Our Commitment

Nkoala (“we,” “our,” “us”) is committed to protecting the privacy and security of your personal data. This Data Protection Policy outlines how we collect, use, store, and safeguard your information in compliance with the Ghana Data Protection Act, 2012 (Act 843) and other applicable data protection laws.

Data We Collect

We collect and process the following categories of personal data:

• Identity Data: Name, title, date of birth (if provided).
• Contact Data: Email address, phone number, billing/shipping address.
• Transaction Data: Payment details, purchase history, order information.
• Technical Data: IP address, browser type, device identifiers.
• Usage Data: Information about how you interact with our website and services.
• Marketing & Communications Data: Your preferences for receiving marketing from us.

How We Use Your Data

We process your data for legitimate business purposes, including:

• Processing orders and delivering products.
• Communicating with you about your orders, consultations, or inquiries.
• Improving our website, products, and customer service.
• Complying with legal obligations (e.g., tax, fraud prevention).
• Sending promotional communications (only with your consent).

We do not sell or rent your personal data to third parties.

Data Security & Storage

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include:

• Secure servers and encrypted transmissions (SSL/TLS).
• Access controls and restricted user permissions.
• Regular security assessments and staff training.

Your data is retained only as long as necessary for the purposes outlined in this policy, or as required by law.

Your Data Protection Rights

Under Act 843, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no compelling reason for continued processing.
• Right to restrict processing: Limit how we use your data.
• Right to object: Object to processing based on legitimate interests or direct marketing.
• Right to data portability: Receive your data in a structured, commonly used format.

To exercise these rights, contact us using the details below. We will respond within 30 days.

Data Transfers

We operate primarily in Ghana, but may transfer data to service providers located in other countries (e.g., payment processors, cloud storage). When we do so, we ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses or adequacy decisions where applicable.

Cookies & Tracking

Our website uses cookies to enhance user experience and analyse site traffic. You can manage cookie preferences through your browser settings. For detailed information, please see our Cookie Policy.

Children’s Data

Our products and services are intended for adults (parents and caregivers). We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us so we can delete it.

Changes to This Policy

We may update this Data Protection Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

Complaints

If you believe we have not complied with data protection laws, you have the right to lodge a complaint with the Data Protection Commission of Ghana. However, we ask that you first contact us to resolve any concerns.