Privacy Policy

1. Who we are

Innosol Ghana Limited ("Innosol", "we", "us" or "our") is a Ghanaian technology and consulting company headquartered in Accra. Our services include custom software development, international software partnerships, technology infrastructure, managed IT, hosting, backup and recovery, cloud migration support, cybersecurity-related services and digital transformation consulting.

For personal data collected through this website and our direct online interactions, Innosol Ghana Limited is responsible for determining why and how that personal data is processed, unless another organisation is identified as the data controller for a particular service.

2. Scope of this Policy

This Privacy Policy applies to personal data we collect through:

• www.innosollimited.com and its website forms;
• the Contact Us form and business-enquiry channels;
• the Technology Assessment Tool and assessment-report delivery;
• career applications, CV uploads and recruitment communications;
• emails, calls or other communications initiated through the website; and
• technical information generated when you browse or interact with the website.

Where Innosol processes personal data on behalf of a client as part of a contracted technology service, that processing may be governed by the client's privacy arrangements and the relevant service or data-processing agreement.

3. Personal data we may collect

3.1 Contact and identity information

This may include your name, email address, telephone number and other information you choose to provide when contacting us.

3.2 Business and organisation information

This may include your company or organisation name, job role, business needs, project requirements, enquiry subject and information relevant to assessing or responding to your technology needs.

3.3 Technology Assessment information

When you use the Technology Assessment Tool, we may process the answers you provide, assessment scores, recommendations, report content, organisation information and the email address used to send the report.

3.4 Recruitment information

If you apply for a role, we may collect your name, telephone number, email address, CV, cover letter, employment history, qualifications, professional experience and other information you voluntarily include in your application.

Please avoid including special or highly sensitive personal data in a CV or cover letter unless it is genuinely necessary and you are comfortable providing it.

3.5 Technical and usage information

Our web server and security systems may process technical information such as IP address, browser type, device information, date and time of access, requested pages, referring page, error logs and security-related events. This information may be used to operate, secure, maintain and troubleshoot the website.

4. How we collect personal data

We generally collect personal data directly from you when you submit a form, complete an assessment, upload an application, email us, call us or otherwise communicate with us. We may also receive limited technical data automatically from your device or browser when you use the website.

Where information is received from another source, we will handle it in accordance with applicable law and provide notice where required.

5. Why we use personal data

We may use personal data to:

• respond to enquiries, requests, proposals and technology-assessment submissions;
• generate and deliver Technology Assessment reports and recommended next steps;
• communicate about services you have requested or an existing business relationship;
• evaluate job applications, communicate with candidates and manage recruitment;
• operate, maintain, improve and secure the website and its forms;
• prevent fraud, abuse, unauthorised access and other security incidents;
• maintain appropriate business, operational and legal records;
• comply with applicable laws, lawful requests, court orders and regulatory obligations; and
• send direct marketing only where the prior consent required by applicable Ghanaian law has been obtained.

6. Legal basis for processing

Under the Data Protection Act, 2012 (Act 843), personal data should not be processed without prior consent unless another lawful justification applies. Depending on the circumstances, we may process personal data because:

• you have consented to the processing;
• processing is necessary for the performance of a contract to which you are a party;
• processing is authorised or required by law;
• processing is necessary to protect a legitimate interest of the data subject; or
• processing is necessary for a legitimate interest pursued by Innosol or a relevant third party, where permitted by law and balanced against your rights.

7. Direct marketing

We will not use personal data for direct marketing without the prior consent required by applicable Ghanaian law. Where you have subscribed or otherwise consented to receive marketing communications, you may withdraw that consent or unsubscribe at any time using the option provided in the communication or by contacting us.

Service communications needed to respond to an enquiry, deliver an assessment report, manage an application or support an existing relationship are not treated as marketing merely because they are sent electronically.

8. When we may share personal data

We do not sell personal data. We may disclose personal data, where reasonably necessary and lawful, to:

• authorised Innosol personnel who need the information for their work;
• service providers that host, secure, maintain or support our website, email, storage, communications, recruitment or other business systems;
• professional advisers where necessary for legal, audit, insurance or compliance purposes;
• technology partners where sharing is necessary to respond to a request concerning that partner's solution and where the disclosure is lawful and appropriate; and
• regulators, courts, law-enforcement bodies or other authorities where disclosure is required or authorised by law.

Where a third party processes personal data on our behalf, we will use appropriate contractual and organisational safeguards consistent with applicable data-protection requirements.

9. International processing and transfers

Some technology, hosting, cloud, email or software service providers may process or store information outside Ghana. Where this occurs, we will take reasonable steps to ensure that personal data remains subject to appropriate confidentiality, security and data-protection safeguards and that processors handling data on our behalf comply with applicable Ghanaian requirements.

10. Data retention

We keep personal data only for as long as it is necessary for the purpose for which it was collected, or for a longer period where retention is required or authorised by law, reasonably necessary for a lawful business purpose, required by contract, or supported by valid consent.

For example, enquiry records may be retained while a business discussion remains active and for an appropriate period afterwards for continuity and record-keeping. Recruitment records are retained for the recruitment process and a limited period afterwards, unless a longer retention period is required by law or you consent to being considered for future opportunities. At the end of the applicable retention period, personal data will be deleted, destroyed or de-identified as appropriate.

11. Data security

We use reasonable technical and organisational measures designed to protect personal data against loss, damage, unauthorised destruction, unlawful access, alteration or unauthorised processing. Measures may include access controls, secure hosting practices, system updates, backups, monitoring and staff access restrictions appropriate to the systems and risks involved.

No internet or storage system can be guaranteed to be completely secure. If we become aware of an unauthorised access or acquisition that triggers notification obligations under applicable law, we will take appropriate response steps and make required notifications.

12. Cookies and similar technologies

The website may use cookies or similar technologies needed for site functionality, security, preferences or performance. Where we introduce non-essential analytics, advertising or marketing cookies, we will provide appropriate notice and controls before using them where consent is required.

You can also control cookies through your browser settings, although disabling necessary cookies may affect some website functionality.

13. Your rights

Subject to the Data Protection Act, 2012 (Act 843) and any lawful limitations or exemptions, you may have the right to:

• be informed about the processing of your personal data;
• request access to personal data held about you;
• request correction or rectification of inaccurate, incomplete, excessive or out-of-date personal data;
• object to certain processing and, where applicable, require processing to stop;
• require that your personal data not be used for direct marketing;
• request blocking, erasure or destruction where the requirements of the law are met; and
• exercise applicable rights relating to decisions based solely on automated processing that significantly affect you.

To exercise a right, contact us using the details in section 17. We may need to verify your identity before completing a request.

14. External websites and third-party services

Our website may contain links to partner websites, maps, social-media pages and other external services. Those third parties control their own privacy practices. We encourage you to review their privacy notices before providing them with personal information.

15. Changes to this Policy

We may update this Privacy Policy to reflect changes in our website, services, processing practices or applicable law. The revised version will be published on this page with an updated date. Where a change materially affects how we use previously collected personal data, we will provide additional notice where appropriate.

16. Complaints and the Data Protection Commission

If you have a privacy concern, please contact us first so we can review it. You may also have the right to raise a complaint with Ghana's Data Protection Commission, the statutory regulator responsible for enforcing the Data Protection Act, 2012 (Act 843).

Visit the Data Protection Commission website.

17. Contact us

For questions, objections, access requests, correction requests, direct-marketing opt-outs or other privacy matters, contact: