Privacy Policy

Your Privacy Matters

Privacy Policy

Last updated: January 1, 2025

Quick Summary

We collect only necessary data
Your data is encrypted and secure
We never sell your personal information
You can request data deletion anytime
Compliant with Ghana Data Protection Act
GDPR-compliant for EU users

Introduction

ACIES ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and related services (collectively, the "Service").

This policy complies with:

  • Ghana Data Protection Act, 2012 (Act 843)
  • General Data Protection Regulation (GDPR) for EU users
  • Electronic Transactions Act, 2008 (Act 772)
  • International data protection standards

Data Controller: ACIES, Accra, Ghana. We are registered with the Ghana Data Protection Commission (DPC).

1. Information We Collect

1.1 Personal Information You Provide

  • Name and contact information (email, phone number)
  • Shipping and billing address
  • Payment information (processed securely by payment providers)
  • Account credentials
  • Communication preferences
  • Customer support inquiries

1.2 Automatically Collected Information

  • Device information (browser type, IP address, device ID)
  • Usage data (pages visited, time spent, click patterns)
  • Location data (general geographic location)
  • Cookies and similar tracking technologies
  • Order history and purchase behavior

1.3 Information from Third Parties

  • Payment confirmation from payment processors
  • Delivery confirmation from shipping partners
  • Analytics providers (Google Analytics, etc.)

2. How We Use Your Information

We use your information for the following purposes:

  • Process and fulfill your orders
  • Communicate with you about orders, products, and promotions
  • Provide customer support and respond to inquiries
  • Improve our Service and user experience
  • Personalize your shopping experience
  • Send marketing communications (with your consent)
  • Prevent fraud and enhance security
  • Comply with legal obligations under Ghanaian law
  • Analyze trends and user behavior

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on:

  • Contract Performance

    Processing necessary to fulfill our contractual obligations (e.g., processing orders)

  • Consent

    Where you have given explicit consent (e.g., marketing communications)

  • Legal Obligation

    Compliance with applicable laws and regulations

  • Legitimate Interests

    For our legitimate business interests, provided your rights do not override these interests

4. Data Sharing and Disclosure

We do NOT sell your personal information.

We may share your data with:

  • Service Providers

    Payment processors, shipping companies, IT services (under strict data processing agreements)

  • Legal Requirements

    When required by law, regulation, or legal process

  • Business Transfers

    In connection with a merger, acquisition, or sale of assets (you will be notified)

  • With Your Consent

    We may share data for other purposes with your explicit consent

5. Data Security

We implement industry-standard security measures to protect your personal data:

  • SSL/TLS encryption for all data transmissions
  • Secure payment processing (PCI DSS compliant)
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Data backup and disaster recovery procedures
  • Compliance with Cybersecurity Act, 2020 (Act 1038)

Note: While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Under the Ghana Data Protection Act and GDPR, you have the following rights:

  • Right to Access

    Request a copy of your personal data we hold

  • Right to Rectification

    Request correction of inaccurate or incomplete data

  • Right to Erasure

    Request deletion of your personal data ("Right to be Forgotten")

  • Right to Restrict Processing

    Request that we limit how we use your data

  • Right to Data Portability

    Receive your data in a portable, machine-readable format

  • Right to Object

    Object to processing based on legitimate interests or direct marketing

  • Right to Withdraw Consent

    Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at customerservice@acies.store

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Maintain your shopping cart
  • Analyze site traffic and performance
  • Personalize content and recommendations
  • Improve security and prevent fraud

You can control cookies through your browser settings. Disabling cookies may affect certain features of the Service.

8. Data Retention

We retain your personal data only as long as necessary:

  • Account Data

    Retained while your account is active + 2 years

  • Order Data

    Retained for 7 years (tax and legal requirements)

  • Marketing Data

    Retained until you unsubscribe or request deletion

9. International Data Transfers

Your data may be transferred to and processed in countries outside Ghana. We ensure appropriate safeguards are in place:

  • Standard contractual clauses approved by relevant authorities
  • Adequacy decisions by data protection authorities
  • Binding corporate rules for intra-group transfers

10. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

  • Email notification
  • Prominent notice on our website
  • Updating the "Last updated" date

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Data Protection Commission (Ghana): If you have unresolved concerns, you have the right to lodge a complaint with the Ghana DPC at dataprotection.org.gh