This policy sets out how Woodkraft protects personal data, under the Data Protection Act, 2012 (Act 843) of Ghana. Woodkraft is a product of Scope Interior, which is registered with the Data Protection Commission as the data controller (registration number [DPC NUMBER]).
1. Who is responsible
- Scope Interior, trading as Woodkraft, is the data controller for accounts, licences, the marketplace and notifications.
- Each Supplier is a data controller for the customer details it receives to fulfil orders.
- Paystack processes payment details as an independent, licensed payment service provider.
- Cloudflare, Resend and Hubtel process data for us under written terms.
2. The principles we follow
Following the principles in Act 843:
- Accountability: a named person at Woodkraft is responsible for data protection. Contact: support@woodkraftgh.com.
- Lawful processing: we process data to provide the service you asked for, to meet legal duties, or with your consent.
- Purpose: each kind of data is collected for a stated purpose (see the Privacy Policy), and not used for unrelated ones.
- Minimum data: we collect only what that purpose needs. Jobs and designs stay on your computer by default.
- Quality: you can correct your details at any time.
- Openness: this policy and the Privacy Policy say what we do.
- Security safeguards: see the Security Policy.
- Your participation: you can see, correct and delete your data (section 4).
3. Access by Woodkraft staff
Only authorised Woodkraft administrators can see data across organisations, only to run, support and protect the platform. They must use two-factor sign-in, and every action they take is written to a tamper-evident audit log.
4. Your rights
You may ask to see your personal data, have it corrected or deleted, or object to its use. Email support@woodkraftgh.com; we confirm who you are and reply within 21 days. Records we must keep by law (such as payment records) are kept but no longer used for anything else.
5. Data breaches
If personal data is lost or accessed without authority, we contain it, notify the Data Protection Commission and the people affected as soon as reasonably possible, say what happened and what to do, and record it.
6. Transfers outside Ghana
Some processors store data outside Ghana. We use only providers with security measures and contractual protections at least as strong as Ghana's law requires.
7. Children
Woodkraft is not meant for children under 18 without a parent's or guardian's permission, and we do not knowingly collect their data.
8. Review
We review this policy at least once a year and when the platform changes.