Trust Centre
Data processing & transfers
How we handle the data you share with us during an engagement: what we use it for, who else processes it, where it goes, and how it is returned or deleted.
The principle
We use client data only to deliver the work you commissioned, and only the data the work needs. Terms for each engagement are agreed in writing before any personal data is shared.
Subprocessors
We rely on a small number of service providers, such as email, file storage and, where you approve it, specific AI tools. The providers used for your engagement are named in the contract, and we tell you before adding one.
International transfers
Our principals work from Ghana and elsewhere, and our providers may process data in other countries. Where the law requires transfer safeguards, such as for personal data of people in the EU or UK, they are agreed in the contract before any transfer.
Return and deletion
At the end of an engagement we return or delete client data as the contract specifies, and keep only what the law or the contract requires us to keep.
Laws we work under
Ghana’s Data Protection Act, 2012 (Act 843) applies to our processing in Ghana. The GDPR and UK GDPR apply where we process personal data of people in the EU or UK. A data-processing agreement is available on request.
What needs to move forward?
Tell us the decision, the challenge or the opportunity. We reply with a scoped approach, a named principal and a fee before any work begins.
No charge to submit an enquiry.