Privacy & Data Protection

1. Our Commitment to Your Privacy

BigData Ghana Limited respects your privacy and is committed to protecting the personal data entrusted to us.

We recognise that our work in geospatial technology, cloud computing, data analytics, artificial intelligence, software development and digital communications may involve the collection or processing of personal data. We therefore take appropriate steps to ensure that personal data is handled lawfully, fairly, securely and transparently.

This Privacy and Data Protection Notice explains:

• The personal data we may collect.
• How and why we process personal data.
• The parties with whom information may be shared.
• How long we retain personal data.
• The security measures we apply.
• The rights available to individuals.
• How to contact us regarding privacy concerns.

Our personal-data-processing activities are guided by Ghana's Data Protection Act, 2012 (Act 843), applicable regulations and other relevant laws.

2. About BigData Ghana

BigData Ghana Limited provides technology solutions in the areas of:

• Geographic Information Systems and remote sensing.
• Geospatial intelligence and GeoAI.
• Satellite and Earth observation data.
• Cloud computing and cloud infrastructure.
• Data engineering and business intelligence.
• Machine learning and artificial intelligence.
• Software, web and mobile application development.
• Business messaging and digital communication platforms.
• Technology consulting, implementation, training and support.

For the personal data collected directly through our website, enquiries, marketing activities, recruitment processes and business operations, BigData Ghana generally acts as the data controller.

Where we process personal data on behalf of a client through a client-owned platform, project or managed service, BigData Ghana may act as a data processor, while the client remains the data controller.

Privacy enquiries may be addressed to the Data Protection Supervisor through the contact information above.

3. Scope of This Notice

This notice applies when you:

• Visit the BigData Ghana website.
• Submit an enquiry or complete an online form.
• Request a quotation, proposal, demonstration or consultation.
• Register for an event, webinar, training or campaign.
• Apply for a job, internship or professional opportunity.
• Become a client, supplier, contractor or business partner.
• Use a BigData Ghana platform, application or digital service where this notice is referenced.
• Communicate with us by email, telephone, social media or another channel.
• Visit our office or attend an event organised by BigData Ghana.
• Receive marketing or business communications from us.

4. Our Data Protection Principles

BigData Ghana processes personal data in accordance with the following principles:

• Accountability — We accept responsibility for personal data under our control and demonstrate compliance with applicable requirements.
• Lawfulness — We collect and process personal data in a lawful, fair and reasonable manner.
• Purpose specification — We collect personal data for specific, clear and legitimate purposes.
• Compatibility — We do not use personal data for a new purpose incompatible with the original unless we have a lawful basis.
• Quality — We take reasonable steps to ensure data is accurate, complete, relevant and up to date.
• Openness — We aim to be transparent about the data we collect and how it is used.
• Security — We use reasonable technical and organisational safeguards to protect personal data.
• Data-subject participation — We provide processes through which individuals can exercise their rights.

5. Personal Data We May Collect

The information we collect depends on how you interact with BigData Ghana:

Identity & Contact Information

Full name, job title, employer, email address, telephone number, business or residential address, country, signature, preferred communication method.

Business & Professional Information

Organisation name and industry, professional role, project requirements, proposal and quotation details, contract information, meeting records, business correspondence.

Website & Technical Information

IP address, browser type, device type, operating system, date and time of access, pages visited, referring website, general geographic location, cookie identifiers, security and diagnostic logs.

Client & Account Information

Username, email, authentication information, user role and permissions, account activity, login history, service preferences, support history.

Financial & Transaction Information

Billing name and address, invoice information, payment status, transaction reference, tax information, bank or mobile-money details provided for legitimate business purposes.

Communications & Support

Emails, customer-support requests, call or meeting notes, complaints, feedback, survey responses, product enquiries.

Recruitment Information

CV, educational history, employment history, qualifications, references, portfolio, interview notes, expected salary, contact details, identification documents where necessary.

Geospatial & Location Information

Coordinates, field-survey information, property locations, device location, route information, mapped facilities, farm and project-site locations. Location information is collected only where relevant to the service or authorised purpose.

6. How We Collect Personal Data

We may collect personal data:

• Directly from you — when you complete forms, contact us, request services, create accounts, attend events, apply for positions, or provide information during a project.
• Automatically — through cookies, server logs and similar technologies when you use our website or platforms.
• From clients and partners — information necessary for projects, contracts or services.
• From public sources — business contact information from public websites, professional directories, government registers and professional networking platforms.
• From service providers — limited information from payment, analytics, event and cloud providers.

7. Why We Process Personal Data

BigData Ghana may process personal data to:

• Respond to enquiries and prepare quotations.
• Enter into and manage contracts.
• Deliver technology solutions and professional services.
• Create and administer user accounts.
• Provide customer support.
• Process transactions and payments.
• Manage projects and service delivery.
• Provide training, events and programmes.
• Improve our website and user experience.
• Detect, prevent and investigate fraud or security incidents.
• Comply with legal and regulatory obligations.
• Conduct recruitment.
• Promote relevant products and services.
• Establish, exercise or defend legal claims.

8. Grounds for Processing

We may process personal data where:

• You have given consent.
• Processing is necessary to provide a requested service.
• Processing is necessary to perform a contract.
• Processing is required by law.
• Processing is necessary to protect a legitimate interest, provided individual rights are considered.
• Processing is necessary to protect vital interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect processing that occurred lawfully before.

9. Artificial Intelligence & Automated Tools

BigData Ghana develops and uses data analytics, machine learning and AI tools to analyse datasets, detect patterns, improve service performance, support customer service, summarise communications, generate forecasts, strengthen security monitoring, and support decision-making.

We apply appropriate human oversight, access controls, testing and data-quality measures when using AI. We do not use personal data to train public AI models without an appropriate legal basis, suitable safeguards and clear authorisation.

Where an automated process may have a material effect on an individual, we will consider additional transparency, human review and appropriate means of challenge.

10. Cookies & Similar Technologies

Our website may use cookies to maintain essential functions, remember preferences, protect against abuse, understand visitor behaviour, measure performance, improve content, and support marketing where consent has been provided.

Cookie categories include:

• Strictly necessary — required for security, navigation and essential functionality.
• Preference — remember choices such as language and display settings.
• Analytics — understand how visitors interact with the website.
• Marketing — measure campaigns and deliver relevant communications (used only after consent).

Visitors can manage cookies through the website's cookie-preference centre or browser settings.

11. Marketing Communications

We may send information about products, services, events, insights and offers where you have provided consent, requested the information, there is an existing business relationship, or another lawful basis permits the communication.

Every marketing message provides a method of opting out. You may unsubscribe via the link in the message, by replying with an unsubscribe request, or by contacting info@bigdataghana.com.

12. When We Share Personal Data

BigData Ghana does not sell personal data. We may share data with authorised parties where necessary:

• Cloud-hosting and infrastructure providers.
• Website and software service providers.
• Payment processors.
• Telecommunications and messaging providers.
• Analytics and cybersecurity providers.
• Professional advisers (lawyers, accountants, auditors).
• Government or law-enforcement authorities where legally required.

Third parties processing data on our behalf must process only for authorised purposes, maintain confidentiality, implement security safeguards, and comply with data protection requirements.

13. International Data Transfers

Some providers may store or process data outside Ghana. Where data is transferred internationally, we ensure the transfer is necessary and lawful, the recipient is subject to appropriate confidentiality and security requirements, relevant contractual safeguards are in place, and access is limited to authorised persons.

14. Data Retention

We retain personal data only as long as reasonably necessary for the purpose of collection, considering contractual requirements, legal obligations, accounting needs, security needs, limitation periods, and the sensitivity of the information.

When no longer required, data may be securely deleted, destroyed, anonymised, aggregated, or returned to a client where contractually required.

15. How We Protect Personal Data

We use reasonable technical and organisational measures including:

• Role-based access controls and multi-factor authentication.
• Encryption during transmission and storage.
• Network and endpoint security.
• Secure cloud configuration.
• Logging, monitoring and vulnerability management.
• Data backups and recovery procedures.
• Confidentiality obligations and staff training.
• Supplier assessments and data-processing agreements.
• Incident-response procedures.

16. Personal Data Breaches

Where we become aware of a suspected breach, we will contain and investigate, protect affected systems, assess consequences, restore integrity, document actions, and notify the Data Protection Commission and affected individuals where required.

Suspected incidents should be reported immediately to info@bigdataghana.com.

17. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• Request confirmation — ask whether we hold data about you.
• Request access — access your personal data and processing information.
• Request correction — correct inaccurate or incomplete data.
• Request deletion — delete data no longer necessary or unlawfully processed.
• Object to processing — object where processing causes unwarranted damage.
• Object to marketing — stop use of data for direct marketing.
• Withdraw consent — withdraw consent where processing is based on it.
• Raise a concern — complain to us or the Data Protection Commission.

18. How to Exercise Your Rights

Contact the Data Protection Supervisor at info@bigdataghana.com with subject line: Data Protection Request – [Your Full Name]

Include your full name, contact information, a clear description of the request, the relevant service or communication, and any information to help locate the record.

We will respond within the period required by applicable law (generally within forty days under Act 843).

19. Children's Personal Data

The BigData Ghana website is intended primarily for adults, businesses and professional organisations. We do not knowingly collect data directly from children without appropriate authority. Where a project involves children's information, we require lawful purpose, appropriate authorisation, additional security, limited access, and protection of the child's best interests.

20. Client Responsibilities

Where a client provides personal data to BigData Ghana, the client is responsible for ensuring lawful collection, appropriate information to individuals, necessary permissions, relevance of data, lawful instructions, and appropriate retention rules.

21. Third-Party Websites & Services

Our website may contain links to third-party websites. BigData Ghana does not control their privacy practices. Visitors should review third-party privacy notices before submitting personal information.

22. Changes to This Notice

We may update this notice to reflect changes in our services, technology, processing activities, regulatory guidance, or applicable law. The updated version will be published on this page with a revised date. Material changes may be communicated through email or platform notification.

23. Complaints & Regulatory Contact

Contact BigData Ghana first so we can investigate your concern. You may also lodge a complaint with Ghana's Data Protection Commission if you believe your privacy rights have been infringed.

24. Contact Us

For questions, requests or complaints relating to this notice or data processing:

Please do not include passwords, full payment-card information or other highly sensitive information unless specifically requested through a secure channel.