Privacy Policy

Last updated 1 November 2026

Who we are

GhanaCarHire (ghanacarhire.com) is a directory of car hire & rental, chauffeur and airport-transfer firms in Ghana. We are the data controller for the personal information described here, under Ghana’s Data Protection Act, 2012 (Act 843). For any privacy question or request, email [email protected].

We don’t take bookings or payments for rentals. When you hire a car, your contract is with the firm, and the firm is responsible for how it uses your details.

What we collect and why

Enquiries to firms. When you send an enquiry we collect your name, email address and/or WhatsApp or phone number, pickup and drop-off place, dates, number of passengers, the service you want and your message. We use them to pass your enquiry to the firm or firms you chose, send you a confirmation email and keep a copy so we can deal with problems. About 7 to 30 days later we may send you one email asking you to review the firm. Every such email has an unsubscribe link.

Reviews. To leave a review you give your name, a rating, your review and the email or phone number you used for your enquiry, so we can match the review to a real enquiry. Your name, rating and review are published on the firm’s page after we check them. Your email and phone number are not published.

Contact form and scam reports. We collect your name, email address and message (and, for a scam report, the details you give us) so we can reply and investigate.

Firm owners. If you list or claim a firm we collect your name, business details, email address and phone or WhatsApp number. You sign in with a one-time code sent to your email address. If you apply for the Verified badge we collect copies of your business registration, the owner’s Ghana Card or passport, and vehicle insurance. These copies are kept private and are never shown on the listing. If you pay for a Featured placement or verification by bank transfer, we keep a record of the plan, amount, date and payment reference. We don’t collect card details.

Firm tools. Firms can use their dashboard to create invoices, receipts and rental agreements, and to track bookings. These may contain their customers’ names, contact details, ID details and signatures. We store this information for the firm, and the firm decides what goes in it. When a customer signs a document online we record the name they type, the time and a one-way hash of their IP address. Verified and Featured firms can also file private warnings about customers (for example unpaid hire or a car not returned). A warning includes the customer’s phone number and, if given, email address. Warnings are checked by us before they go live, are never public, can be searched only by other Verified and Featured firms, and expire after 12 months unless renewed. Every search is logged.

Listing statistics. We count profile views and clicks on a firm’s WhatsApp, phone and email buttons so firms can see how their listing performs. We store counts only. To avoid counting the same visitor twice in a day we use a short-lived cookie or a one-way hash of your IP address and browser, which changes every day and is deleted the next day. We don’t use Google Analytics or any other third-party analytics service.

Security and spam protection. Our forms use Cloudflare Turnstile to block bots. We also store a one-way hash of your IP address to limit repeated submissions. Firm photos are checked automatically for unsuitable content using Cloudflare’s AI service.

Server logs. The site is hosted on Cloudflare. Like any web host, Cloudflare processes technical data such as your IP address, browser type and the pages you request, so it can deliver the site and protect it from attacks.

Why we are allowed to use it

Under the Data Protection Act, 2012 (Act 843), we process personal data only for the purposes above and rely on:

your request, to send your enquiry, reply to your message or run your firm account;
our legitimate interests, to run and protect the directory, prevent fraud and scams, publish genuine reviews, produce listing statistics and ask past enquirers for a review;
legal obligations, for example keeping payment records;
your consent, where we ask for it. You can withdraw consent at any time.

Who we share it with

Firms. Your enquiry goes to the firm or firms you send it to. If a firm hasn’t claimed its listing yet, your enquiry is kept and shown to the firm when it claims the listing. Firms then use your details under their own privacy practices.
Service providers who run parts of the site for us: Cloudflare (hosting, database, file storage, Turnstile and AI moderation), Resend (sending email), our email hosting provider (receiving email) and the browser push services that deliver notifications to firm owners who turn them on.
Advertising partners such as Google (see below).
Authorities, if the law requires it or to deal with fraud.

We don’t sell your personal information. Some of our providers process data outside the UK and Ghana, including in the United States.

How long we keep it

Login codes expire after 10 minutes. Firm login sessions last 14 days. Daily statistics keys are deleted after one day. Customer warnings expire after 12 months unless the firm renews them. Shared document links expire after 90 days. We keep enquiries, messages, reviews and firm records only as long as we need them to run the directory and deal with questions or disputes. Verification documents are deleted when a listing is removed. Ask us and we will delete your information unless we must keep it.

Your rights

As a data subject under the Data Protection Act, 2012 (Act 843), you can ask whether we hold personal data about you and for a copy of it, ask us to correct or delete it, and object to how we use it, including for direct marketing. Email [email protected] and we will reply within one month.

If you’re not happy with our answer you can complain to the Data Protection Commission of Ghana (dpc.gov.gh).

Visitors in the UK or EEA also have rights under their local data protection law, and Google’s advertising consent rules apply to them.

Cookies and advertising

Our own cookies are small and few. A sign-in cookie keeps firm owners and our team logged in. A statistics cookie (a random ID that expires at midnight) and a 30-minute QR-scan cookie stop us counting the same visit twice. Your browser also remembers your currency choice. None of these are used for advertising.

We use Google AdSense to show ads. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to this site and/or other sites on the internet.

You can opt out of personalised advertising in Google’s Ads Settings (adssettings.google.com). You can also opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info. Read how Google uses information from sites that use its services.

Changes to this policy

We will update this page if what we collect or how we use it changes, and change the date below.