Data Protection (Ghana Act 843)

Last updated — this draft awaits legal review before launch

Our commitments

• Lawful, fair, and transparent processing of personal data.
• Collection limited to what is required for the marketplace to function.
• Accurate data: you can correct your profile information at any time.
• Retention only as long as needed for the contracted purpose, plus statutory minimums.
• Security commensurate with risk: TLS in transit, AES-256 at rest, least-privilege access.
• Your rights to access, correct, export, and delete are honoured promptly.

Cross-border transfers

Primary data is held in African cloud regions (AWS Cape Town by default). Cross-border transfers happen only to processors with equivalent protections in place, with appropriate safeguards as required by Act 843.

Incident response

We maintain a documented incident response plan with a four-hour internal response SLA for critical security events. Material incidents affecting personal data are reported to the Data Protection Commission and to affected users within the statutory timeframe.

Our Data Protection Officer

Contact: dpo@afrixolve.com.