Ghana DPA Compliance

GDPC Compliance

Our commitment to the Data Protection Act, 2012 (Act 843) and the rules of the Data Protection Commission of Ghana.

Effective date: 24 April 2026  ·  Last reviewed: 24 April 2026  ·  Version: 1.0

1. Our commitment

Klensec Group of Companies is committed to protecting the personal data of our customers, suppliers, employees, and website visitors. We comply with the Data Protection Act, 2012 (Act 843) of Ghana and the directions of the Data Protection Commission (the "DPC" or "GDPC").

2. The eight data protection principles (s. 17, Act 843)

We process all personal data in line with the eight principles set out in the Act:

1. Accountability

We take responsibility for the personal data we hold and can demonstrate compliance.

2. Lawfulness of processing

We only process personal data on a lawful basis (consent, contract, legal obligation, or legitimate interest).

3. Specification of purpose

We collect data for specified, explicit, and legitimate purposes — and tell you what they are.

4. Compatibility of further processing

We do not reuse data for purposes incompatible with the original purpose.

5. Quality of information

We keep personal data accurate, complete, and up to date.

6. Openness

We are transparent about who we are and how we handle your data — through this notice and our Privacy Policy.

7. Data security safeguards

We apply organisational and technical safeguards to protect data from loss, misuse, or unauthorised access.

8. Data subject participation

We respect your rights to access, correct, and request deletion of your data.

3. Lawful basis for processing

We rely on the lawful bases set out in section 20 of Act 843 — primarily consent, contract, legal obligation, and legitimate interest. Detail of which basis applies to which activity is set out in our Privacy Policy.

4. Your rights

Part V of Act 843 grants you the right to:

  • Be informed about how your data is collected and used
  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Block or erase personal data being processed unlawfully
  • Object to processing for direct marketing
  • Withdraw consent at any time
  • Complain to the Data Protection Commission

Full details on how to exercise these rights are in our Privacy Policy — Section 9.

5. Data breach notification

If a personal data breach occurs that is likely to cause serious harm to your rights, we will notify the Data Protection Commission and affected individuals as required by section 31 of Act 843, without undue delay.

If you suspect a breach involving your data, please contact us immediately using the details in the footer of this site.

6. Data Protection Commission of Ghana

You have the right to lodge a complaint with the Data Protection Commission if you believe your rights under Act 843 have been infringed.

7. Related documents