1. Who We Are#
In short: AAG is responsible for your personal data. We collect what we need to run safe trips, payments and partnerships. We never sell it, and you can ask to see, correct or delete it.
1.1
This Privacy Notice explains how AAG Transport & Logistics Ltd (“AAG”, “we”), Kaneshie, Tabo Street, Accra, Ghana, collects, uses, shares and protects personal data when you use our website, the AAG customer and Driver apps, the Partner Portal, our call centre, WhatsApp and email channels, and all our Services.
1.2
AAG is the data controller responsible for your personal data under the Data Protection Act, 2012 (Act 843). We follow international best practice, including the principles of the EU and UK General Data Protection Regulation (GDPR), and where the GDPR applies to you, we comply with it.
1.3
AAG is registering as a data controller with the Data Protection Commission of Ghana. Our registration number will be published here once it is issued.
1.4
You can contact our privacy lead at privacy@aagtransportandlogistics.com or write to us at the address above.
1.5
Back to contents ↑This Notice should be read together with our Terms and Conditions and Cookie Notice.
2. Personal Data We Collect#
2.1
What we collect depends on how you use AAG:
| Who | Data we collect |
|---|---|
| Website visitors | IP address, device and browser type, pages viewed, referring site, and approximate location from your IP address. Analytics cookies are set only with your consent (see our Cookie Notice). |
| Customers (all bookings) | Name, phone (OTP-verified), WhatsApp number, email, account password (stored hashed), pickup and drop-off addresses and stops, dates, passengers, vehicle preferences, notes, booking history, payment status and receipts, ratings, support messages and call recordings, saved Preferred Drivers, and, if you provide them, date of birth, nationality, address, GhanaPost GPS code and an emergency contact. |
| Self-drive renters | Driving licence (front and back), Ghana Card (front and back) or passport, ID type, a profile photo for identity checks, residential or office address, deposit details, vehicle condition reports, mileage and fuel records, and any incident reports. |
| Airport and visa-on-arrival customers | Flight number and flight status, and for visa requests: full name as on the passport, nationality, passport number and expiry date, a copy of the passport, and a ticket or flight reservation. Special-assistance needs you tell us about. |
| Business account users | Company name, registration number, TIN, industry and website, and the names, roles and contact details of authorised users, PO references, invoices and usage reports. |
| Auto Sale and Lease customers | Identity documents, contact details, the vehicle chosen, payment and instalment records, the lease agreement, affordability information you choose to provide, and inspection reports. |
| Logistics customers and recipients | Sender and recipient names, addresses and phone numbers, consignment description and value, and proof of delivery (signature, photo or code). |
| Property and stay enquiries | Contact details, property preferences, budget, viewing schedule and stay details. |
| Drivers | Full name, date of birth, gender, nationality, Ghana Card or passport number, contact details, address, licence number, class and expiry, driving experience, employment history, certifications, a passport photo, Police Clearance Certificate, medical fitness certificate, two references, bank or Mobile Money details, vehicle documents, GPS location while online and on trips, trip logs (including out-of-network trips), earnings, ratings and performance metrics. |
| Partners and their staff | Business and contact-person details (up to three contacts), Ghana Card copies for contacts, business certificates and licences, TIN, payout bank or Mobile Money account, the vehicles, rates and drivers you register, documents for insurance and roadworthiness, and Service Agreement acceptance records. |
| People logged by Drivers | When a Driver logs a direct trip, we receive the client’s name, phone, optional email and trip details. We create a basic profile and may send one WhatsApp invitation to save a Preferred Driver. You can ask us to delete this profile at any time. |
2.2
Back to contents ↑Where you give us personal data about someone else (for example a passenger, a recipient, a guest or a team contact), please make sure they know about this Notice.
3. Identity Documents and Sensitive Data#
3.1
Identity documents, passport data, police clearance and medical fitness certificates are among the most sensitive data we hold. We collect them only where needed for road safety, legal compliance, fraud prevention or the specific service you request (such as self-drive, visa on arrival or driver onboarding).
3.2
A medical fitness certificate tells us whether a driver is fit to drive. We do not ask for diagnoses. Police clearance is used only to decide whether a person is suitable to drive passengers, and is kept with restricted access.
3.3
Back to contents ↑These documents are stored in access-controlled storage with private (non-public) links, are visible only to staff who need them, and are deleted or anonymised under our retention schedule.
4. Location Data#
4.1
Customers. We use the addresses you enter. With your permission, we also use your device location to set pickup points and show your driver’s arrival. We do not track customers’ location in the background.
4.2
Drivers. We collect GPS location while you are online in the Driver app or on a trip (including trips logged before they start), to dispatch bookings, calculate fares, share ETAs with passengers, ensure safety and resolve disputes. We do not collect driver location while you are offline.
4.3
Back to contents ↑You can turn off location permission in your device settings, but some features will not work without it.
5. How We Use Your Data and Our Legal Grounds#
5.1
We use personal data only where we have a lawful basis under Act 843 (and the GDPR, where it applies):
| Purpose | Legal ground |
|---|---|
| Creating and managing accounts, confirming and delivering bookings, dispatching drivers, and sending booking, trip and payment messages | Performing our contract with you |
| Taking payments and deposits, refunds, invoicing, payouts and settlements | Contract; legal obligation (tax and accounting) |
| Verifying identity, licences and documents, onboarding drivers and partners, and preventing fraud and document forgery | Legal obligation; legitimate interests in safety and fraud prevention; contract |
| Passenger and road safety, incident handling, insurance claims, emergency alerts and cooperating with the authorities | Legitimate interests; legal obligation; vital interests in an emergency |
| Visa on arrival facilitation | Contract (at your request); your explicit consent to share passport data with the Ghana Immigration Service |
| Customer support, complaints, call recording for quality and training | Contract; legitimate interests in service quality |
| Ratings, performance scores and driver quality management | Legitimate interests in safe, reliable service; contract with drivers and partners |
| Website analytics and improving our services | Consent (for analytics cookies); legitimate interests (for aggregated, non-identifying statistics) |
| Marketing by WhatsApp, SMS or email | Consent, which you can withdraw at any time |
| Tax, VAT, Tourism Levy, accounting and regulatory record-keeping | Legal obligation |
| Establishing or defending legal claims, and enforcing our Terms (including anti-circumvention) | Legitimate interests |
5.2
Back to contents ↑Where we rely on legitimate interests, we have balanced them against your rights. You can object at any time (see “Your Rights”).
6. Automated Processing and AI Tools#
6.1
Auto-allocation. Our system automatically matches bookings to available drivers using distance from pickup, vehicle category, availability, service qualifications and performance score. This decides which driver is offered a trip. It does not decide whether you can use AAG.
6.2
Pricing. Prices are calculated automatically from our rate card, fuel prices, exchange rates, distance and time.
6.3
Performance scores. Driver performance scores combine ratings, acceptance rate, cancellation rate and on-time percentage. A low score can affect how many trips are offered. Any suspension or deactivation is reviewed by a person before it takes effect, except where urgent safety action is needed, and you can ask for a review.
6.4
Back to contents ↑AI-assisted review. AAG uses an AI service (Anthropic’s Claude, through its API) to help our operations staff review fleet and driver records, for example to flag drivers who need a vehicle or records with missing information. The AI provides suggestions only. Decisions are made by AAG staff. Data sent to the AI provider is limited to what the review needs and is handled under the provider’s commercial data terms, which do not allow it to be used to train the provider’s models.
7. Who We Share Data With#
7.1
We do not sell your personal data. We share it only as follows:
- Drivers and Partners delivering your booking: your name, phone number, pickup and drop-off details, flight number and notes, for that booking only. Customers receive the driver’s name, photo, vehicle and plate, and phone number.
- Third-Party Providers you book through us: for example lounges, VIP and CIP terminal operators, hotels, venues and event vendors receive what they need to provide the service.
- Government authorities, where needed for the service you request or required by law: for example the Ghana Immigration Service (visa requests), the Ghana Revenue Authority (tax), the Driver and Vehicle Licensing Authority, the Ghana Police Service and the courts.
- Service providers (data processors) acting on our instructions: payment processing (Paystack), messaging (Twilio for SMS and WhatsApp, and email delivery providers), maps and routing (Google Maps Platform), cloud database and hosting (Supabase, Hostinger, WordPress and its plugins), file and document storage (Cloudinary and our media library), website analytics (Google Analytics, only with consent), AI-assisted review (Anthropic), and our professional advisers, insurers and auditors.
- Insurers and loss adjusters when there is an incident or claim.
- A buyer or investor if AAG’s business is reorganised, merged or sold, under confidentiality obligations.
7.2
Back to contents ↑Every processor is bound by a written contract requiring it to keep data secure and use it only on our instructions.
8. International Transfers#
8.1
Some of our service providers store or process data outside Ghana, for example in the European Union, the United Kingdom or the United States. When this happens, we make sure the transfer is lawful under Act 843 and protected by appropriate safeguards, such as contractual data protection clauses, the provider’s security certifications and data minimisation.
8.2
Back to contents ↑Our website loads fonts and scripts from Google servers. This means your browser sends your IP address to Google when you visit, as described in our Cookie Notice.
9. How Long We Keep Data#
| Data | How long we keep it |
|---|---|
| Account profile | While your account is open, plus 24 months of inactivity, then deleted or anonymised |
| Booking, payment and invoice records | 6 years after the transaction, for tax and accounting law |
| Self-drive and visa documents (licence, ID, passport, photo, ticket) | 12 months after your last self-drive or visa booking, unless needed for an open claim |
| Driver and partner onboarding documents | While active, plus 6 years after the relationship ends (for safety, claims and legal records). Rejected applications: 12 months. |
| GPS trip data | 24 months, then aggregated or anonymised |
| Call recordings | 90 days, unless needed for a complaint or incident |
| Marketing consent records | Until you withdraw consent, plus 2 years as proof |
| Analytics data (Google Analytics) | 14 months |
| Incident, claim and dispute files | 6 years after the matter closes |
10. How We Protect Your Data#
10.1
We use HTTPS and TLS encryption in transit, encryption at rest for sensitive fields, role-based access so that each staff member and partner sees only the data they need, multi-factor authentication for administrators, security monitoring, private storage for documents, and payment processing by a PCI-DSS-compliant provider (so card numbers never reach our servers).
10.2
Back to contents ↑No system is completely secure. If a personal data breach is likely to harm you, we will notify you and the Data Protection Commission without undue delay, as required by law.
11. Your Rights#
11.1
Subject to the law, you have the right to:
- be told how your data is used (this Notice);
- get a copy of the personal data we hold about you;
- have inaccurate or incomplete data corrected;
- have data deleted, or its use restricted, where we no longer have a valid reason to keep it;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time (this does not affect processing done before you withdraw);
- receive data you gave us in a portable format, where technically feasible;
- ask for a person to review a decision made solely by automated means that significantly affects you; and
- complain to the Data Protection Commission of Ghana (dataprotection.org.gh), or to your local data protection authority if you live outside Ghana.
11.2
Back to contents ↑To use your rights, email privacy@aagtransportandlogistics.com or use the “Delete account” option in your profile. We may need to verify your identity. We will respond within 21 days and tell you if we need longer (up to a further 21 days for complex requests). There is normally no fee.
12. Marketing Messages#
12.1
Back to contents ↑We send marketing (offers, new services, newsletters) only if you have opted in, or if you are an existing customer and did not opt out when we offered you the choice. Every message tells you how to unsubscribe. Reply STOP to SMS or WhatsApp messages, or use the unsubscribe link in emails. Service messages about your bookings are not marketing and will continue.
13. Children#
13.1
Back to contents ↑Our Services are not directed at children under 18, and children may not open accounts. Children may travel as passengers on a booking made by a parent, guardian or organisation, which is responsible for them. We collect only the minimum information needed about child passengers (for example the number of passengers and child seat needs).
14. Changes to This Notice#
14.1
Back to contents ↑We will update this Notice when our practices or the law change. The “last updated” date shows the current version. We will tell registered users about material changes by email or in-app message before they take effect.
15. Contact#
15.1
Back to contents ↑Privacy questions and requests: privacy@aagtransportandlogistics.com · AAG Transport & Logistics Ltd, Kaneshie, Tabo Street, Accra, Ghana · +233 30 225 7979.
© 2026 AAG Transport & Logistics Ltd. Privacy Notice, version 1.0, last updated 6 October 2026.