Privacy Notice

1. Introduction

This Privacy Notice explains how Forgehorizones (“we”, “us”, “our”) processes personal information collected through our website, communication channels, and programme activities in Ghana. We comply with the Data Protection Act, 2012 (Act 843) and relevant guidance from the Data Protection Commission of Ghana.

2. Data Controller and Contact

Forgehorizones operates from 26 Jubilee Road, Tamale, Ghana. You can reach our privacy coordinator via [email protected] or by calling +233 20 700 1183. We are responsible for determining the purpose and means of processing personal data collected through this website and associated services.

3. Data We Collect

We collect the following categories of information:

• Contact Information: Names, email addresses, phone numbers, organisational affiliations, and subjects of inquiries submitted via forms.
• Programme Information: Details provided during diagnostics, surveys, assessments, and feedback sessions related to financial capability programmes.
• Technical Information: IP addresses, device identifiers, browser types, and access times collected automatically through our website and Cloudflare security tools.
• Usage Data: Pages visited, resources downloaded, and interactions with our digital content.

4. How We Use Data

We process personal data to:

• Respond to inquiries and provide requested information about our services.
• Design, deliver, and evaluate financial capability programmes.
• Maintain contact lists for ongoing client communication and coordination.
• Protect our systems and users through security monitoring powered by Cloudflare.
• Comply with legal obligations, including record keeping and reporting requirements.

5. Legal Bases for Processing

We rely on the following legal bases:

• Consent: For optional communications and when collecting sensitive programme information.
• Contractual Necessity: When delivering services you request or agree to receive.
• Legitimate Interests: For security monitoring, usage analytics, and improving our offerings, provided your rights are not overridden.
• Legal Obligations: To comply with Ghanaian law, regulatory requests, or enforceable governmental directives.

6. Data Retention

We retain contact inquiries for up to 24 months to manage follow-up discussions. Programme-related data is retained for the duration of the engagement plus five years for reporting and audit purposes. Technical logs maintained by Cloudflare may be retained for up to 12 months, in line with security requirements. Data may be retained longer where required by law or contractual commitments.

7. Data Sharing

We do not sell personal data. We may share data with:

• Authorised service providers such as email or document management platforms operating under confidentiality agreements.
• Cloudflare, Inc. for security, content delivery, and performance optimisation. Cloudflare acts as a data processor under strict contractual terms.
• Professional advisors, auditors, or regulators when necessary to comply with legal obligations.

8. International Transfers

Our primary data storage systems are located in Ghana or within secure data centres in the European Union. When data is processed by Cloudflare or other providers outside Ghana, we ensure appropriate safeguards such as Standard Contractual Clauses or comparable protective measures.

9. Security Measures

We implement technical and organisational measures including encryption, access controls, device management, employee training, and incident response procedures. Cloudflare provides web application firewalls, DDoS mitigation, and secure certificate management to protect visitor traffic.

10. Your Rights

You have rights under the Data Protection Act, 2012, including:

• Access to personal data held about you.
• Rectification of inaccurate or incomplete data.
• Deletion of data when no longer necessary or where consent is withdrawn.
• Restriction or objection to certain processing activities.
• Portability of data provided by you, where technically feasible.

To exercise your rights, contact us at [email protected]. We may request verification information to protect your privacy.

11. Cookies and Similar Technologies

We use cookies for essential functionality, analytics, and security. Cloudflare may set cookies such as __cfduid and bot management tokens to differentiate legitimate users from malicious traffic. For further details, review our Cookie Policy.

12. Children’s Privacy

Our services are aimed at adults and older youth engaged in structured programmes. We require parental or guardian consent before collecting personal data from individuals under 18 years old. If we learn that we have collected data without appropriate consent, we will delete it promptly.

13. Updates to This Notice

We may update this Privacy Notice to reflect operational or regulatory changes. Updates will be posted on this page with a revised effective date. Significant changes may be communicated via email or prominent site notices.

14. Contact and Complaints

If you have questions or concerns about our privacy practices, contact us at [email protected] or +233 20 700 1183. You may also lodge a complaint with the Data Protection Commission, Ghana House, Accra.