1. Who we are
Yanutek LTD is the data controller responsible for your personal data. Our registered office is at 4th Kofi Portuphy Street, OSU, Accra — Ghana. For any privacy question, contact privacy@yanutek.com.
2. Scope
This policy covers personal data we collect through our website, contact channels, and the delivery of our cybersecurity, IT, and data protection services. Where we process personal data on behalf of a client, we act as a processor and that processing is governed by our Data Processing Addendum (DPA).
3. Personal data we collect
- Contact submissions: name, email, company, phone, and the content of your message.
- Account data (administrators only): email and authentication metadata for our internal admin portal.
- Technical data: IP address, user-agent, and server logs collected for security, abuse prevention, and operating the site.
We do not knowingly collect data from children under 16.
4. How we use your data and lawful bases
| Purpose | Lawful basis (GDPR Art. 6) |
|---|---|
| Respond to enquiries and provide services | Contract / pre-contractual steps |
| Operate, secure, and monitor the site | Legitimate interest (network and information security) |
| Comply with legal obligations | Legal obligation |
| Optional marketing communications | Consent (you can withdraw at any time) |
5. Sharing and recipients
We share personal data only with:
- Vetted sub-processors that host our infrastructure, email, and backend services.
- Professional advisers (lawyers, auditors) bound by confidentiality.
- Authorities where required by law or to protect our rights.
We never sell or rent personal data.
6. International transfers
Our infrastructure providers may process data outside Ghana, the EEA, or the UK. Where such transfers occur, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, together with supplementary technical measures.
7. Retention
We keep personal data only as long as necessary for the purposes set out above, to comply with legal obligations, or to resolve disputes. Contact enquiries are kept for up to 24 months; admin account records are retained for the life of the account and for a reasonable archival period afterwards.
8. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, role-based access control, least-privilege administration, and continuous monitoring. No system is perfectly secure; you use the site at your own risk.
9. Your rights
Depending on where you live, you have the following rights:
- Ghana (Data Protection Act, 2012): right to access, correct, block, erase, and object to processing of your personal data (ss. 35–42), and to lodge a complaint with the Data Protection Commission of Ghana.
- EU/UK (GDPR/UK GDPR): rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. You may also complain to your local supervisory authority (e.g. the UK ICO).
- California (CCPA/CPRA): right to know, delete, correct, and limit use of sensitive personal information, and to opt out of "sale" or "sharing". We do not sell or share personal information as those terms are defined under California law.
To exercise any right, email privacy@yanutek.com. We respond within 30 days (or as required by applicable law) and will not discriminate against you for exercising a right.
10. Cookies
We use only strictly necessary cookies. See the Cookie Policy for details.
11. Changes to this policy
We may update this policy from time to time. Material changes will be highlighted on this page with a new "Last updated" date.
12. Contact
Questions or requests? Email privacy@yanutek.com or write to us at 4th Kofi Portuphy Street, OSU, Accra — Ghana.