This notice explains what personal data S G Technologies Limited ("SGT", "we") collects through secureghana.com, why, who we share it with, how long we keep it, and the rights you have under Ghana's Data Protection Act, 2012 (Act 843). It covers this website only. When you become a client, your engagement terms also set out how we handle the information you share with us during the work.
Who we are
S G Technologies Limited is the data controller for personal data collected through this website.
- Office: Obrapa House, 2nd Floor, Atico Junction, Off Kaneshie–Mallam Highway, Accra
- Post: P.O. Box GP 14219, Accra, Ghana
- Email: [email protected]
- Phone: +233 50 920 0174
- Data Protection Commission registration: in progress. We will publish our registration number here once it is issued.
What we collect, and why
We only collect what you choose to send us, plus the minimum technical data needed to run the site safely.
Assessment requests
The form on our assessment page asks for your name, organisation, contact details, the site or sites concerned and a description of what you need. We use it to reply to you, scope the work and prepare a proposal. Our lawful basis is taking steps at your request before entering into a contract.
Premium template downloads
To download a premium template from our resources page, we ask for your name and email address, and optionally your organisation. We record which template you downloaded. We use this to understand who finds our resources useful. Our lawful basis is our legitimate interest in knowing who uses them. We will not send you marketing emails unless you ask for them, as described below.
The same form has an optional, unticked box: "Yes, email me the SGT Security Briefing and the annual Ghana Security & Safety Outlook. I can unsubscribe at any time." We only send you those emails if you tick it. We keep a record of your answer, the exact wording you saw and when you gave it. The download works whether or not you tick the box.
The SGT Security Briefing
If you subscribe in the site footer, we collect your email address and use it to send the briefing. Our lawful basis is your consent. You can unsubscribe at any time.
The SGT assistant (chat)
The chat assistant is powered by Claude, an AI model from Anthropic. What you type is sent to Anthropic to generate a reply. We do not keep a transcript of your conversation on our servers. Please do not enter sensitive personal data, such as health information, ID numbers or details of an incident involving named people. For anything confidential, email or call us instead.
Technical data
To protect our forms from abuse, we count requests per IP address for one minute and then discard the count. Our hosting provider, Cloudflare, processes connection data such as IP addresses to deliver and secure the site. We do not use analytics, advertising or tracking tools, and the site sets no cookies of its own. Cloudflare may set a strictly necessary security cookie if it needs to tell people from bots.
Links to other services
"Book a call" opens TidyCal, and the WhatsApp button opens WhatsApp. Anything you share there is handled under those services' own privacy policies.
Who we share it with
We do not sell or rent personal data, and we do not share it with other organisations for their own marketing. We use these service providers to run the site and handle enquiries. Each processes data only to provide its service to us:
- Cloudflare: website hosting and security. It also holds a lead briefly if our enquiry system is temporarily unavailable, until it can be delivered.
- Formaloo: the assessment request form.
- Render and Supabase: host the internal system where our team receives and manages enquiries and download requests.
- Anthropic: generates the chat assistant's replies.
- Our email hosting provider: carries email you send to [email protected].
- Our email newsletter provider: sends the SGT Security Briefing to subscribers.
We may also disclose personal data where the law requires it, or to establish or defend a legal claim.
Transfers outside Ghana
Several of these providers store or process data outside Ghana. The database behind our enquiry system is hosted in the European Union (Ireland), and its application server in the United States (Oregon). Formaloo, the assessment form provider, is a US company whose form servers are in the United States; its policy says customer data is hosted in the European Union by default. Anthropic, which powers the chat assistant, is a US company, and Cloudflare runs a global network. We use established providers that commit to protecting data under their contract terms, and we send them only what is needed.
How long we keep it
- Enquiries and download requests that do not lead to work: kept for 24 months after our last contact with you, then deleted.
- Enquiries that lead to work: kept with the client file for as long as the engagement terms require.
- Marketing consent: kept while you are subscribed. If you unsubscribe, we keep a note of that so we do not email you again.
- Request counts used for abuse protection: about one minute.
How we protect it
The site is served only over encrypted connections (HTTPS). Our enquiry system is restricted to named SGT staff, and our forms are protected against automated abuse. No system is perfectly secure. If we become aware of a breach that affects you, we will tell you and the Data Protection Commission as the law requires.
Your rights
Under the Data Protection Act, 2012 (Act 843), you can ask us to:
- tell you whether we hold personal data about you, and give you a copy;
- correct data that is inaccurate or incomplete;
- delete data we no longer have a reason to keep;
- stop processing your data for direct marketing, at any time and at no cost;
- stop other processing that causes you unwarranted damage or distress.
To use any of these rights, email [email protected] with the subject "Privacy request". We may ask you to confirm your identity, and we will reply within 21 days. Every marketing email will also include an unsubscribe link.
If you are not satisfied with our response, you can complain to Ghana's Data Protection Commission (dataprotection.org.gh).
Children
This site is for organisations and professionals. It is not aimed at anyone under 18, and we do not knowingly collect their data.
Changes to this notice
We will update this page when the way we handle data changes, and revise the "last updated" date above. If a change significantly affects how we use data you have already given us, we will tell you directly.