1. Who we are
This Privacy Policy is issued by Klensec Group of Companies, a diversified group incorporated in Ghana and headquartered in Kumasi (referred to in this policy as "Klensec", "we", "us", or "our").
Klensec is the data controller of personal data collected through this website (klensec.com) and through any direct interaction with our Consult, Farms, Autos, and KlensecRent divisions.
2. What data we collect
Depending on how you interact with us, we may collect:
Identity & contact data
- Full name, business name (where applicable)
- Email address, phone number, WhatsApp number
- Postal or delivery address
- Government-issued ID details (only where required for vehicle sales, rentals, or KYC)
Transaction & service data
- Enquiry details (vehicle of interest, project scope, produce orders, viewing requests)
- Quotations, invoices, receipts, and payment records
- Vehicle inspection reports and rental agreements
Technical data (when you visit this website)
- IP address and approximate location (city/region only)
- Browser type, device type, operating system
- Pages visited, referring URL, timestamps
We do not knowingly collect sensitive personal data such as race, ethnicity, political opinions, religious beliefs, biometric data, or health information through this website.
3. How we collect it
- Directly from you — when you fill in a contact form, request a quote, place an order, or call/email us
- Automatically — when you browse this website, our web server logs basic technical data for security and reliability
- From third parties — payment processors, vehicle inspection providers, and (for KlensecRent) booking platforms, where you have authorised them to share your data with us
4. Why we use it (lawful basis)
Under section 20 of Act 843, we process your data on one or more of the following lawful bases:
- Consent — when you explicitly agree (e.g. opting in to marketing)
- Contract — to deliver a vehicle, complete a project, fulfil an order, or honour a rental booking
- Legal obligation — to comply with Ghanaian tax, customs, transport, or other regulatory requirements
- Legitimate interest — to operate our business, secure our systems, prevent fraud, and respond to enquiries
5. Who we share it with
We do not sell your personal data. We share it only with:
- Service providers acting on our behalf — payment processors, courier and logistics partners, IT and cloud hosting providers, accounting and audit firms — under written confidentiality terms
- Government and regulatory bodies — Ghana Revenue Authority, DVLA, customs, the Data Protection Commission, and law enforcement, where we are legally required to do so
- Professional advisers — our lawyers, auditors, and insurers
- Affiliates within the Klensec Group — Consult, Farms, Autos, and KlensecRent divisions, where necessary to deliver a service you have requested
6. Cookies and similar technologies
This website uses strictly necessary cookies only. These are required to keep the site running (e.g. remembering your cookie consent choice, keeping your session active). We do not currently use analytics, advertising, or tracking cookies.
If we add analytics or marketing cookies in the future, we will update this policy and re-prompt you for consent through the cookie banner.
You can manage cookies in your browser settings at any time.
7. How long we keep it
- Contact enquiries — up to 24 months from last contact
- Vehicle sales & rental records — at least 6 years (tax and customs requirements)
- Project and contract records (Consult) — at least 6 years after project completion
- Web server logs — up to 90 days
After these periods, we securely delete or anonymise the data unless we are required to keep it longer by law.
8. How we protect it
We apply organisational and technical safeguards including:
- HTTPS/TLS encryption for all data transmitted to and from this website
- Access controls — staff access personal data only on a need-to-know basis
- Encrypted storage for sensitive records
- Regular backups and incident response procedures
- Confidentiality obligations on all staff and third-party processors
If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Data Protection Commission and affected individuals as required by section 31 of Act 843.
9. Your rights as a data subject
Under Part V of the Data Protection Act, 2012 (Act 843), you have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate or incomplete data
- Request deletion of your data where we no longer have a lawful basis to keep it
- Object to processing for direct marketing
- Withdraw consent at any time, where consent is the basis for processing
- Lodge a complaint with the Data Protection Commission of Ghana (see Section 13)
To exercise any of these rights, contact us using the details in Section 13. We will respond within 30 days.
10. Children's data
Our services are intended for adults (18+). We do not knowingly collect personal data from children under 18. If you believe we hold data about a child, please contact us and we will delete it promptly.
11. Cross-border transfers
Some of our service providers (e.g. cloud hosting, email) may store data on servers outside Ghana. Where this happens, we ensure the provider applies an adequate level of protection equivalent to that required by Act 843, through contractual safeguards.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Effective date" at the top of this page shows when it was last changed. Material changes will be communicated through a notice on this website.
13. Complaints to the regulator
To raise a privacy concern with us directly, please use the contact details in the Contact page or the footer of this site.
If you are not satisfied with our response, you may lodge a complaint with the Data Protection Commission of Ghana:
- Website: www.dataprotection.org.gh
- Email: info@dataprotection.org.gh
- Address: 3rd Floor, Premier Towers, Liberia Road, PMB CT 471, Cantonments, Accra, Ghana