1. Introduction & Scope

At Hiraki Digital ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy informs you how we look after your personal data when you visit our website or engage our services and tells you about your privacy rights and how the law protects you.

This policy is designed to comply with the Ghana Data Protection Act, 2012 (Act 843) and international best practices for data transparency.

2. The Data We Collect

We collect and process different types of personal data depending on your interaction with us:

• Identity Data: Includes first name, last name, and company name.
• Contact Data: Includes email address, phone numbers, and physical business addresses.
• Technical Data: Includes IP address, browser type and version, time zone setting, location, and operating system.
• Usage Data: Includes information about how you use our website, products, and services.
• Marketing Data: Includes your preferences in receiving marketing from us and our third parties.

3. Legal Basis for Processing

We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

• To perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation in Ghana.

4. Data Sharing and Transfers

We do not sell your personal data. We may share your information with trusted third-party service providers (such as hosting providers or CRM tools) solely to the extent necessary for them to provide their services to us.

Any third parties are required to respect the security of your personal data and to treat it in accordance with the law.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, and contractors who have a business "need to know."

6. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

7. Your Rights (Act 843)

Under the Data Protection Act, 2012, you have rights including:

• Right to Access: You can request a copy of the data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: You can ask us to delete your data where there is no good reason for us continuing to process it.
• Right to Object: You can object to processing of your data for direct marketing.
• Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.