more than 30 days after the incident.
• Decisions that need judgement, such as whether a theft is covered or a claim is genuine, are always made by people, never automatically, and nobody approves a decision they proposed.
• If an automatic check refuses you, we tell you why. You can appeal a refused claim, or complain, and a person will look at it.

06Marketing

We send you marketing, such as news about offers, only if you have agreed to it in writing, and you can ask us to stop at any time. Reminders, receipts and claim updates are part of your cover, not marketing, so they continue.

07Your Ghana Card and selfie

• We use them only to check your identity, at sign-up and again if you reset your password.
• Only the staff roles that need to see them can, and every view is recorded.
• We never share them with partners without a lawful basis.

08Who sees your data

• Our staff, each seeing only what their role needs. Every change, and every view of sensitive records, is written to an audit trail.
• The insurer that underwrites your policy, which receives what it needs to stand behind your cover and to check claims.
• Approved service centres and replacement suppliers, which receive what they need to repair or replace your device.
• Paystack, which processes payments; and service providers that host our systems, send messages and help check identities and devices. They act on our instructions and may not use your data for their own purposes.
• If you are covered through your organisation's group scheme, its scheme administrator sees what is needed to run the scheme, such as membership and deductions.
• Public authorities, such as the police or a regulator, when the law requires it.

We do not sell your personal data.

09How long we keep it

• We keep your data while you have an account, and for as long as a policy, claim or swap needs it.
• Payment records and the audit trail are kept for as long as the law requires, even after an account is closed.
• When we no longer need data, we delete it or anonymise it.

10Keeping it safe

Your data is encrypted in transit, access is limited by role, every staff view of sensitive records is logged, and every payment that leaves the business is approved and recorded.

No system is perfectly secure. If we have reason to believe someone has accessed your personal data without permission, we tell you and the Data Protection Commission as soon as reasonably practicable, and we act to secure our systems.

11Your rights

• You can ask to see the personal data we hold about you and to get a copy of it.
• You can ask us to correct data that is wrong.
• You can ask us to delete data we no longer need. We cannot delete data that a live policy, an open claim or the law requires us to keep; instead, we remove what we can and anonymise your account.
• You can ask us to stop using your data in a way that is causing you damage or distress, or to stop using it for marketing.
• You can withdraw your consent.
• If we break the data protection law and it causes you damage or distress, you may be entitled to compensation.

Ask through Help in the app or by email. We may need to confirm it is you first. We answer within 10 business days.

If you are not satisfied with how we handle your data, you can complain to the Data Protection Commission.

12Children

V-DeviceCare is for people aged 18 and over. We do not knowingly collect data from anyone younger.

13Changes to this notice

We may update this notice. When a change affects how we use your data, we tell you in the app first. The date at the top shows when it last changed.

14Contact

You can reach our data protection team through Help in the app, or by the contact details on our Help page.