Privacy Policy

Business owners and their staff. Osem Technologies decides how your account information is used, so we are responsible for it.

Customers of businesses on Storefront GH. When you order, book, enquire or pay on a business's website, that business decides how your information is used and is responsible for it. We store and process it on the business's behalf. For questions about an order or booking, contact the business first; we will help where we can.

From business owners and staff:

• Account details: name, email address and password (stored only as a secure hash).
• Business details: business name, type, description, phone, address, logo, opening hours and website content.
• Payout details, if you take payments: owner name, bank or mobile money provider, account number and account name.
• Billing and plan information, and messages you send us.

From customers, on a business's behalf:

• Name, phone number, email and delivery address you give when ordering, booking or making an enquiry.
• What you ordered or booked, and the amounts.
• Payment information: your phone number, the amount, and the result and reference of the payment. Card details are entered on the payment provider's secure page and never reach our servers.

Automatically:

• Login cookies that keep you signed in. See our Cookie Policy.
• A count of page views on each business's website. We record only that a page was viewed, not who viewed it.
• Technical logs kept by our hosting providers, such as IP address, browser and time of request, used for security and to fix problems.

• To create and run your account, publish your website, and process orders, bookings and payments.
• To send service emails: account confirmation, password resets, payment and order notifications, and receipts.
• To verify businesses, prevent fraud and abuse, and keep Storefront GH secure, for example by limiting repeated sign-in or payment attempts.
• To provide support and improve Storefront GH.
• To meet legal, tax and accounting obligations.

• To perform our contract with you, such as running your account and processing payments.
• Legal obligations, such as keeping financial records.
• Legitimate interests, such as preventing fraud and keeping the service secure, balanced against your rights.
• Your consent, where we ask for it. You can withdraw consent at any time.

We never sell personal information. We share it only with:

• The business you are dealing with, for customers who order, book or pay on its site.
• Service providers who run parts of Storefront GH for us under contract: Supabase (database, sign-in and file storage), Vercel (hosting) and Resend (email delivery).
• Payment providers, to process and settle payments: Paystack, MTN Mobile Money and, where used, PawaPay. They handle payment information under their own privacy policies and legal obligations.
• Authorities, where the law requires it or to protect people from fraud or harm.
• A buyer or successor, if our business is reorganised or sold, under this policy.

Some of our service providers store information on servers outside Ghana. When information leaves Ghana, we use providers with strong security and contractual protections for personal data.

• Account and website information: while your account is open. When you close it, we delete or anonymise it within 90 days, except as below.
• Payment, order and billing records: for as long as tax and financial laws require, after which they are deleted.
• Security logs: for a limited period, usually no more than 12 months.

Information is encrypted in transit, passwords are stored as one-way hashes, and access to data is restricted so each business can only see its own information. We limit repeated attempts to sign in, reset passwords or start payments. No system is perfectly secure; if a breach affects your personal information, we will tell you and the Data Protection Commission as the law requires.

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete information we no longer need or have no right to keep;
• stop or limit using it for particular purposes, including any marketing.

Email support@osemtech.com from the address on your account. We may need to confirm your identity, and will reply within 21 days. Customers of a business on Storefront GH should contact that business first. If you are not satisfied, you can complain to the Data Protection Commission of Ghana.

Storefront GH is for businesses and is not meant for anyone under 18. We do not knowingly collect information about children. If you think a child has given us information, contact us and we will delete it.

We will post any changes here with a new date. If a change significantly affects how we use your information, we will tell you by email or in your dashboard before it applies.