Privacy Policy

This policy explains how M. Opoku handles personal data when you browse this website, create a customer account, place an order, book an installation, register a device, report a fault, use the chat or contact us by phone, email or WhatsApp.

It covers personal data only. Aggregated or anonymised information that cannot be linked back to an individual is not personal data and is not covered here.

This website does not send email. When we need to reach you about an order or an enquiry, we call or text the phone number you gave us. If you pay online, Paystack may email you a receipt.

We collect only what a transaction or an enquiry genuinely requires. In practice that falls into these groups.

• Identity and contact details: name, phone number, an email address if you give one, and the name of a business if you mention one.
• Your customer account, if you create one: your name, phone number, email address if you give one, and a password. We also record when the account was made, when you last signed in, the last day you used the site while signed in, which orders were placed from it, and whether and when you asked for offers by text or stopped them. Your account pages also list orders placed with the same phone number while you were not signed in. To prove the phone number is yours we text it a six-digit code.
• Delivery details: region, town, area, a landmark for the rider, an optional Ghana Post GPS code, your phone's location if you choose to share it at checkout, and any notes you add to the order.
• Order records: what you bought, when, the prices, how you chose to pay and whether the payment has arrived, the order's status history and, for a delivery, the name of the rider carrying it.
• Installation, repair and device registration forms: what you enter — the device, its serial number, when and where you bought it, the fault you describe, the site address and the visit you would like — reaches us as a message in our enquiry inbox. Photos you pick in the repair form are not uploaded; we ask for them separately if we need them.
• Enquiries and chat: the name, phone number and message you send through a form on this site, the messages you write in the chat with a name and number if you give them, and our replies.
• Repairs booked in at the shop: the repair ticket holds your name, phone number, an email address if you give one, the device, its serial number, the fault, our notes, the quote and the amount charged, the technician working on it, and the dates its status changed.
• Installation jobs: when we book or carry out an installation, the job record holds the address, the date, the technician, notes, a checklist and photographs taken on site.
• Our own notes: our staff can give a customer a reference number, tags and notes, kept against the phone number.
• Text message log: for each text we send, the kind of text, whether it went, and the phone number with all but its last four digits hidden. Never the text itself.
• Website use: Cloudflare, which hosts this site, handles your IP address and browser details to deliver pages and keep the site secure, and keeps logs of requests — which can include the page address and your IP address — that we read to find faults. To stop password guessing and floods of texts, each sign-in attempt and code request is counted against the phone number and the IP address it came from, and each request to stop offers against the IP address. We do not run analytics or advertising tools.

The assistant on this site answers from the site's own rules and our catalogue; what you type to it is not sent to an outside AI service. We do not save what you type to it in our records.

We do not collect special category data, and we do not ask for it. Please do not send us identity documents, medical information or anything similar unless we have specifically explained why it is needed.

Card numbers, CVVs and mobile money PINs are never seen or stored by us. When you pay online you enter them on Paystack's own page or approve the payment on your phone, and we receive only Paystack's confirmation.

Each use of personal data has a purpose and a lawful basis behind it.

• To perform a contract: running your customer account, fulfilling orders, texting you about them, arranging delivery, carrying out installations and dealing with faults.
• To meet legal obligations: keeping the accounting and tax records the law requires.
• For legitimate interests: preventing fraud, limiting sign-in attempts and code requests, improving our guides and product range, providing support, and keeping the website secure and working.
• With your consent: your phone's location at checkout, which we receive only if you choose to share it, and offers by text, which we send only if you ticked the box asking for them.

We do not sell personal data, and we do not use automated decision-making that produces legal or similarly significant effects.

These texts are part of the service you asked for. They are not marketing.

• Codes: a six-digit code when you create an account or reset your password. Nobody from M. Opoku will ever ask you for it.
• Order texts, to the phone number on the order: that it is placed and waiting for collection or delivery when you pay on collection or on delivery, that your payment was received when you pay online, and when the order is on its way, ready to collect, delivered, collected or cancelled. They carry your first name, the order reference, the total when the order is placed, the rider's name when it is on its way, and often a link to track it — never a list of what you bought.
• Replies: when we answer an enquiry by text.

We do not send marketing emails. We send offers by text only to customers with an account who ticked the box asking for them, when they created the account or later in the account pages. The box is never ticked for you, and placing an order, sending an enquiry or using the chat does not sign you up.

Offers go only to customers we have not heard from for a while: no order, enquiry or signed-in visit for 60 days, unless we change that period. After an offer you will not get another for at least that long, and offers are sent only between 8am and 7pm, Monday to Saturday, Ghana time.

Every offer ends with a link to stop them: mopoku.com/stop. Enter your number there, or switch offers off in your account. Stopping is free, works straight away and changes nothing else about your account or your orders. Our staff can also switch offers off if you ask them; only you can switch them on.

Personal data is shared only where there is a clear reason, and only to the extent needed.

• Riders and couriers: name, address, phone number, a landmark, and the Ghana Post GPS code or map location if you gave one, so the parcel reaches you.
• Installation technicians: name, contact details, site address and notes for the booked job.
• Payment providers: when you pay online, Paystack processes the mobile money or card payment and receives your email address, the amount and the order reference. Paying cash on delivery or at the shop involves no payment provider.
• Text messages: Arkesel, our SMS provider, delivers every text we send. It receives the phone number and the full text of each message, sign-in codes included. What Arkesel keeps about the messages it delivers, and for how long, is set by Arkesel.
• WhatsApp: if you message us on WhatsApp, that conversation is carried by WhatsApp under its own terms.
• Manufacturers or service centres: the serial number and fault description, if a fault has to be referred to them.
• Professional advisers and authorities: where we are legally required to disclose information.
• Anyone holding your order reference: the tracking page shows only progress and the times each stage was recorded. Your name, address, order contents and totals are shown only after you sign in to an account that owns the order or has proved the phone number used for it. Keep the reference to yourself.

This website and the records it keeps are hosted by Cloudflare, which stores and processes data outside Ghana.

This site keeps cookie use to a minimum. Most of what it remembers is kept in your browser's local storage rather than in cookies, which means it stays on your device and is not sent to us.

• Chat: if you use the chat, a cookie holding a random code lets this browser find your conversation again. It lasts a year and contains nothing else. If you clear it, this browser can no longer show the conversation, though our copy of the messages remains.
• Customer sign-in: when you sign in to your account, a cookie holding a random code keeps this browser signed in for 30 days or until you sign out. We store only a scrambled form of that code. While you create an account or reset a password, a second cookie links the texted code to this browser; it lasts 15 minutes.
• Staff sign-in: a separate cookie that keeps our own staff signed in to the shop's management pages.
• Stored locally in your browser: your basket, wishlist, comparison list, recent searches and recently viewed products, and what the account pages keep on this device — your name and contact details, saved addresses, and copies of your orders, bookings, registered devices and support requests. These copies are not part of your customer account. What reaches us is what you submit in an order, a form, your account or the chat; the booking, repair and registration forms also send us their details as a message.
• Analytics and advertising: none. This site sets no analytics or advertising cookies.

You can clear local storage and cookies through your browser settings at any time. Doing so empties your basket, comparison list and the account pages on that device, because that information lives only there.

We have not yet set fixed periods for keeping records. Until we do, this is what actually happens, and this section will be updated when the periods are set.

• Orders and payment records: kept. Nothing deletes them automatically.
• Enquiries, our replies, chat conversations, repair tickets, installation jobs, our notes about customers and the text message log: kept. Nothing deletes them automatically.
• Customer accounts: kept until you ask us to close yours. There is no button to delete an account, either in the account pages or in our staff tools, so it is done on request. How we check that a request comes from the account holder, and how soon the account is then deleted, have not been published yet: ask us and we will tell you. Deleting it signs you out everywhere and removes your offers settings with it. Orders placed from it stay in our order records, with the name and phone number given on them, no longer linked to an account. If you want other records about you removed as well, say so and we will tell you what we can remove.
• Sign-in and codes: a sign-in stops working after 30 days or when you sign out, and expired sign-ins are cleared out as new ones are made. A texted code stops working after 15 minutes or once it is used; its record, with any registration details waiting on it, is cleared once it is more than a day past expiry, the next time a code is sent. Counts of sign-in attempts, code requests and requests to stop offers start again after between a minute and a day.
• Marketing consent records: when you asked for offers and, if you stopped them, when you did, kept with your account so we can show you agreed and so we do not text you again after you stop.
• Cloudflare's request logs: kept by Cloudflare for the limited period its logging service holds them.
• Your browser: what is stored there stays until you clear it.

The shop's management tools need a staff sign-in, and each staff account has a role that limits what it can see and change. Pages are served over an encrypted (HTTPS) connection. Customer passwords are kept only as a one-way hash, and the codes in sign-in cookies and texted codes only in a scrambled form, so none of them can be read back from our records.

No system is perfectly secure, and anybody who tells you otherwise is selling something. If you think something is wrong with your account or your data, call or WhatsApp us.

Under Ghana's Data Protection Act you have rights over your personal data, and we will not make it difficult to use them.

• Access: ask for a copy of the personal data we hold about you.
• Correction: have inaccurate or incomplete data put right. You can change your name and email in your account pages; ask us for anything else.
• Erasure: ask us to delete data we no longer have a lawful reason to keep. This is done on request, as described under How long we keep it.
• Objection and restriction: object to processing based on legitimate interests, or ask us to pause it while a question is resolved.
• Withdraw consent: stop offers at any time at mopoku.com/stop or in your account, with no effect on anything else.
• Complain: to us first if you can, and to the Data Protection Commission if we have not put things right.

To exercise any of these, contact us using the details below. We will ask enough to confirm your identity — sending someone else's data to whoever asks for it would be its own privacy failure — and reply as soon as we can.

This site is aimed at adults buying connectivity equipment, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

We will update this policy when our practices change. The last-updated date at the top of the page reflects the most recent revision, and material changes will be pointed out on this page rather than made quietly.

The most recent change set out what the site actually keeps and for how long, how a customer account is deleted on request, what the tracking page shows, and what our text message provider Arkesel receives.