Data Protection and Security
Policy
1. INTRODUCTION
The information systems utilized by Casantey Business Solutions Group (Casantey) represent substantial investments and invaluable assets to the Company and the communities we serve. These assets encompass equipment, software, and data essential for effective and ongoing operations. A significant portion of this data holds a confidential nature, making it imperative to safeguard all information systems against any events, whether accidental or malicious, that might jeopardize the company's activities and its investments in information.
This policy pertains to all information systems developed, implemented, run, employed by, or on behalf of, Casantey Business Solutions Group. The term 'information systems' encompasses both computer-based and non-computer-based systems. All staff members and users of Casantey systems are required to adhere to this policy.
This policy is supplemented by detailed 'Information Security & Data Protection Procedures,' available from the Information Security Adviser. Additionally, this privacy notice furnishes you with insights into how we collect and process your personal data through our applications.
Casantey Business Solutions Group is the data controller and is responsible for your personal data (referred to as "we," "us," or "our" in this privacy notice).
2. CONTACT DETAILS
Our complete details are as follows:
Full Name of Legal Entity: Casantey Business Solutions Group Limited
Email Address: contactcbs@casantey.com
Postal Address: CBS-G House, Adjiriganor, Accra, Ghana.
Ensuring the accuracy and currency of the information we hold about you is of utmost importance. Please notify us if your personal information changes by emailing contactcbs@casantey.com.
3. DATA COLLECTION AND PROCESSING
Personal data encompasses any information capable of identifying an individual, excluding anonymized data. We may process the following categories of personal data about you:
2.1. Communication Data
This includes any communication sent to us, whether via the contact form on our website, email, text, social media messaging, or other forms of communication. We process this data for the purpose of communicating with you, record-keeping, and the establishment, pursuit, or defense of legal claims. Our lawful ground for this processing is our legitimate interests, including responding to communications, maintaining records, and legal claims.
2.2. Customer Data
This category encompasses data related to purchases of goods and/or services, including name, title, billing address, delivery address, email address, phone number, contact details, purchase details, and payment information. We process this data to supply goods and/or services, record transactions, and for contract performance. Our lawful ground for this processing is the performance of a contract and/or steps at your request to enter into such a contract.
2.3. User Data
User Data includes information about your usage of our website and online services, as well as data you post for publication on our website or through other online services. We process this data to operate our website, ensure relevant content, enhance security, maintain backups, and facilitate publication and administration. Our lawful ground for this processing is our legitimate interests, including website administration and business operations.
2.4 Technical Data
This category comprises data about your use of our apps, website, and online services, such as IP address, login data, browser details, page views, and navigation paths. We process this data to analyze your usage, administer and protect our business and website, deliver relevant content, advertisements, and understand advertising effectiveness. Our lawful ground for this processing is our legitimate interests, including proper administration, business growth, and marketing strategy.
2.5 Marketing Data
Marketing Data encompasses your preferences for receiving marketing communications from us and third parties, as well as communication preferences. We process this data to enable participation in promotions, deliver relevant content and advertisements, measure advertising effectiveness, and study customer usage to develop and grow our business and marketing strategy.
We may use Customer Data, User Data, Technical Data, and Marketing Data to deliver relevant app content, website content, advertisements, and measure advertising effectiveness. Our lawful ground for this processing is legitimate interests, aimed at business growth. We may also use this data to send other marketing communications, depending on your consent or legitimate interests (e.g., business growth).
4. HANDLING SENSITIVE DATA
We may collect Sensitive Data, which includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, genetic and biometric data, and information about criminal offenses.
If you are required by law to provide personal data and fail to do so, we may be unable to perform the contract (e.g., deliver goods or services). We will notify you if such a situation arises. We will use your personal data only for the purpose it was collected or reasonably compatible purposes when necessary.
5. MARKETING COMMUNICATIONS
Our lawful grounds for processing personal data to send marketing communications are your consent or our legitimate interests, including business growth.
Under the Privacy and Electronic Communications Regulations, we may send you marketing communications if you've made a purchase from us, inquired about our goods or services, or agreed to receive marketing communications, provided you haven't opted out of receiving them. We may also send marketing emails to limited companies without explicit consent. However, you can opt out of receiving marketing emails from us at any time.
Before sharing your personal data with third parties for their marketing purposes, we will obtain your express consent. You can stop receiving marketing messages at any time by using the opt-out links in marketing emails or emailing us at contactcbs@casantey.com.
6. DISCLOSURES OF PERSONAL DATA
We may share your personal data with:
-
Service providers offering IT and system administration services.
-
Professional advisers, including lawyers, bankers, auditors, and insurers.
-
Government bodies requiring reports on processing activities.
-
Third parties in cases of business sale, transfer, or merger.
We require all third parties to treat your personal data with respect, process it for specified purposes, and follow our instructions.
7. DATA SECURITY
We have implemented security measures to prevent unauthorized access, loss, alteration, disclosure, or use of personal data. Access to your personal data is restricted to employees and partners with a legitimate business need, and they are obligated to keep it confidential. Procedures are in place to address suspected data breaches, and we will notify affected parties as required by law.
8. DATA RETENTION
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. We evaluate data retention based on factors such as quantity, nature, sensitivity, potential risks, processing purposes, and legal requirements.
9. YOUR LEGAL RIGHTS
Under data protection laws, you have rights regarding your personal data, including access, correction, erasure, restriction, transfer, objection to processing, data portability, and withdrawal of consent. For more information or to exercise these rights, email us at contactcbs@casantey.com.
You won't be charged a fee to access your personal data or exercise your rights unless requests are unfounded, repetitive, or excessive. We may need to request specific information to confirm your identity for security purposes.
We aim to respond to legitimate requests within one month. Complex or numerous requests may require more time, and we will notify you in such cases.
10. THIRD-PARTY LINKS
Our apps, applications, or websites may include links to third-party apps, websites, plugins, and applications. Clicking on these links or enabling connections may allow third parties to collect or share data about you. We don't control these thirdparty websites and are not responsible for their privacy statements. We recommend reviewing the privacy notice of each app, application, or website you visit when leaving our platform.