Privacy Policy

Who we are

The Asante Cultural and Traditional Institute (ActiGhana) is the data controller responsible for the personal information described in this Privacy Policy. We teach and safeguard the heritage of the Asante people from Kumasi.

Visit: 410 West End Hospital Bypass, Kumasi
Call: +233 244 525 522
Email: info@actighana.org

Information we collect

We collect only what we need to reply to you, run a course, or complete an order.

• Contact messages. When you use the contact form we receive the details you enter, such as your name, email address, and message.
• Shop orders. Checkout asks for your name, email address, phone number, and delivery address, together with the items in the order.
• Card payments. If you pay by card, you enter the card details on Paystack’s page. We receive the result of the payment. We do not store your full card number on this website.
• Accounts. If you create an account, we store your name, email address, authentication credentials, and the orders linked to that account. Passwords are stored in hashed form. We cannot read them as the password you typed.
• Courses. If you ask about or join a course, we keep the contact details and course information you give us so we can reply, confirm a place, and run the course.
• Technical data. The server may record your IP address, browser type, and the pages you open. We use that to keep the site secure and to understand which pages are used.

How we use it

We use personal information to answer messages, process and deliver shop orders, run courses, keep accounts and the website secure, and meet record-keeping duties that apply to a sale or a programme. We do not sell personal information.

Our legal grounds

We process personal information where you have given consent, where processing is necessary to fulfil or prepare a contract with you, where the law requires us to keep or use information, or where we have a legitimate operational interest that does not unfairly interfere with your privacy.

• A shop order or a delivery. Contract.
• A confirmed course place. Contract.
• A reply to an enquiry. Consent, or our interest in answering people who contact us.
• Accounting records. A legal duty.
• Security logs. Our interest in keeping the site secure.
• A promotional message. Your consent. We do not treat an order as consent to marketing.

Cookies

Cookies are small text files stored by your browser. We use essential cookies so the site can work, and the contact page loads Google Maps, which is a third-party service.

• Shop. WooCommerce sets a session cookie so the cart remembers your items while you browse.
• Account. If you log in, WordPress sets cookies that keep you signed in. Choosing “Remember me” keeps that login for longer. Logging out removes the login cookies.
• Cookie notice. If you accept the cookie notice, the site stores a cookie named ocn_accepted for about a month so the notice is not shown on every page.
• Comments. If you comment on the blog and opt in, your name and email can be stored in cookies so the next comment form is already filled in.
• Google Maps. The contact page embeds a map. When that map loads, Google may receive your IP address and set its own cookies. Google’s privacy policy applies to that service.
• Paystack. If you pay by card, Paystack’s payment page may set its own cookies. That happens on Paystack’s site.

You can block cookies in your browser. The cart, login, and cookie notice will not work in the same way without the essential cookies. We do not use a separate analytics or advertising cookie on this site.

Who we share it with

We share information only where a task requires it. Service providers may process information for us, including outside Ghana, and only for the task we give them.

• Delivery. We may give your name, phone number, delivery address, and the details needed for the order to the person who delivers it, including a courier if we use one.
• Paystack. If you pay by card, Paystack processes the payment and receives the information needed to do that. Paystack’s privacy policy is at paystack.com/privacy.
• Email. Order notices and contact-form messages are sent through the website’s email service.
• Google Maps. The contact page embeds Google Maps. Google’s privacy policy is at policies.google.com/privacy.
• Hosting. The website is stored with a web host that processes the information needed to serve the pages.

We may also disclose information if the law requires it, or to protect the institute, our visitors, or the site.

How long we keep it

We do not keep personal information for longer than we need it, unless the law requires a longer period.

• Enquiries. Contact and course enquiries are deleted when they are no longer needed for the enquiry or for a related record.
• Orders. Order and payment records are kept for as long as accounting, tax, legal, and dispute-resolution duties require.
• Accounts. Account details are kept while the account is open. After you ask us to close it, we delete them except for records we are still required to keep.
• Security logs. Server logs are kept only for a limited period needed for security and troubleshooting.

How we protect it

We use reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, disclosure, or destruction. Access is limited to people and service providers who need it for their work. Account passwords are stored in hashed form. Full card numbers are handled by Paystack and are not stored on this website. No online service can promise that information will never be at risk.

If something goes wrong

If we become aware of a personal-data breach, we will investigate it and notify the Data Protection Commission and affected people where the law requires that.

Your rights

Under the Data Protection Act, 2012 (Act 843) of Ghana, you can:

• ask for a copy of the personal information we hold about you. We will respond within 40 days, unless the law allows longer;
• ask us to correct information that is wrong;
• ask us to delete information where we have no lawful reason to keep it;
• object to certain uses of your information;
• tell us to stop sending you direct marketing;
• withdraw consent where we rely on consent. That does not affect a use that was already lawful;
• complain to us first, using the contact details below;
• complain to the Data Protection Commission of Ghana.

We may need to confirm who you are before we act on a request. Write to info@actighana.org.

Marketing

We do not send promotional email, text messages, or WhatsApp messages unless you have asked us to. You can tell us to stop at any time, and we will stop. Messages about an order or a course place you asked for are not marketing, and we can send those without a separate consent.

Contact

Visit: 410 West End Hospital Bypass, Kumasi
Call: +233 244 525 522
Email: info@actighana.org

If we change this page, the new version will be posted here with a new date.