Privacy Policy

#1. Who we are

This Privacy Policy describes how LE BONCOURSIER, a limited liability company (SARL) with a share capital of 1,000,000 CFA francs, registered with the Abidjan Trade and Personal Property Credit Register under number CI-ABJ-03-2025-B12-04021, with its registered office at Port-Bouët, Gonzague, near Pharmacie ELIOMA, Abidjan, Côte d'Ivoire (hereinafter "Goplus", "we"), collects, uses, stores and shares your personal data.

It applies to all the services we publish:

• the Goplus mobile application, for sellers, senders and buyers, which includes the Goplus Shop marketplace;
• the Goplus Pro mobile application, for independent couriers and delivery companies;
• the website app.leboncoursier.com, which provides, among other things, public delivery tracking.

Goplus is the data controller for your data. For any question about this Policy or your data:

This Policy supplements the Terms of Use of each service, of which it forms an integral part: Goplus Terms, Goplus Shop Terms, Goplus Pro Terms — Couriers and Goplus Pro Terms — Delivery companies. These documents are published in French.

#2. Legal framework

The processing of your data is governed by Law No. 2013-450 of 19 June 2013 on the protection of personal data in Côte d'Ivoire, its implementing regulations and the decisions of the Telecommunications/ICT Regulatory Authority of Côte d'Ivoire (ARTCI).

When you use our services from another country, we apply the same principles and, where applicable, the data protection rules of that country.

#3. The data we collect

We only collect the data needed to run the services. Depending on the application you use and the features you enable, this covers the following categories.

#3.1 Account and identification data

• your mobile phone number, which serves as your unique identifier and is verified by a one-time code sent by SMS or WhatsApp;
• your first and last name and, where applicable, your email address;
• your profile picture, if you add one;
• your personal code (PIN), which you choose to protect access to the application;
• for a shop: the shop's name, description, logo, address and catalogue;
• for a delivery company: its name, registration details and the identity of the person authorised to represent it.

Biometric unlock (fingerprint, face recognition) is performed by your phone. Your biometric data is never sent to us: we only receive the result of the check performed by your device.

#3.2 Courier verification file (Goplus Pro)

Access to deliveries requires a verification file ("KYC") containing:

• a valid identity document (front and back);
• a recent photograph allowing your identification;
• your driving licence;
• vehicle documents: registration certificate, insurance certificate and roadworthiness certificate where applicable;
• any additional supporting document requested by Goplus or by the delivery company you are attached to.

These documents are reviewed by Goplus and, if you are attached to a delivery company, by that company.

#3.3 Location data

• Goplus: your location is used, while the application is open, to suggest addresses, calculate the price of a delivery, assign a courier and track the delivery. Pick-up and delivery addresses are processed as geographic coordinates.
• Goplus Pro: your location is collected while you are logged in and marked as available, and during the execution of a delivery, including when the application is in the background. It is used to assign deliveries, calculate distances and prices, provide live tracking to the sender and recipient, ensure safety and handle disputes. You can stop collection at any time by marking yourself unavailable or logging out; no delivery can then be assigned to you.

You can withdraw the location permission from your phone settings; some features then become unavailable.

#3.4 Delivery, order and sales data

• pick-up and drop-off addresses, instructions, description and photos of the parcel or items;
• the name and phone number of the recipient that you enter;
• confirmation codes, statuses, timestamps and history of each delivery or order;
• content of orders placed on Goplus Shop, reviews and any disputes;
• activity statistics (completed, cancelled and failed deliveries, delays).

When you enter a recipient's details, you undertake to have informed them that these details are shared with Goplus and the courier.

#3.5 Contacts (Goplus application only)

To let you pick a recipient faster, the Goplus application may, with your permission, access your phone's address book. Only the name and number of the contact you select are sent to our servers, for the delivery concerned. Your address book is neither copied nor stored by Goplus. You can enter a number manually without granting this permission.

#3.6 Photos, videos and voice notes

With your permission, the applications access the camera, the photo library and the microphone so that you can:

• add a profile, shop or product picture;
• upload the documents of your verification file;
• send photos, videos and voice notes in the messaging feature;
• attach a photo to a delivery, where applicable.

We only access these functions at the moment you use them.

#3.7 Messaging

The built-in messaging feature lets the parties to a delivery exchange text messages, photos, videos and voice notes. Messages are ephemeral: they are removed from the interface 72 hours after being sent. An audit copy may be kept beyond that period in the cases set out in Section 7, in particular to handle a dispute.

Messaging is reserved for the needs of the delivery and is not private correspondence: Goplus administrators may access it to handle a dispute, a complaint or a report.

#3.8 Wallet and payments

• movements of your Goplus wallet (top-ups, collections, commissions, transfers, withdrawals), balances and any debts;
• references and amounts of payments made through Wave;
• cash amounts collected by couriers and the related transfers.

Goplus does not collect or store your mobile money credentials or bank card details: payment takes place in the payment provider's application, which only sends us the reference and status of the transaction.

#3.9 Technical data and logs

Each time you use the services, our servers automatically record:

• your IP address, the type and version of your device, operating system and application;
• a device identifier and a notification token used to send you push notifications;
• timestamps and logs of your operations (login, acceptance of the Terms, creation or modification of a delivery, wallet movements, account deletion request).

These elements are recorded server-side and constitute evidence between the parties, in accordance with the Terms of Use.

#3.10 Support communications

When you contact our support by phone, email, WhatsApp or from the application, we keep the content of your exchanges and the documents you send us.

#4. Why we use your data

We do not sell your data and we do not use it for targeted advertising by third parties.

#5. Who we share your data with

#5.1 Other users

Running the service involves sharing certain data between the parties to a delivery or an order:

• the sender or seller and the recipient or buyer see the courier's name, profile picture, phone number and live position during the delivery;
• the courier sees the name, phone number, addresses and instructions of the sender, seller and recipient, to the extent needed for the handover;
• the seller receives the data needed to prepare an order placed on Goplus Shop;
• the delivery company a courier is attached to has access to the courier's file, activity and live position during a delivery;
• anyone holding the tracking link of a delivery can view, on app.leboncoursier.com, the progress of that delivery and the courier's position during the delivery.

These recipients may only use this data to perform the delivery or order concerned.

#5.2 Our technical providers

We rely on providers that process data on our behalf and under our instructions:

These providers only access the data strictly necessary for their task and are bound by confidentiality and security commitments.

#5.3 Authorities

We may disclose your data to judicial, administrative or regulatory authorities where the law requires it, upon a lawful request, or where necessary to establish, exercise or defend a legal claim, in particular in cases of fraud, theft or an offence committed in the course of a delivery.

#5.4 Corporate transactions

In the event of a merger, acquisition, sale of assets or restructuring, your data may be transferred to the acquirer, who will be bound by this Policy.

#6. Transfers outside Côte d'Ivoire

Some of our providers (Google, OneSignal, Twilio) are established or host their infrastructure outside Côte d'Ivoire, in particular in the United States and the European Union. Where data is transferred there, we ensure that the transfer relies on appropriate safeguards, in particular contractual data protection commitments consistent with Ivorian law and ARTCI requirements.

#7. How long we keep your data

At the end of these periods, the data is deleted or anonymised.

#8. How we protect your data

We implement appropriate technical and organisational measures, including:

• encryption of exchanges between the applications and our servers (HTTPS/TLS);
• storage of authentication tokens in your phone's secure storage;
• protection of access to the application by your personal code and, if you enable it, by your device's biometrics;
• access control for our teams on a need-to-know basis;
• security rules restricting access to real-time data to the parties to a delivery only;
• logging of sensitive operations.

You are responsible for keeping your credentials and personal code confidential. Report any unauthorised use of your account to us without delay.

#9. Deleting your account

You can request the deletion of your account directly from the application, in your account settings, or by writing to [email protected]. The request is confirmed by a code sent on WhatsApp.

Deletion requires that no delivery or order is in progress, that your wallet has been emptied by a withdrawal and that no debt remains. For the owner of a delivery company, the request is handled by our team in order to organise what happens to the fleet.

The account is then frozen for 7 days: it becomes inaccessible but can be restored simply by logging in again. At the end of that period, it is irreversibly anonymised: your phone number is detached, your name is replaced by a neutral label, and your documents and photo are deleted. Deliveries, wallet movements and debts already recorded are kept in anonymised form for accounting, evidence and compliance with our legal obligations.

#10. Your rights

In accordance with Law No. 2013-450 of 19 June 2013, you have the following rights:

• access: obtain confirmation that your data is processed and receive a copy of it;
• rectification: have inaccurate or incomplete data corrected;
• erasure: request the deletion of your data, within the limits of Section 7;
• objection: object, on legitimate grounds, to processing based on our legitimate interest;
• restriction: request the temporary suspension of a processing operation;
• withdrawal of consent: at any time, for processing based on consent, in particular by revoking a permission in your phone settings;
• post-mortem directives: decide what happens to your data after your death.

You can exercise these rights by email at [email protected] or by mail at the address given in Section 1. We may ask you to prove your identity. We respond as soon as possible and no later than the time limits set by law.

These rights are exercised subject to our legal retention obligations and our legitimate interest in keeping the elements needed for evidence, fraud prevention and the defence of our rights.

You may lodge a complaint with the ARTCI (Telecommunications/ICT Regulatory Authority of Côte d'Ivoire).

#11. Permissions requested by the applications

Each permission is requested at the moment it becomes necessary. You can refuse or withdraw it at any time from your phone settings.

#12. Minors

Our services are reserved for adults. We do not knowingly collect data about minors. If you believe a minor has provided us with data, write to [email protected] so that we can delete it.

#13. The app.leboncoursier.com website

The website uses no advertising cookies and no audience measurement trackers. The delivery tracking page loads third-party resources (Google Maps tiles, web fonts, Firebase services) that may receive your IP address on that occasion. Payment return pages and tracking pages are not indexed by search engines.

#14. Changes to this Policy

We may amend this Policy to reflect changes in our services or in regulations. The version in force is always published at https://app.leboncoursier.com/privacy-policy, with its effective date. In the event of a substantial change, we will inform you by a notification in the application or by any other appropriate means.

In the event of any discrepancy between this English version and the French version, the French version prevails.

#15. Contact