Privacy Policy

This policy explains how M&S Digital Solutions (“we”, “us”) handles personal data when you use masedigitalsolutions.com. It covers this corporate website only. Our products, such as ComfortCare, HR Ghana, Aduane Express and DigiD Ghana, have their own privacy notices that apply when you use them.

1. Who is responsible

M&S Digital Solutions, a business registered in Ghana, is the controller of the personal data described here. To contact us about your data, use the contact form, choose “General question” and start your message with “Privacy request”.

2. What we collect and why

Enquiries you send us. If you submit the contact form we receive the details you enter:

• Name and email address (required)
• Company name, telephone number and project budget range (optional)
• Enquiry type, product or service of interest, and your message

We use these only to read and reply to your enquiry and to keep a record of the conversation. We do not use them for marketing, and we do not add you to any mailing list.

Acknowledgement email. After you submit the form we send one automatic acknowledgement to the email address you gave. It contains only your first name and the product or service you selected.

Technical data. Our hosting provider records standard server logs when you visit (such as IP address, browser type, pages requested and time) for security and reliability. To prevent abuse of the contact form we temporarily store your IP address (for up to 24 hours) and, when you submit, a technical form identifier (up to 1 hour) and your email address (up to 1 hour, to limit repeat acknowledgements).

We do not use cookies, analytics, advertising or tracking technologies on this website, and we do not knowingly collect special-category (sensitive) data. Please do not include sensitive information in your message.

3. Legal basis

Where data protection law requires a legal basis, we rely on: (a) our legitimate interest in responding to business enquiries and running a secure website; and (b) taking steps at your request before entering into a contract. If you ask to exercise your rights, we also process your data to meet our legal obligations.

4. Who receives your data

Your enquiry is read by the M&S Digital Solutions team. We use the following service providers, who process data on our behalf:

• Vercel Inc. hosts this website and keeps server logs.
• Upstash, Inc. provides the short-lived rate-limiting store described above.
• Resend sends the enquiry notification and the acknowledgement email.
• Cloudflare, Inc. provides DNS and email routing for our domain, including forwarding mail sent to our official address.
• Google (Gmail) hosts the team inboxes in which enquiries are stored.

We do not sell your personal data and we do not share it with anyone else except where required by law.

5. International transfers

These providers operate globally, so your data may be processed outside Ghana, the United Kingdom and the European Economic Area, including in the United States. Where required, transfers rely on safeguards such as standard contractual clauses or an adequacy framework offered by the provider.

6. How long we keep it

• Enquiries: kept for up to 24 months after our last contact with you, then deleted. If your enquiry leads to a contract, the relevant records are kept for as long as the contract and our legal obligations require.
• Rate-limiting data: removed automatically within 24 hours.
• Server logs: kept by our hosting provider for its standard log-retention period.

7. Your rights

Depending on where you live, you may have the right to access your personal data, have it corrected or deleted, restrict or object to its use, receive a copy in a portable format, and withdraw consent where we rely on it. Applicable law may include the Ghana Data Protection Act, 2012 (Act 843) and, where relevant, the UK GDPR or EU GDPR. To exercise a right, contact us as described in section 1. We may need to verify your identity first, and we aim to respond within one month.

You may also complain to the Data Protection Commission in Ghana, which is our regulator, or to the data-protection authority where you live, such as the Information Commissioner’s Office in the United Kingdom or your local EU supervisory authority.

8. Security

The website is served over HTTPS, the contact form validates and limits input on the server, and secrets are kept out of the browser. No internet service can be guaranteed completely secure, so please avoid sending confidential information through the form.

9. Children

This website is for businesses and adults. It is not directed at children, and we do not knowingly collect their data.

10. Automated decisions

We do not make decisions about you using automated processing or profiling.

11. Links to other sites

This website links to our product websites and may link to other sites. Their privacy practices are described in their own notices.

12. Changes to this policy

We will update this page, and the date above, when our practices change. If a change would materially affect you, we will tell you in a way that is appropriate to the change.