Privacy

1. Who is responsible

Smass Global is the data controller for the personal data described here. It handles personal data in line with Ghana's Data Protection Act, 2012 (Act 843) and its principles: accountability, lawfulness, a stated purpose, limited collection, quality, openness, security and your participation.

The directors of Smass Global act as data protection officers. Write to hello@smassglobal.com.

2. What is collected

• Enquiries. If you use the contact form, Smass Global receives your name, your email address, any company name you give, and your message. The website does not store them: the form sends them to the company by email, and nothing is kept on the website itself.
• Email you send. If you write to the company, it keeps your message and your email address.
• Analytics, only if you accept. If you accept analytics cookies, Google Analytics collects information about how the site is used, such as the pages viewed and your approximate location. If you decline, it is not loaded.
• Technical records. The servers that deliver the site keep ordinary access records, such as IP address and time, for security and reliability.
• Choices kept in your browser. The site stores your theme and your cookie choice in your own browser. These are not sent to Smass Global. See the cookie policy.

3. Why it is used

• To reply to your enquiry and to discuss work with you. This is necessary to take the steps you ask for, and is in the company's legitimate interest in answering business enquiries.
• To keep a record of business correspondence. This is in the company's legitimate interest.
• To understand how the site is used. This is based on your consent, which you can withdraw at any time.
• To keep the site secure and working. This is in the company's legitimate interest.

Smass Global does not sell personal data and does not use it for advertising.

4. Who receives it

The two founders, and anyone they authorise to deal with enquiries. Smass Global also uses service providers, who may process the data only to provide their service:

• an email delivery service, which carries messages from the contact form to the company
• Google, which provides analytics where you have accepted them

Personal data is disclosed to authorities only where the law requires it or allows it. If Smass Global is sold or merges, personal data may move to the new owner, who must keep to this policy.

5. Transfers outside Ghana

Smass Global's service providers may be outside Ghana. The email delivery service that carries contact-form messages, and Google, which provides analytics where you accept them, may process data in other countries. Smass Global uses providers that protect personal data to a standard comparable to Ghana's Data Protection Act, 2012, binds them by contract, and shares only what each one needs.

6. How it is protected

• The site is delivered over an encrypted connection (HTTPS).
• The contact form has protections against automated abuse.
• The website keeps no database of enquiries or of the people who write.
• Access to enquiries, which arrive by email, is limited to the people who need it to respond.

No system is completely secure. If a breach affects your personal data, Smass Global will tell you and the Data Protection Commission where the law requires.

7. How long it is kept

An enquiry arrives as an email and is kept in the company's email for as long as needed to answer it and to keep a business record. If an enquiry becomes a project, the records of that project are kept under the company's records procedure, which keeps signed contracts for at least six years after the engagement ends. Analytics data is kept for the period set in the company's analytics account. You may ask for your enquiry to be deleted at any time, except where the company must keep a record under a contract or the law.

8. Your rights

You have the right to:

• Access the personal data Smass Global holds about you.
• Correct data that is wrong.
• Delete your personal data, subject to the section on how long it is kept.
• Object to processing for certain purposes, including analytics.
• Receive your data in a structured, commonly used format.
• Withdraw consent you gave, for example for analytics.

To use any right, write to hello@smassglobal.com. Smass Global will answer within 30 days. You may also complain to the Data Protection Commission of Ghana.

9. Children

The site is for people 18 and over. Smass Global does not knowingly collect personal data from anyone under 18. If you believe a child has given the company data, write to hello@smassglobal.com and it will be deleted.

10. Changes to this policy

Smass Global may update this policy. The date at the top shows the current version.

11. Contact

Smass Global, Amrahia, Accra, Ghana. Email: hello@smassglobal.com.