Legal · Act 843
Privacy Notice
How we collect, use, and protect your personal data — in line with Ghana's Data Protection Act, 2012 (Act 843).
Last updated: 29 May 2026. This notice explains how MojoHealth processes personal data as a data controller registered with the Data Protection Commission.
What we collect
- Identity data verified via your Ghana Card and the National Identification Authority.
- Contact and demographic details (name, phone, email, region, district).
- Cover, policy, and dependant information.
- Health and claims data necessary to administer your cover.
- Payment and transaction data processed through MojoPay.
How your Ghana Card is handled
We never store your Ghana Card number in the clear. It is converted to a secure, salted hash used only to prevent duplicate enrolment and verify identity. The raw number is not retained.
Lawful basis & use
We process data to provide and administer your insurance cover, adjudicate and settle claims, meet regulatory obligations (NHIA, HeFRA), and prevent fraud. We rely on your consent, the performance of your cover contract, and our legal obligations.
Sharing
We share data only as necessary with HeFRA-licensed providers delivering your care, payment partners, regulators where required, and processors bound by confidentiality. We do not sell your data.
Retention
We retain records for the periods required by law, regulation, and contract — and apply legal holds where applicable. Data is then securely deleted or anonymised.
Your rights
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Object to or restrict certain processing.
- Lodge a complaint with the Data Protection Commission.
Contact
For privacy requests, contact privacy@mojohealth.gh.