Kshama Engineering Limited ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share information about you when you visit our website (www.kshamaengineering.com), contact us or engage our services.
We are a data controller registered in Ghana and comply with the Data Protection Act 2012 (Act 843) and regulations issued under it by the Data Protection Commission of Ghana.
1. Data We Collect
1.1 Information you provide directly
- Name and email address
- Company name and business address
- Details of goods you wish to import or export
- Any other information submitted via our contact or quote request form
1.2 Information collected automatically
- IP address and browser type
- Pages visited and time spent on the site
- Referring website
- Cookie data (see our Cookie Policy)
1.3 Information from third parties
- Business contact details obtained from publicly available sources for legitimate business outreach
- Information from shipping partners, customs authorities and freight carriers necessary to complete your shipment
2. How We Use Your Data
We use your personal data for the following purposes, relying on the lawful bases indicated:
- Providing our services — processing enquiries, preparing quotations, arranging shipments, customs clearance and delivery (Contractual necessity)
- Communication — responding to your enquiries, sending shipment updates and important notices (Contractual necessity / Legitimate interests)
- Legal compliance — fulfilling obligations under customs, tax and trade law (Legal obligation)
- Marketing — sending relevant updates about our services where you have consented or we have a legitimate interest (Consent / Legitimate interests)
- Site improvement — analysing website usage to improve user experience (Legitimate interests)
3. Sharing Your Data
We do not sell your personal data. We may share it with:
- Freight carriers and shipping lines — to complete your shipment
- Customs authorities (Ghana Revenue Authority / Ghana Customs Division) — as required by law for import/export declarations
- Suppliers and manufacturers in China — to facilitate procurement on your behalf
- Professional advisers — lawyers, accountants, insurers under confidentiality obligations
- IT and hosting providers — to operate our website and communications systems
Where data is transferred outside Ghana (e.g., to China-based suppliers or regional offices in Nigeria and Togo), we ensure appropriate safeguards are in place as required by Act 843.
4. Data Retention
We retain personal data only as long as necessary for the purpose it was collected:
- Client transaction records: 7 years (tax and legal compliance)
- General enquiry data: 2 years from last contact
- Website analytics data: 13 months rolling
- Marketing consent records: until withdrawal + 3 years
5. Your Rights
Under Ghana's Data Protection Act 2012 (Act 843) you have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data where there is no overriding legal basis
- Restriction — request we limit processing in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests, including direct marketing
- Withdraw consent — at any time where processing is based on consent
To exercise any of these rights, contact us at privacy@kshamaengineering.com. We will respond within 21 days.
6. Cookies
We use cookies and similar technologies on our website. For full details, please see our Cookie Policy.
7. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure. These include SSL/TLS encryption, access controls and regular security reviews. However, no internet transmission is 100% secure and we cannot guarantee absolute security.
8. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.
9. Children's Privacy
Our services are directed at businesses and are not intended for persons under the age of 18. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Significant changes will be communicated via email or a notice on our website.
11. Contact Us
If you have questions about this Privacy Policy or wish to make a data subject request, contact our Data Protection Officer:
- Email: privacy@kshamaengineering.com
- Post: Data Protection Officer, Kshama Engineering Limited, Lakeside Estate, Community One, Accra, Ghana
You also have the right to lodge a complaint with the Data Protection Commission of Ghana at www.dataprotection.org.gh.