Privacy Policy

BOMA · Last updated: April 29, 2025

1. Introduction

BOMA ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use the BOMA mobile application. By using the App, you consent to the practices described in this policy.

2. Data We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored securely via Firebase Authentication).

Order Information

When you place an order, we collect your delivery address, selected items, payment method, and transaction reference. Payment card details are processed by Paystack and are never stored by BOMA.

Device and Usage Data

We may collect device identifiers, app usage statistics, and push notification tokens (via OneSignal) to improve your experience and deliver relevant notifications.

Communications

If you contact us via email, we retain that correspondence to resolve your query and improve our service.

3. How We Use Your Data

We use the information we collect to:

Process and fulfil your orders
Send order confirmations, shipping updates, and delivery notifications
Send promotional notifications about new drops, promo codes, and offers (only if you have not opted out)
Improve the performance, security, and features of the App
Detect and prevent fraud or misuse of the platform
Comply with legal obligations under Ghanaian law

4. Data Storage and Security

Your data is stored securely in Google Firebase (Firestore and Firebase Authentication), hosted on Google Cloud infrastructure. We implement industry-standard security measures including encrypted connections, access controls, and regular security reviews. No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Sharing Your Data

We do not sell your personal data to third parties. We may share your data with:

Paystack — to process payments securely
OneSignal — to deliver push notifications
Delivery partners — solely to fulfil your order (name and delivery address only)
Law enforcement or regulatory bodies — if required by Ghanaian law

All third-party partners are contractually required to handle your data in accordance with applicable privacy laws.

6. Push Notifications

The BOMA App uses OneSignal to send push notifications. We tag your device with your user role (customer or admin) to send relevant notifications. You can opt out of push notifications at any time through your device settings.

7. Your Rights

Under applicable Ghanaian data protection principles, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your account and associated data
Withdraw consent to marketing communications at any time

To exercise any of these rights, contact us at hello@bomadrops.com. We will respond within 30 days.

8. Data Retention

We retain your account and order data for as long as your account is active, or as required by law. If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required for legal or financial compliance purposes.

9. Children's Privacy

The BOMA App is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user under 18 has registered, we will delete their account and associated data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via the App or email. Your continued use of the App after updates take effect constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us:

BOMA · Accra, Ghana · hello@bomadrops.com