Privacy Policy – Base Community App

This Privacy Policy applies to the Base Community App (the “App”), operated by Base (referred to as “we”, “our”, or “us”).

Last Updated: 27th March 2026.

Introduction

This Privacy Policy explains what information we collect, how we collect, use, store, share, and protect your personal information when you use the Base Community App. “Processing” includes collecting, recording, storing, using, sharing, or deleting your information.

We are committed to protecting your privacy and ensuring that your personal data is handled responsibly and in accordance with the Data Protection Act, 2012 (Act 843), regulated by the Data Protection Commission Ghana, and aligned with international standards such as the General Data Protection Regulation.

The law requires us to tell you about your rights and our obligations to you regarding the processing and control of your personal data. Except as set out below, we do not share, or sell, or disclose to a third party, any information collected through our platform.

Changes to Privacy Policy

This Privacy Policy will be reviewed and changed from time to time to ensure compliance with DPC standards. We’ll do our best to let you know but please do check back periodically for updates.

Nevertheless, we will continue to improve our methods of communication while adding new functionalities and features to our Platform and existing services to serve you better. These ongoing changes may require changes in the law and the evolving nature of technology; our data protection practices will change from time to time. When our data protection practices change, we will update this Policy to describe our new practices and publish them on our website and applications.

Scope of This Policy

This policy applies to:

• Users of the Base Community App
• User interaction and community engagement
• Individuals interacting with our services
• Participants in community, research, surveys, digital activities, or engagement programs

4. What Information We Collect

We collect different types of information depending on how you use our Services.

4.1 Personal Information

We may collect:

• Full name
• Email address
• Phone number
• Date of birth
• Gender
• Profile information (username, preferences, interests)
• Address and location details

4.2 Account & Usage Data

• Login credentials
• Activity logs (interactions, messages, usage patterns)
• Preferences and settings

4.3 Device & Technical Data

• IP address
• Device type, OS, and version
• Unique device identifiers
• Network information (Wi-Fi, mobile network)

4.4 Location Data

With your consent, we may collect:

• Real-time GPS location
• Approximate location via IP

This enables location-based services and recommendations.

4.5 Communication Data

We may collect:

• Messages sent within the platform
• Voice or chat interactions (where applicable)
• Customer support communications

4.6 Payment Information

• Payments are processed via third-party providers
• We do not store full card details
• We may store transaction references and metadata

4.7 Data from Third Parties

We may receive data from:

• Social media platforms (if you connect accounts)
• Partners and service providers
• Analytics providers

4.8 Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Improve user experience
• Analyze usage patterns
• Enable certain features

5. How We Use Your Data

We only send you promotional emails if you have explicitly opted in. We do not sell, rent, or share email addresses, and we never will. We will only share personal information when required by law (e.g., if subpoenaed to do so).

We will only pass your data on to third parties if you have explicitly agreed that we do so. The reason we collect information like email addresses is to provide you with a better service. For example, we need some personal details to do the following:

• Provide and manage your account
• Facilitate services and interactions
• Communicate updates and support
• Prevent fraud and ensure security
• Comply with legal obligations
• Process and facilitate payment for services provided on our platform.
• Verify your identity for security purposes
• To improve our service
• Technical support (e.g., if you are experiencing problems that we can’t replicate)
• User newsletters (you only receive this if you opt in to receive it)
• To customise your user experience
• We use non-identifying and aggregate information to better design our platform and to share with advertisers. For example, we may tell an advertiser that X number of individuals visited a certain area on our website. Or that Y number of men and Z number of women filled out our registration form, but we would not disclose anything that could be used to identify those individuals.
• Comply with all applicable laws and regulations.
• Develop, improve, enhance, modify, add to and further develop our services.
• Provide customer support services, including responding to your enquiries or complaints.
• Conduct customer surveys and research & development activities.
• Fulfil our obligations or claim our rights in legal proceedings.
• Use or disclose it as otherwise authorised or permitted by law.
• Contact you at any time through your provided telephone number, email address or other contact.
• For any other purpose with your consent.

6. Data Sharing

We do not sell your personal data.

We may share data with:

• Service providers (hosting, analytics, payments)
• Business partners you interact with
• Regulatory authorities when required

7. International Data Transfers

Your data may be transferred outside Ghana.

Where this occurs, we ensure safeguards in line with the Data Protection Act, 2012 (Act 843) and global best practices.

8. Data Security

We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

We implement:

• Encryption and secure storage
• Access controls
• Monitoring systems

9. Personal Information

When you create an account on our platform, or otherwise agree to our terms and conditions, a contract is formed between you and us. To carry out our obligations under that contract we must process the information you give us. Some of this information may be personal information.

If you have previously agreed to us using your personal information for marketing purposes, you may change your mind at any time by contacting us. If you believe that any information we are holding on you is incorrect or incomplete, please contact us immediately. We will promptly correct any information found to be incorrect.

We process this information on the basis there is a contract between us, or that you have requested we use the information before we enter a legal contract.

We shall continue to process this information until the contract between us ends or is terminated by either party under the terms of the contract.

• Collecting your personal information

We collect your personal information when you:

• Register for a specific product or service (such as registering your name, phone number, email address and physical address details for any of our services).
• Subscribe to newsletters or other services from us.
• Ask us for more information about a product or service or contact us with a question or complaint.
• Take part in a survey.
• Use our website and other services.
• Visit or browse our website or other platforms.
• With your permission or consent and/or as permitted by law, we may also collect information about you from other organizations or third parties if this is appropriate and allowed by law. These include fraud-prevention agencies, business directories, and credit reference agencies.
• Data we process

We may collect, use, store and transfer different kinds of personal data about you. We have collated these into groups as follows:

• Your identity includes information such as first name, last name, title, date of birth, and other identifiers that you may have provided at some time.
• Your contact information includes information such as billing address, email address, telephone numbers and any other information you have given to us for the purpose of communication or meeting.
• Your financial data includes information such as your bank account and payment card details.
• Transaction data includes details about payments or communications to and from you and information about products and services you have purchased from us.
• Technical data includes your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Your profile includes information such as your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
• Marketing data includes your preferences in receiving marketing from us; communication preferences; responses and actions in relation to your use of our services.
• We may aggregate anonymous data such as statistical or demographic data for any purpose. Anonymous data is data that does not identify you as an individual. Aggregated data may be derived from your personal data but is not considered personal information in law because it does not reveal your identity. For example, we may aggregate profile data to assess interest in a product or service.
• However, if we combine or connect aggregated data with your personal information so that it can identify you in any way, we treat the combined data as personal information, and it will be used in accordance with this privacy notice.
• If you do not provide personal information, we need
• Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform that contract. In that case, we may have to stop providing a service to you. If so, we will notify you of this at the time.
• The law requires us to determine under which of six defined bases we process different categories of your personal information, and to notify you of the basis for each category.
• If a basis on which we process your personal information is no longer relevant, then we shall immediately stop processing your data.
• If the basis changes, then if required by law, we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information.

10. Information we process with your consent

• Through certain actions when otherwise there is no contractual relationship between us, such as when you browse our website, sign up, or ask us to provide you more information about our business, including our products and services, you provide your consent to us to process information that may be personal information.
• Wherever possible, we aim to obtain your explicit consent to process this information, for example, by asking you to agree to our use of cookies.
• If you have given us explicit permission to do so, we may from time to time pass your name and contact information to selected associates whom we consider may provide services or products you would find useful.
• We continue to process your information on this basis until you withdraw your consent, or it can be reasonably assumed that your consent no longer exists.
• You may withdraw your consent at any time by contacting us at:- info@issakaai.com If you do so, you may not be able to use our website or our services further.

11. Information we process for the purposes of legitimate interests

We may process information on the basis there is a legitimate interest, either to you or to us, of doing so. Where we process your information on this basis, we do after having considered:

• whether the same objective could be achieved through other means.
• whether processing (or not processing) might cause you harm.
• whether you would expect us to process your data, and whether you would, in the round, consider it reasonable to do so. For example, we may process your data on this basis for the purposes of:
• record-keeping for the proper and necessary administration of our business.
• responding to unsolicited communication from you to which we believe you would expect a response.
• protecting and asserting the legal rights of any party.
• ensuring against or obtaining professional advice that is required to manage business risk.
• protecting your interests where we believe we have a duty to do so

12. Information we process because we have a legal obligation

Sometimes, we must process your information to comply with a statutory obligation. For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order. This may include your personal information.

• Complaints regarding content on our website
• If you complain about any of the content on our website, we shall investigate your complaint.
• If we feel it is justified or if we believe the law requires us to do so, we shall remove the content while we investigate.
• Free speech is a fundamental right, so we must make a judgement as to whose right will be obstructed: yours, or that of the person who posted the content that offends you.
• If we think your complaint is vexatious or without any basis, we shall not correspond with you about it.
• Information relating to your method of payment:
• Payment information is never taken by us or transferred to us either through our website or otherwise. We never have access to it.
• At the point of payment, you are transferred to a secure page on the website of a third-party payment system, a reputable payment service provider. That page may be branded to look like a page on our website, but it is not controlled by us.

13. Affiliate and business partner information

• This is information given to us by you in your capacity as an affiliate of us or as a business partner.
• It allows us to recognise visitors that you have referred to us, and to credit to you commission due for such referrals. It also includes information that allows us to transfer commission to you.
• The information is not used for any other purpose.
• We undertake to preserve the confidentiality of the information and of the terms of our relationship.
• We expect any affiliate or partner to agree to reciprocate this policy.

14. External Links

Our website may include links to third-party websites and services that are not operated by Base. These links are provided solely for your convenience and do not constitute an endorsement or imply any affiliation with the linked sites or their operators. While we take reasonable care in sharing such links, accessing them is entirely at your own discretion. Base makes no guarantees regarding the accuracy, completeness, reliability, or quality of the content or services provided through these third-party sites. We do not control their content or data practices and assume no responsibility for them. We strongly recommend reviewing the privacy policies of any third-party site before using it or sharing personal information.

15. Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. They enable websites to remember your preferences and actions across pages and visits, providing a more personalized experience and helping website owners understand user behavior for improvements.

Cookies can be temporary (deleted when you close your browser) or persistent (remaining until manually deleted or they expire). Most browsers allow you to manage or disable cookies as you choose. Our website uses cookies placed by us and by trusted third-party service providers. If you disable cookies, some features of our website may not function properly. We use cookies to:

• Track your usage of our website.
• Record your interaction with specific on-site messages.
• Keep your signed in.
• Save your responses to surveys or forms while in progress.
• Maintain the conversation history during live chat sessions.
• If you have consented to the use of cookies, you may also see advertisements for our services on other websites based on your browsing activity.

16. Information we obtain from third parties

We may feature or offer products and services from third-party providers on our Platform. These third-party sites operate independently and have their own privacy policies. While we do not share your personal information with third parties (except as outlined in this notice), we may receive data from them that is indirectly derived from your personal information through the services we use. As a result, we are not responsible for the content or activities of these linked websites. However, we remain committed to maintaining the integrity of our Platform and welcome your feedback regarding these third-party sites.

We also engage with users via third-party platforms such as Facebook, Instagram, TikTok, YouTube, and X (Twitter) to share interactive content and build connections. We strongly encourage you to review the terms, conditions, and privacy policies of these platforms, as they may handle your personal information differently than Base does. To help protect your privacy, we recommend contacting such platforms through private messages, email, or customer service hotlines when sharing personal information.

17. Location Services

When you use our platform, we may request access to your device's location. Enabling location services is necessary for us to deliver our Services effectively. You can manage or update your location settings at any time through your device's settings. Once permission is granted, we may determine your location using your IP address, GPS, and other sensors essential to providing our Services.

We may also collect Wi-Fi metadata from your device, such as whether it's Wi-Fi and GPS enabled and connected, its Media Access Control (MAC) address, the Service Set Identifier (SSID) and signal strength of nearby Wi-Fi networks, your device’s GPS position relative to those networks, and the time this data was captured. This information helps us recommend service providers located closest to you.

18. Personal identifiers from your browsing activity

Requests by your web browser to our servers for web pages and other content on our website are recorded. We record information such as your geographical location, your Internet service provider, and your IP address. We also record information about the software you are using to browse our website, such as the type of computer or device and the screen resolution. We use this information in aggregate to assess the popularity of the web pages on our website and how we perform in providing content to you. If combined with other information we know about you from previous visits, the data possibly could be used to identify you personally, even if you are not signed in to our website.

19. Communication

We may invite you to participate in optional surveys to help us better understand and enhance our Services. If you choose to take part, we may collect demographic details such as your age, marital status, ethnicity, profession, and income; some of which may be considered sensitive information. We may also gather insights into how you use our Services and your overall experience. By completing a survey, you agree to the collection and use of the information you provide in line with this privacy notice.

20. Our use of re-marketing and Direct marketing

Re-marketing involves placing a cookie on your computer when you browse our website to be able to serve to you an advert for our products or services when you visit some other website. We may use a third party to provide us with remarketing services from time to time.

We may occasionally contact you with updates, promotional offers, and relevant information about point-to-point restaurants or services provided by Base and our partners. By choosing to subscribe to marketing communications, you consent to receiving such messages via telemarketing, email, SMS, and other digital channels.

If you no longer wish to receive marketing communications from us, you can opt out at any time by clicking the “Unsubscribe” link in our emails or by contacting us directly via email. Please note that even if you opt out of marketing messages, we may still send you non-promotional communications such as booking confirmations, transaction receipts, or service-related notices.

21. Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes.

22. Access to your personal information

At any time, you may review or update personally identifiable information that we hold about you, by signing in to your account on our website. To obtain a copy of any information that is not provided on our website you should contact us to make that request. After receiving the request, we will tell you when we expect to provide you with the information, and whether we require any fee for providing it to you.

23. Removal of your information

If you wish us to remove personally identifiable information from our website, you should contact us to make your request. This may limit the service we can provide to you.

24. Verification of your information

When we receive any request to access, edit or delete personal identifiable information we shall first take reasonable steps to verify your identity before granting you access or otherwise taking any action. This is important to safeguard your information.

25. Your Data Rights and Requests

Under the Ghana Data Protection Act, 2012 (Act 843), you have the right to:

• Under applicable data protection laws, you have the right to access, correct, amend, delete, or object to the processing of your personal information.
• You may submit requests regarding your personal information held by us, including:
• Confirmation of whether we hold your personal information.
• Access to your personal information, subject to compliance with the Freedom of Information Act and other applicable laws.
• Correction or updates to your personal information.
• Anonymization, blocking, or erasure of data are no longer necessary for service delivery or business operations.
• Data portability in certain cases, we may, upon request, provide your personal information to you or a third-party service provider in a structured, machine-readable format, subject to legal requirements.
• Deletion of personal information where processing is based on consent, unless exceptions apply (e.g., legal obligations requiring retention)
• Revocation of consent where we rely on it to process your data.
• To make any of the above requests, you may contact us via email or by completing our Data Subject Request Form. We may require valid identification to verify your identity before fulfilling your request.
• We aim to respond to requests as promptly as possible. If we cannot comply (e.g., due to legal restrictions), we will notify you accordingly.
• Where a request involves information containing third-party personal data, confidential information, or proprietary content (e.g., transcripts or call recordings), we reserve the right to redact such information. You must keep any shared information confidential and refrain from publishing it (e.g., on social media) without our prior written consent.
• Users may delete their accounts directly through the Base application. Upon account deletion, your personal data will be handled in accordance with our Data Retention Policy.
• We may retain your personal data after a deletion request under the following conditions:
• Unresolved issues relating to your account (e.g., outstanding credit, claims, or disputes)
• Compliance with applicable laws or regulations.
• Legitimate business interests (e.g., fraud prevention, user safety, or security).
• When personal data is no longer required, we will take appropriate steps to delete or de-identify it from our systems.
• To exercise your rights: info@issakaai.com

26. Retention period for personal data

Except as otherwise mentioned in this privacy notice, we keep your personal information only for as long as required by us:

• to provide you with the services you have requested.
• to comply with other laws, including for the period demanded by our tax authorities.
• to support a claim or defence in court.
• Subject to the provisions of the Data Protection Act, 2012 (Act 843), seven (7) years after the last active use of our digital platform.
• Upon presentation of evidence of death by a deceased’s relative, personal information of such User would be discarded.
• Upon request by the User of or his/her legal guardian where no statutory provision states otherwise and such User is not the subject of an investigation or suit that may require retention of the personal information sought to be deleted.

27. Compliance with the law

This Notice is issued in accordance with the Ghana Data Protection Act, 2012 (Act 843), and all other applicable data protection laws and regulations in Nigeria. In the event of any conflict between this Notice and any applicable law, regulation, or convention, the provisions of the overriding legal instrument shall prevail.

This Notice is governed by the laws of the Republic of Ghana. It applies to all users of Base’s services, as well as any individuals who contact or submit personal information to Base.