Skip to main content

AdepaPay — Privacy Policy

Read the AdepaPay Privacy Policy from Bridgeway Technology Limited.

Oct 6, 2026 · @King David

This Privacy Policy is provided by adepapay.com (“Adepapay”) and describes the collection, use, sharing, storage, and protection of your non-personal and personal information by Adepapay/Bridgeway Technology Limited.

In plain terms, “Adepapay” is the AdepaPay platform, accessible at adepapay.com, which is owned and operated by Bridgeway Technology Limited. This policy explains what information we gather about you — both personal information, which identifies you (such as your name or Ghana Card number), and non-personal information, which does not on its own identify you (such as aggregated usage statistics) — and how we collect it, what we use it for, who we share it with, how and where we store it, and the measures we take to protect it. We handle all such information in accordance with the Data Protection Act, 2012 (Act 843) of Ghana.

How we handle Customer and Merchant information

This overview summarises, in one place, how Bridgeway Technology Limited (operating as Adepapay, at adepapay.com) collects, uses, shares, stores and protects the personal and non-personal information of both Customers (people who acquire Goods on hire-purchase through the Platform) and Merchants (vendors who list and supply Goods through the Platform). The numbered sections that follow set out each matter in greater detail, and this overview is read subject to them.

Collection

  • From Customers (personal): identity and KYC data (name, Ghana Card number, date of birth, photograph), contact details (postal and GhanaPost GPS address, telephone, email), payment and financial details (mobile money or bank account used for deposits and instalments), repayment and transaction history, and creditworthiness and risk-score data.
  • From Merchants (personal and business): business name and registration details, the identity and KYC details of owners and directors, contact and settlement details (bank or mobile money account), catalogue and listing data, and sales and settlement history.
  • Non-personal (both): device, log and usage data, approximate location, and aggregated or anonymised statistics that do not on their own identify you.
  • We collect information directly from you, automatically through your use of the Platform, and from third parties such as the National Identification Authority, the Registrar of Companies, Payment Partners and credit reference bureaux.

Use

  • Customer information is used to verify identity, enable hire-purchase applications, generate indicative affordability, credit and risk scores, process deposits, instalments and collections, issue statements and reminders, provide support, detect and prevent fraud, and meet legal obligations.
  • Merchant information is used to onboard and verify businesses, publish listings, provide merchant-enablement tools (catalogue, records and management features), process settlements, provide analytics, detect and prevent fraud, and meet tax and legal obligations.
  • Non-personal information is used to operate, secure, measure and improve the Platform.
  • We do not sell Customer or Merchant personal data.

Sharing

  • Customer data is shared with the Merchant and/or Finance Partner handling a hire-purchase application (relevant details and the verification outcome), with Payment Partners (such as Moolre) to process payments, with verification partners and credit reference bureaux, with service providers acting on our behalf, and with regulators or authorities where required by law.
  • Merchant data is shared with Customers transacting with the Merchant (the business and contact details needed to complete a transaction), with Payment Partners for settlement, with verification partners, with service providers, and with regulators or authorities where required by law.
  • Third parties who process data on our behalf are bound by confidentiality and may use the data only for the purposes we specify.

Storage

  • Customer and Merchant information is stored on controlled systems and may be hosted with reputable cloud or service providers, including providers located outside Ghana, in which case appropriate safeguards are applied consistent with the Data Protection Act, 2012 (Act 843).
  • We keep information only for as long as necessary for the purposes described in this policy and for the periods required by law (for example, anti-money-laundering and tax record-keeping). When no longer required, information is securely deleted, anonymised or de-identified.

Protection

  • We apply reasonable technical and organisational measures to protect Customer and Merchant information against unauthorised access, loss, misuse, alteration or disclosure — including access controls and role-based permissions, encryption in transit, secure authentication, logging and monitoring, and staff confidentiality obligations.
  • Security is a shared responsibility: you must keep your Account credentials confidential. No system is completely secure, and in the event of a personal-data breach likely to affect you we will take the steps required by the Data Protection Act, 2012 (Act 843), including notifying the Data Protection Commission and affected individuals where required.

At a glance

This is a brief summary of how Adepapay/Bridgeway Technology Limited handles customers' data and personal and non-personal information. The full detail is in the numbered sections that follow.

  • Collection — what we gather. We collect the information needed to operate the Platform: identity and KYC details (including your Ghana Card number), contact details, account credentials, financial and transaction data, creditworthiness and risk-scoring data, and device and usage data. We gather it directly from you, automatically as you use the Platform, and from verification partners, Payment Partners and credit reference bureaux. (See Sections 3 and 4.)
  • Use — what we do with it. We use your information to verify your identity, operate the marketplace, generate verification and scoring tools, facilitate payments, provide merchant tools, communicate with you, prevent fraud, meet our legal obligations and improve our services. We do not sell your personal data. (See Sections 5 and 6.)
  • Sharing — who we give it to. We share your information only as needed: with Merchants and Finance Partners to complete the transactions you request, with licensed Payment Partners, with verification partners and credit reference bureaux, with service providers acting on our behalf under confidentiality obligations, and with regulators or authorities where the law requires. (See Section 7.)
  • Storage — how long and where we keep it. We keep your information only for as long as necessary for the purposes described, and for any longer period the law requires (for example, anti-money-laundering and tax records). Where information is stored or transferred outside Ghana, we apply appropriate safeguards. (See Sections 8 and 12.)
  • Protection — how we keep it safe. We apply reasonable technical and organisational safeguards — such as access controls, encryption in transit, secure authentication and monitoring — to protect your information, and we follow the breach-notification requirements of the Data Protection Act, 2012 (Act 843). (See Section 9.)

You hold rights over your personal data — including the rights to be informed, to access, to request correction or deletion, and to object — which are set out in Section 10.

1. Who we are and about this policy

1.1 AdepaPay is operated by Bridgeway Technology Limited ("Bridgeway", "we", "us" or "our"), a company incorporated in Ghana. For the purposes of the Data Protection Act, 2012 (Act 843), Bridgeway Technology Limited is the data controller responsible for the personal data processed through the AdepaPay platform.

1.2 This Privacy Policy explains what personal and non-personal information we collect, how and why we use it, with whom we share it, how long we keep it, how we protect it, and the rights you have in relation to it.

1.3 This policy should be read together with the AdepaPay Terms and Conditions. By using the Platform, you acknowledge that you have read and understood this policy.

1.4 We are registered with (or will register with) the Data Protection Commission of Ghana as a data controller. Our data-protection registration number is [DPC registration number].

2. Scope of this policy

2.1 This policy applies to all Users of the Platform, including Customers, Business Buyers, Merchants and visitors, and to all personal and non-personal information we process in connection with the Platform.

2.2 The Platform connects you with Merchants, Finance Partners, Payment Partners and verification partners who are independent third parties. Where those parties process your information for their own purposes, they act as separate data controllers and their own privacy policies apply. We are not responsible for the privacy practices of third parties, and you should review their policies.

2.3 "Personal data" means information about an identified or identifiable individual. "Non-personal information" means information that does not, on its own, identify you, such as aggregated or anonymised statistics.

3. Information we collect

We collect the following categories of information:

  • Identity and verification data: your name, Ghana Card (National Identification) number, date of birth, gender, photograph, signature, and other identity details needed for KYC and verification.
  • Contact data: your postal address, GhanaPost GPS address, email address and telephone number.
  • Account data: your username, password and account settings.
  • Merchant and business data: for Merchants, business name, registration details, ownership and director information, and catalogue data.
  • Financial and transaction data: payment instrument details, mobile money or bank account details, deposits, instalments, repayment history, transaction records and related information, processed through our Payment Partners.
  • Creditworthiness data: affordability indications, credit scores and risk ratings, and information obtained from credit reference bureaux, where applicable.
  • Usage and device data: IP address, device identifiers, browser type, operating system, log data, pages viewed and interactions with the Platform.
  • Location data: approximate location derived from your address or device, where relevant to a service.
  • Communications: messages, enquiries and support requests you send to us.

We collect only the information reasonably necessary for the purposes described in this policy. Some information is required to use the Platform; if you do not provide it, we may be unable to offer certain services.

4. How we collect your information

We collect information in three ways:

  • Directly from you — when you register, complete your profile, submit KYC documents, list Goods, apply for hire-purchase, make payments, or contact us.
  • Automatically — through cookies and similar technologies, and from your use of the Platform (device, log and usage data).
  • From third parties — including the National Identification Authority and other verification partners, the Registrar of Companies, credit reference bureaux, Payment Partners, Finance Partners, Merchants, and publicly available sources, in each case to the extent permitted by law.

Where you provide information about another person (for example, a guarantor or business associate), you confirm that you have their consent to do so.

5. Our legal bases for processing

Under the Data Protection Act, 2012 (Act 843), we process your personal data on one or more of the following legal bases:

  • Your consent — where you have agreed to a specific processing activity (which you may withdraw at any time).
  • Performance of a contract — where processing is necessary to provide the Platform and its services to you.
  • Compliance with a legal obligation — including KYC, anti-money-laundering, tax and regulatory requirements.
  • Our legitimate interests — including operating, securing and improving the Platform, preventing fraud and enforcing our Terms, provided these interests are not overridden by your rights.
  • Protection of your vital interests or the public interest — where applicable.

Where we rely on consent, we will make clear what you are consenting to and how to withdraw it.

6. How we use your information

We use your information to:

  • create and administer your Account and verify your identity (KYC);
  • operate the marketplace and connect Customers, Merchants and Finance Partners;
  • provide verification, affordability and credit-scoring tools;
  • facilitate payments, deposits, instalments and collections through our Payment Partners;
  • provide merchant-enablement tools, including catalogue, records and management features;
  • communicate with you about your Account, transactions and support requests;
  • detect, prevent and investigate fraud, abuse and security incidents;
  • comply with legal, regulatory and tax obligations;
  • improve, personalise and develop the Platform and our services; and
  • send you service messages and, where permitted, marketing (which you can opt out of).

We do not sell your personal data.

7. When and with whom we share your information

We share your information only as needed and as permitted by law, with:

  • Merchants and Finance Partners — to enable transactions you request, such as sharing a Customer's relevant details and verification outcome with the Merchant or Finance Partner handling a hire-purchase application.
  • Payment Partners — licensed payment service providers (for example, Moolre) that process payments and collections.
  • Verification partners — including the National Identification Authority and identity-verification providers, to confirm your identity.
  • Credit reference bureaux — licensed under the Credit Reporting Act, 2007 (Act 726), for credit assessment and reporting, where applicable.
  • Service providers — hosting, analytics, communications, security and support providers who process data on our behalf under confidentiality obligations.
  • Regulators and authorities — where required by law, regulation, court order or lawful request, including the Bank of Ghana and the Data Protection Commission.
  • Successors — in connection with a merger, acquisition or reorganisation of Bridgeway Technology Limited, subject to this policy.

We require third parties who process data on our behalf to protect it and to use it only for the purposes we specify. We do not authorise them to use your personal data for their own unrelated purposes.

8. How long we keep your information

8.1 We keep your personal data only for as long as necessary for the purposes for which it was collected, including to provide the Platform, to comply with legal, regulatory, tax and accounting obligations, and to resolve disputes and enforce our agreements.

8.2 Identity, KYC, transaction and financial records may be retained for the periods required by applicable law (for example, anti-money-laundering and tax record-keeping requirements), which may extend beyond the closure of your Account.

8.3 When your information is no longer required, we will securely delete, anonymise or de-identify it.

9. How we protect your information

9.1 We apply reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. These may include access controls and role-based permissions, encryption in transit, secure authentication, logging and monitoring, and staff confidentiality obligations.

9.2 No system is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you also play a role in keeping your Account safe by protecting your credentials.

9.3 In the event of a personal-data breach that is likely to affect you, we will take the steps required by the Data Protection Act, 2012 (Act 843), including notifying the Data Protection Commission and affected individuals where required.

10. Your rights as a data subject

Subject to the conditions and exceptions in the Data Protection Act, 2012 (Act 843), you have the right to:

  • be informed about how your personal data is processed;
  • access the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request deletion or blocking of data where it is no longer required or is processed unlawfully;
  • object to processing, including for direct marketing;
  • withdraw consent where processing is based on consent;
  • prevent processing likely to cause unwarranted damage or distress; and
  • not be subject to a decision based solely on automated processing that significantly affects you, and to request information about such processing.

To exercise any of these rights, contact us using the details in Clause 14. We may need to verify your identity before responding. We will respond within the time required by law. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Commission of Ghana.

11. Cookies and similar technologies

11.1 We use cookies and similar technologies to operate the Platform, remember your preferences, keep you signed in, measure usage and improve our services.

11.2 Some cookies are strictly necessary for the Platform to function; others are optional (for example, analytics). Where required, we will seek your consent for non-essential cookies.

11.3 You can manage cookies through your browser settings. Disabling certain cookies may affect how the Platform works.

12. Cross-border transfers, children, and changes

12.1 Cross-border transfers. Where we transfer your personal data outside Ghana (for example, to a cloud-hosting or service provider), we will take reasonable steps to ensure it is protected to a standard consistent with the Data Protection Act, 2012 (Act 843), including through appropriate contractual safeguards.

12.2 Children. The Platform is intended for persons aged eighteen (18) and above. We do not knowingly collect personal data from children. If we become aware that we have collected such data without proper consent, we will delete it.

12.3 Changes to this policy. We may update this policy from time to time. We will post the updated policy on the Platform and change the effective date, and will notify you of material changes by reasonable means. Your continued use of the Platform after changes take effect indicates your acceptance of the updated policy.

13. How we handle Customer and Merchant information

This section brings together, in one place, how the activities described above apply to our two main groups of users — Customers and Merchants. It is a plain-language overview and is subject to the detailed provisions in the rest of this policy.

13.1 Collection — what we gather.

  • Customers: identity and KYC data (name, Ghana Card number, date of birth, photograph, contact details, GhanaPost GPS address); financial and transaction data (mobile money or bank details, deposits, instalments, repayment history); creditworthiness data (affordability indications, the Customer risk score and credit-bureau information); and device, usage, location and communications data.
  • Merchants: business identity (business name, registration, director and ownership details, tax details); settlement details (bank or mobile money accounts); catalogue and listing data; and transaction records.

13.2 Use — why we process it.

  • Customers: to verify identity (KYC), connect you to Merchants and Finance Partners, generate verification, affordability and risk scores, facilitate payments and collections, administer hire-purchase records, provide support, prevent fraud, meet legal and tax obligations, and send service and permitted marketing messages.
  • Merchants: to onboard and verify the business, publish and manage listings, operate the catalogue and management tools, settle payments, provide analytics, run fraud and risk checks, and meet compliance obligations.

13.3 Sharing — with whom.

  • Customers: with the Merchant or Finance Partner handling your application (relevant details and verification outcome), Payment Partners, verification partners, credit reference bureaux, service providers, and regulators or authorities where legally required.
  • Merchants: with Payment Partners for settlement, verification partners and the Registrar of Companies, service providers, and regulators or authorities where legally required.
  • As a neutral intermediary, AdepaPay shares only the information needed for the parties to transact, and does not sell personal data.

13.4 Storage and retention — where and how long. Customer and Merchant information is held in Adepapay/Bridgeway systems and with cloud and service providers, which may be located outside Ghana under appropriate safeguards consistent with the Data Protection Act, 2012 (Act 843). We keep it only as long as necessary; identity, KYC, financial and transaction records may be retained for the periods required by anti-money-laundering and tax law, which can extend beyond account closure, after which it is securely deleted, anonymised or de-identified.

13.5 Protection — how we safeguard it. We apply reasonable technical and organisational measures for both Customers and Merchants, including access controls and role-based permissions, encryption in transit, secure authentication, logging and monitoring, and staff confidentiality obligations. Keeping account credentials secure is a shared responsibility, and in the event of a breach likely to affect you we follow the notification requirements of Act 843.

Both Customers and Merchants retain their data-subject rights under the Data Protection Act, 2012 (Act 843), as set out above.

14. How to contact us

If you have any question, request or complaint about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

  • Data controller: Bridgeway Technology Limited
  • Data Protection Officer: [name of DPO]
  • Email: [privacy/DPO email]
  • Postal address: [registered office address]
  • Telephone: [contact telephone]

You also have the right to lodge a complaint with the Data Protection Commission of Ghana if you believe your data-protection rights have been infringed.

Effective date: [effective date].