Privacy notice
This notice explains what we collect, why, and how you stay in control.
The essentials
- We only collect what is necessary to pay you or get you paid.
- Your data is encrypted and access is strictly controlled.
- You can view, correct or delete your data at any time.
- Questions? Write to dpo@aywa.finance.
Who is responsible for your data
The data controller is Aywa, operating through its local entities Aywa Sénégal and Aywa Côte d'Ivoire.
For any question about your data, contact our data protection officer: dpo@aywa.finance.
The data we collect
- Professional identity and contact details: name, role, company, email, phone.
- Information relating to transport and payment operations.
- Strictly necessary technical connection data (logs, security) — see our cookie policy.
Why we collect it
- To run the service: advancing carrier payments, invoicing shippers, tracking operations.
- To meet our legal and regulatory obligations (anti-money laundering, accounting).
- To improve the quality of the service and the user experience.
Who it is shared with
- Our banking and payment partners, strictly within the limits of the operation to be executed.
- Our technical processors (hosting, email, anti-fraud), bound by confidentiality clauses.
- The competent authorities where the law requires it.
- No sale or transfer to third parties for commercial purposes.
How long we keep it
- Operational data: the applicable statutory accounting and tax retention period (10 years).
- Prospect and contact data: 3 years after the last exchange, unless you request deletion.
- Technical logs: 12 months maximum.
Your rights
- Access: obtain a copy of the data we hold about you.
- Rectification: correct inaccurate data.
- Deletion: request erasure of your data, within the limits of our legal retention obligations.
- Objection: refuse certain processing (marketing, for example).
- Portability: receive your data in a reusable format.
To exercise these rights: dpo@aywa.finance. Reply within 30 days.
How your data is protected
- Encryption in transit (TLS 1.3) and at rest.
- Access strictly limited to authorised people, with traceability of every lookup.
- Strong authentication on administrator accounts.
- Regular security testing and an incident response plan.
Applicable legal framework
The processing of personal data collected through this site complies with Senegal's Law No. 2008-12 of 25 January 2008 and Côte d'Ivoire's Law No. 2013-450 of 19 June 2013 on the protection of personal data.
Complaints
If you believe your rights are not being respected, you can lodge a complaint with the Commission de Protection des Données Personnelles (CDP) in Senegal, or the Autorité de Régulation des Télécommunications/TIC (ARTCI) in Côte d'Ivoire.
Changes to this notice
We may update this notice. The date at the top of the page reflects the latest revision. For significant changes, we will notify you by email or directly on the site.
Contact
Any question? dpo@aywa.finance