Privacy Policy

We collect only the information necessary to provide efficient freight forwarding, assisted procurement, customs clearance, and shipment tracking services:

• Identity Data: Full legal name, date of birth, government-issued identification number (Ghana Card number, Passport number) required for customs clearance and statutory anti-fraud compliance.
• Contact Data: Verified telephone number, email address, physical delivery address, destination city, and regional warehouse dispatch preferences.
• Trade & Shipment Data: Product descriptions, commercial invoices, packing lists, supplier links (e.g. 1688, Taobao, Alibaba), purchase order numbers, package dimensions, weights, and customs HS code declarations.
• Technical & Telemetry Data: IP address, browser type, device identifiers, login timestamps, and audit log entries generated when accessing our portals.

Your information is processed under legitimate commercial and legal bases to:

• Create and manage your unique overseas shipping marks for our consolidation hubs in China, the USA, and Turkey.
• Execute international air cargo waybills, ocean bills of lading, and delivery manifests.
• Liaise with the Ghana Revenue Authority (GRA) Customs Division through the Integrated Customs Management System (ICUMS) for duty assessments and regulatory cargo clearance.
• Execute assisted procurement transactions with verified international suppliers on your behalf.
• Send transactional notifications regarding cargo arrival, warehouse free days, and delivery schedules via SMS, WhatsApp, and email.
• Prevent cyber fraud, unauthorized account takeover, and illicit contraband shipping.

To move physical freight across international borders, KeySource Logistics must share necessary shipment and consignee details with vetted commercial partners:

KeySource Logistics does not store full credit card numbers, debit card CVVs, or mobile money PINs on our servers.

All digital transactions are processed securely through Paystack Payments Limited, a certified PCI-DSS Level 1 Service Provider regulated by the Bank of Ghana. Payment credentials are tokenized and encrypted directly by the payment processor. KeySource retains only payment reference tokens, transaction amounts, and timestamps for accounting and reconciliation audits.

We employ defense-in-depth security architecture to safeguard your personal and enterprise data:

• Row-Level Security (RLS): Database architecture strictly isolates organization data so no user or entity can view another client's trade records or invoices.
• Transport Layer Security: All web traffic and API endpoints enforce TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS).
• Multi-Factor Authentication (MFA): Two-factor TOTP authentication is available for all accounts and enforced for administrative access to the logistics command center.
• Audit Trails: Every critical account event (login, password reset, role modification, payment authorization) is logged to immutable security audit trails.

We use secure, HTTP-only cookies and cryptographic session tokens strictly necessary to maintain your authenticated login session, preserve your active organization workspace, and prevent Cross-Site Request Forgery (CSRF). We do not deploy third-party advertising tracking cookies across external websites.

Under Ghanaian statutory trade and taxation laws (Customs Act, 2015 and Revenue Administration Act, 2016), commercial freight forwarders are legally obligated to retain customs entry manifests, commercial invoices, and tax records for a statutory period of six (6) years.

For non-statutory personal data, you may request account closure and data anonymization at any time by contacting our privacy team. Upon processing, marketing preferences are terminated immediately, and access credentials are permanently revoked.

Under the Ghana Data Protection Act, 2012 (Act 843), you have the right to:

• Right of Access: Request confirmation and an electronic copy of all personal data held about you.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete profile information.
• Right to Object: Object to processing of personal data for direct marketing communications.
• Right to Lodge a Complaint: File a complaint with the Ghana Data Protection Commission (DPC) if you believe your statutory privacy rights have been infringed.

If you have questions, data access requests, or regulatory inquiries regarding our data handling practices, please contact our designated Data Protection Officer: