PRIVACY POLICY

1. Introduction

At ShoutGhana (the “Website”, accessible at shoutghana.com), we recognize and respect the importance of your privacy and are committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”). This Privacy Policy outlines how we collect, use, store, disclose, and safeguard your personal information when you use our Website or interact with our services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users and visitors of shoutghana.com and governs the collection and processing of personal data through the Website. ShoutGhana is the data controller responsible for determining the purposes and methods of processing your personal data in the context of this Website. If you have questions about this Policy or how your data is handled, you may contact us at [email protected].

3. Categories of Data We Process

We process the following categories of personal data, as applicable to your interactions with our Website:

a. Usage Data
This includes data automatically collected when you interact with the Website, such as your IP address, browser type and version, operating system, internet service provider, referral URLs, time stamps, pages visited, session duration, and general site usage activity.

b. Account Data
If you create an account or otherwise register, we may collect personal information like your name, mailing address, email address, phone number, and any credentials used for login and authentication.

c. Profile Data
Includes information you provide in your user profile such as preferences, interests, purchase history, and behavioral patterns derived from your use of the Website and services.

d. Communication Data
Encompasses any personal data you provide when contacting us. This may include your messages, support queries, grievance filings, and all related correspondence.

e. Technical Data
We collect information about the devices and technologies you use to access our site, such as device type, model, operating system, language preferences, screen resolution, and browser configuration.

f. Transaction Data
When relevant, we process billing and payment details, shipping/delivery addresses, and information related to orders or purchases made through the Website.

g. Preference Data
With your consent, we collect data regarding your preferences related to marketing communications, user experience personalization, and product or service interests.

4. Legal Bases for Processing

We base our processing of your personal data on at least one of the following lawful grounds, as required under the GDPR:

– Consent: Where you have given clear, informed consent for us to process your personal data for a specific purpose.
– Contractual Necessity: Where processing is required to perform a contract with you or to take steps at your request before entering into such a contract.
– Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
– Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party), provided such interests are not overridden by your fundamental rights and freedoms.

For users protected under the CCPA, we do not sell personal data and only collect and process such data for purposes consistent with those outlined in this Privacy Policy.

5. Your Rights

Under applicable data protection laws, you have the following rights in relation to your personal data:

– Right to Access – You may request access to your personal data we hold.
– Right to Rectification – You may ask us to correct inaccurate or incomplete data.
– Right to Erasure – Also known as the ‘right to be forgotten’. You may request deletion of your data, subject to certain lawful exceptions.
– Right to Restriction – You may request restriction of processing when accuracy is contested, processing is unlawful, or data is no longer needed.
– Right to Data Portability – Where applicable, you may request personal data be provided to you or transmitted to another controller in a structured, commonly used format.
– Right to Object – You have the right to object to processing based on legitimate interests or direct marketing.
– Right to Withdraw Consent – Where processing is based on your consent, you may withdraw this at any time without affecting the lawfulness of prior processing.

California users further have the right to opt out of the sale of their personal data, request that their data not be shared with third parties for commercial purposes, and may not be discriminated against for exercising these rights.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We take the protection of your personal data seriously and have implemented appropriate technical and organizational measures to secure your information from unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

– Data encryption at rest and in transit
– Secure sockets layer (SSL) technology for all network communication
– Access controls and authentication protocols
– Regular software and system updates
– Scheduled audits and system monitoring
– Staff data protection and privacy training
– Secure backup and recovery procedures

While no system can be guaranteed as completely secure, we strive to maintain industry-standard practices for the safeguarding of personal data.

7. International Transfers

Where required, your personal data may be transferred to, and stored or processed in, locations outside of your home jurisdiction, including to countries that may not offer the same level of data protection. In these cases, we take all necessary steps to ensure your data is subject to appropriate safeguards. Transfers outside of the European Economic Area (“EEA”) are governed by EU-approved Standard Contractual Clauses or other lawful transfer mechanisms.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy or as required by applicable law. Retention periods may vary by data type and processing purpose:

– Usage and Technical Data: retained for analytics and maintenance for up to 12 months
– Account and Profile Data: retained for the duration of your registration and up to 2 years after account closure
– Transaction and Payment Data: retained per financial regulations, generally for up to 7 years
– Preference and Consent Data: retained for as long as legally tenable or until consent is revoked
– Communication Data: retained for a period of up to 5 years for legal risk management and customer service documentation

9. Cookie Policy

We use cookies and similar tracking technologies to enhance user experience, improve website performance, and enable certain functionalities. Types of cookies we use include:

– Essential Cookies: Necessary for proper site function and security (e.g., authentication, session management)
– Functional Cookies: Remember your preferences, selections, and settings
– Performance Cookies: Collect anonymized analytics on site usage and navigational patterns
– Analytics Cookies: Used with third-party services like Google Analytics to understand audience behavior and improve functionality

10. Cookie Management and Compliance

In compliance with the GDPR and CCPA, we provide users with clear information and control over their cookie preferences. On accessing shoutghana.com, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookies. You can modify your cookie settings at any time through your browser settings or via the cookie management tool embedded on our site.

We do not use cookies to sell personal data or profile users without consent. CCPA users have the right to opt-out of cookies that qualify as sharing under California law.

11. Children’s Privacy

ShoutGhana does not knowingly collect or solicit personal data from children under the age of 13. If you are under 13, please do not use the Website or provide any information about yourself. If we learn that we have collected personal data from a child under 13, we will delete it promptly. Parents or guardians who believe their child has provided personal data should contact us at [email protected].

12. Policy Updates and Notifications

We may update this Privacy Policy from time to time to reflect changes in legal obligations or business practices. Any significant changes will be communicated to users either through email (if you have provided us with your contact details), on the Website itself, or both. Please review this Policy periodically for the most current version.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us at:

Email: [email protected]
Website: shoutghana.com

We are committed to ensuring that your privacy is respected and protected in accordance with all applicable regulations including the GDPR and CCPA. Please don’t hesitate to reach out to us with any privacy-related concerns or rights requests.