Legal

Privacy Policy

Obuaba LTD is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information in accordance with the Ghana Data Protection Act 2012 and applicable international standards.

Last updated: 2 September 2026

1. Who We Are

Obuaba LTD ("Obuaba", "we", "our", or "us") is a software engineering and ICT company incorporated in the Republic of Ghana. Our registered office is located in Accra, Ghana. We design, build, and operate enterprise software systems, mobile applications, AI platforms, and e-Government solutions for clients across Africa and globally.

This Privacy Policy applies to information collected through our website at obuaba.com, our client portals, and any services we provide.

2. Information We Collect

We collect the following categories of personal information:

Information you provide directly:
- Contact details: name, email address, phone number, company name, job title
- Enquiry details: project descriptions, budget ranges, service requirements submitted through our contact forms
- Account credentials for authorised administrator accounts
- CV and application information submitted through our careers page
- Newsletter subscription email addresses

Information collected automatically:
- IP address and approximate geographic location
- Browser type and version, device type, operating system
- Pages visited, time spent on pages, referral sources
- Cookies and similar tracking technologies (see Section 6)

Information from third parties:
- Business card details shared at events or through referrals
- Publicly available professional information (e.g., LinkedIn) where we have a legitimate business interest

3. How We Use Your Information

We use your personal information for the following purposes:

- To respond to enquiries — processing and responding to contact form submissions, quote requests, and consultation bookings
- To deliver our services — managing client projects, communicating project updates, and providing contracted ICT services
- To operate our website — ensuring the website functions correctly and improving user experience
- To send communications — newsletters and updates you have subscribed to (you may unsubscribe at any time)
- For careers and recruitment — reviewing job applications and contacting applicants
- To comply with legal obligations — meeting requirements under Ghanaian law and applicable regulations
- For analytics and improvement — understanding how our website and services are used to improve them

We process your data on the following legal bases: performance of a contract, our legitimate business interests, your consent (where obtained), and compliance with legal obligations.

4. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

- Service providers — we engage trusted third-party providers (hosting, email, analytics) who process data on our behalf under strict data processing agreements
- Legal requirements — we may disclose information if required by law, court order, or regulatory authority in Ghana or applicable jurisdictions
- Business transfers — in the event of a merger, acquisition, or asset sale, personal data may be transferred as part of the transaction, subject to equivalent privacy protections
- With your consent — in any other case where you have explicitly agreed to the sharing

Our primary hosting infrastructure is located in servers operated by trusted cloud providers. We take reasonable steps to ensure data is processed securely wherever it is transferred.

5. Cookies and Tracking

We use cookies and similar technologies on our website. Cookies are small text files stored on your device that help us deliver a better experience.

Types of cookies we use:
- Essential cookies — required for the website to function (cannot be disabled)
- Analytics cookies — help us understand how visitors interact with the website (e.g., which pages are most visited)
- Preference cookies — remember your settings and choices (e.g., cookie consent preference)

You can control non-essential cookies through our cookie consent banner shown on your first visit, or by adjusting your browser settings. Disabling cookies may affect website functionality.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

- Encrypted data transmission (TLS/HTTPS) for all website communications
- Access controls limiting data access to authorised personnel
- Regular security reviews and penetration testing
- Secure server environments with monitoring and intrusion detection

While we strive to protect your data, no internet-based transmission is completely secure. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised access to your information.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

- Contact form enquiries: retained for 3 years from last contact
- Client project data: retained for the duration of the contract plus 7 years
- Newsletter subscriptions: until you unsubscribe
- CV and application data: retained for 12 months unless we invite you to apply for a role
- Website analytics data: retained in aggregated or anonymised form for up to 26 months

After the applicable retention period, data is securely deleted or anonymised.

8. Your Rights

Under the Ghana Data Protection Act 2012 and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights:

- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your personal data (subject to legal obligations)
- Right to restriction — request that we limit how we process your data
- Right to data portability — request your data in a structured, machine-readable format
- Right to object — object to processing based on our legitimate interests or for direct marketing
- Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@obuaba.com. We will respond within 30 days. You also have the right to lodge a complaint with the Ghana Data Protection Commission.

9. International Data Transfers

Obuaba LTD is headquartered in Ghana. If you are located outside Ghana, please note that your personal information may be transferred to and processed in Ghana or other countries where our service providers operate.

When we transfer data internationally, we ensure appropriate safeguards are in place, including data processing agreements and, where applicable, compliance with GDPR transfer mechanisms.

10. Children's Privacy

Our website and services are directed to businesses and professionals and are not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information about a child, please contact us immediately at privacy@obuaba.com and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last Updated" date. For significant changes, we will provide more prominent notice (e.g., email notification to registered users). Your continued use of our website after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact:

Data Controller:
Obuaba LTD
Accra, Ghana

Email: privacy@obuaba.com
General enquiries: info@obuaba.com

For data protection enquiries, we aim to respond within 5 business days.

Questions about this policy?

Our team is happy to help clarify anything about how we handle your data.

Email us Contact page