Legal

Privacy Policy

Effective Date: 26 June 2026. Version 1.1. This Privacy Policy explains what personal data Ozapp collects, why we collect it, how we use and share it, how long we keep it, and the rights you have.

Who we are and who controls your data

Ozapp is a cross-border commerce service that lets you shop from U.S. retailers and pay in your local currency or USD. For Ghana customers, the data controller is Ozapp Limited, Accra, Ghana. U.S. purchasing, warehousing, and export operations are handled by Ozapp LLC in New Jersey.

Scope of this policy

This Policy covers personal data we process about visitors, registered users, and the recipients you nominate for delivery. It does not cover third-party retailers, payment providers, or carriers, whose own privacy policies apply.

The personal data we collect

We collect account and contact data, identity and verification data, delivery and recipient data, order and transaction data, logistics records, payment references, source-of-funds information where required, support communications, device and usage data, and cookie or similar identifiers.

How we collect your data

We collect data directly from you when you register, place an order, submit a product link, contact support, or complete verification. We also collect data automatically through cookies, device identifiers, and logs, and from service providers such as identity-verification, fraud-screening, payment, retailer, and carrier partners.

Why we use your data and our legal bases

We use your data to create and manage your account, provide the Service, purchase and ship orders, process payments and currency conversion, verify identity, screen fraud and sanctions, provide support, improve and secure the platform, send service messages, send marketing where you opt in, and meet legal, tax, customs, and regulatory obligations.

Identity verification, fraud, AML screening and monitoring

As a cross-border service, we may verify your identity, check sanctions and watchlists, assess fraud risk, monitor transactions, and request additional documents or source-of-funds information. Where required by law, we may report suspicious activity to the relevant authority.

Automated decisions and profiling

We use automated checks to detect fraud and verify identity, such as risk scoring an order or account. A high-risk score may delay an order or refer it for human review. We do not use these tools to make solely automated decisions with legal effects without the opportunity for human review.

Who we share your data with

We share personal data only as needed to run the Service and meet our obligations. Recipients may include identity/KYC providers, payment and FX partners, U.S. retailers, freight, customs and last-mile carriers, cloud and analytics providers, professional advisors, government or customs bodies where required, and a buyer or successor in a business transfer. We do not sell your personal data.

International data transfers

Delivering orders requires moving data across borders, especially to the United States where products are purchased, consolidated, and exported. We take steps required by applicable Ghanaian and Nigerian data-protection law, including relying on consent, contract necessity, or contractual safeguards where appropriate.

Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, measure performance, and support marketing where you consent. You can control non-essential cookies through your browser settings or our cookie controls where offered.

How long we keep your data

We keep personal data only as long as needed for the purposes in this Policy, then delete or anonymize it. Account data is kept while your account is active and for a reasonable period after closure. Order, transaction, KYC, AML, support, and marketing-consent records are retained for the periods required by law or needed to resolve and evidence matters.

How we protect your data

We use technical and organizational safeguards appropriate to the risk, including encryption in transit, access controls, authentication, monitoring, and staff confidentiality obligations. Full card data is handled by PCI-compliant payment partners rather than stored by Ozapp.

Your privacy rights

Subject to legal conditions and exceptions, you may have rights to be informed, access your personal data, correct inaccurate data, request deletion, object to or restrict processing, withdraw consent, request portable data, ask for human review of an automated check, and complain to your data-protection regulator.

Marketing and your choices

We send marketing only where you have opted in or where the law otherwise permits. You can opt out using the link in marketing messages or by changing your preferences. Opting out of marketing does not stop essential service messages such as order updates, payment receipts, and security notices.

Children's privacy

The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If we learn that we have collected data from a person under 18, we will delete it.

Third-party links and services

The Service may link to or interact with third-party sites and services, including retailers and payment providers. We are not responsible for their privacy practices, so please review their privacy notices before providing data to them.

Business transfers

If Ozapp is involved in a merger, acquisition, financing, corporate reorganization, or sale of assets, personal data may be transferred to a successor or buyer as part of that transaction, subject to applicable data-protection law.

Changes to this policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, give reasonable notice through the Service. Continued use after an update means you accept the updated Policy.

Your acknowledgment

By creating an account, placing an order, or using the Service, you acknowledge that you have read and understood this Privacy Policy. Where we rely on consent, we will ask for it separately and you may withdraw it at any time.

Contact us

For privacy questions or to exercise your rights, email support@buyozapp.com or write to Ozapp, AD 51, Teshie Rasta Road, Ledzokuku-Accra, Ghana, Ghana Post GZ-183-8156.