This Privacy Policy explains how IPAP (Insurance Product Aggregator Platform) operated by Resolut / IPAP ("IPAP", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you use our platform through USSD, web, mobile, agent-assisted, or other supported channels.
By using IPAP, you consent to the practices described in this Privacy Policy.
1. Our Role & Scope
1.1 IPAP is a digital insurance aggregation and enablement platform.
1.2 IPAP is not an insurance company and does not underwrite insurance risk.
1.3 Personal data processed through IPAP supports:
- Insurance onboarding and renewal
- Policy verification (including MID where applicable)
- Premium payments and financing
- Claims notification and facilitation
- Regulatory compliance
2. Data We Collect
We collect only data that is necessary, relevant, and proportionate to provide our services.
2.1 Personal Identification Data
- Full name
- Date of birth
- Gender
- National ID (e.g., Ghana Card) where required
- Phone number
- Email address
2.2 Vehicle & Policy Data
- Vehicle registration number
- Vehicle type and usage
- Insurance policy number
- Policy status, start and expiry dates
- MID verification status (for motor insurance)
2.3 Financial & Payment Data
- Mobile Money wallet number
- Payment transaction references
- Instalment schedules
- Premium financing status
Note: IPAP does not store full card details. Payments are processed through licensed payment service providers.
2.4 Claims Data
- Claim notifications
- Supporting documents and images
- Claim status and payout references
2.5 Technical & Usage Data
- USSD session logs
- Device and browser metadata
- Interaction timestamps
- Support communications (Emails, call logs)
3. How We Collect Data
We collect data through:
- Direct input by users via USSD, web, app, or agents
- Insurer integrations
- Payment service providers
- Claims submissions
4. Purpose of Data Processing
Your personal data is processed to:
- Facilitate insurance purchase, renewal, and servicing
- Enable premium collection and premium financing arrangements
- Verify motor insurance status (including MID verification)
- Facilitate claims notification and tracking
- Process refunds and cancellations where applicable
- Communicate service updates and reminders
- Prevent fraud and misuse
- Meet legal, regulatory, and reporting obligations
5. Legal Basis for Processing
IPAP processes personal data based on one or more of the following lawful grounds:
- Your consent
- Contractual necessity
- Legal and regulatory obligations
- Legitimate business interests, balanced against your rights
6. Data Sharing & Disclosure
We may share your data only with trusted parties, including:
6.1 Insurance Companies
- For underwriting, policy issuance, claims handling, and renewals
6.2 Premium Financing Partner
- Globafin Microfinance Limited, where premium financing or instalment payments apply
- Data shared is limited to what is necessary to manage financing obligations
6.3 Payment Service Providers
- Mobile Money operators
- Licensed payment processors
6.4 Regulators & Authorities
- National Insurance Commission (NIC)
- Motor Insurance Database (MID)
- Law enforcement or regulatory bodies where legally required
6.5 Service Providers
- Hosting, analytics, customer support, and communications partners under strict confidentiality obligations
7. Premium Financing & Loss Payee Data Use
Where a policy is financed:
- Financing status, default information, and refund eligibility may be shared with Globafin
- Unearned premium refunds may be applied toward outstanding obligations
- Data is processed strictly for enforcement of financing and regulatory compliance
8. Data Retention
8.1 Personal data is retained only for as long as necessary to:
- Fulfil contractual and regulatory obligations; and
- Resolve disputes or audits.
8.2 Data may be retained longer where required by law or regulatory directives.
9. Data Security
We implement appropriate technical and organizational safeguards, including:
- Access controls
- Secure hosting environments
- Encryption where appropriate
- Role-based data access
- Monitoring and audit trails
Despite best efforts, no system is completely secure, and IPAP cannot guarantee absolute security.
10. Your Rights
Under Ghana's Data Protection Act, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion where legally permissible
- Withdraw consent (subject to contractual and legal constraints)
- Object to certain processing activities
Requests can be made through IPAP support channels.
11. USSD & Assisted-Digital Privacy
11.1 USSD sessions are session-based and do not permanently store sensitive inputs beyond required transaction records.
11.2 Agent-assisted onboarding follows strict data-handling procedures and training requirements.
12. Cookies & Digital Tracking (Web/PWA)
Where applicable, IPAP may use cookies or similar technologies to:
- Improve platform performance
- Analyze usage trends
- Enhance user experience
You may control cookie settings via your device or browser.
13. Children's Data
IPAP services are not intended for individuals under the legal age to contract insurance. We do not knowingly collect data from minors without lawful consent.
14. International Data Transfers
Where data is stored or processed outside Ghana:
- Appropriate safeguards are implemented; and
- Transfers comply with applicable data protection laws.
15. Changes to This Privacy Policy
IPAP may update this Privacy Policy periodically.
Material changes will be communicated through appropriate channels.
Continued use of IPAP constitutes acceptance of the updated policy.
16. Contact & Complaints
For privacy-related inquiries, requests, or complaints, contact:
IPAP / Resolut
Email: info@ipapglobal.com
If unresolved, you may escalate complaints to the Data Protection Commission of Ghana.