Privacy Policy

The data controller responsible for your personal data is Scan2Tap Ltd, a company registered in Ghana, at [Accra, Ghana].

For any privacy question or to exercise your rights, email scan2tap@gmail.com or use the contact form.

We process personal data in line with Ghana’s Data Protection Act, 2012 (Act 843) and, where it applies to visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.

Information you provide

• Account information — name, email, phone number
• Profile data — title, bio, social media links
• Payment information, processed securely through Paystack (we do not store full card numbers)
• Order information — shipping address and preferences
• Any content you send us through support or the contact form

Collected automatically

• Usage data and analytics — profile views, link clicks
• Approximate location — the country and city associated with your connection, used for currency and localization
• IP address — processed to detect your location, apply rate limits, and prevent abuse; it is not stored with your profile analytics, though your transaction IP is recorded by our payment provider
• Device information — browser type, device type, operating system
• Cookies and similar technologies (see the Cookies section below)

• To provide, operate, and improve our services
• To process payments and fulfil orders
• To send you important service updates and notifications
• To analyse usage patterns and improve the experience
• To respond to your enquiries and provide support
• To detect, prevent, and address fraud, abuse, and security issues
• To comply with our legal obligations

Where the GDPR / UK GDPR applies, we rely on the following legal bases:

• Contract — to create and operate your account, process orders, and deliver the service you signed up for
• Consent — for analytics and marketing cookies, and any optional marketing communications; you can withdraw consent at any time
• Legitimate interests — to keep the service secure, prevent abuse, and improve our product, balanced against your rights
• Legal obligation — to meet tax, accounting, and other statutory requirements

Under Act 843 we process your data on the basis of your consent and to perform our agreement with you.

We do not sell your personal data. We share it only with the service providers who help us run the platform, when required by law, or with your consent. Our key processors are:

Each processor is bound to handle your data only on our instructions and to keep it secure.

Some of our providers store or process data outside Ghana, including in the United States and Europe. Where personal data of EEA/UK users is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. By using the service you understand your data may be processed in these locations.

We keep personal data only as long as necessary for the purposes above:

• Account and profile data — kept while your account is active; when you request deletion, we remove it within 30 days, except records we must keep by law
• Order and payment records — up to 6 years, to meet tax and accounting obligations
• Analytics data — stored without your IP address and kept in aggregated or de-identified form
• Support correspondence — up to 2 years after your last contact

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication and role-based access controls
• Reliance on reputable infrastructure providers with data-at-rest encryption
• Monitoring and prompt response to security issues

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Cookies are small files stored on your device. We use essential cookies to run the service and, only with your consent, analytics cookies to understand usage. When you first visit, our cookie banner lets you accept all cookies or choose essentials only; you can change your choice any time by clearing the cookies for this site in your browser.

Analytics cookies are blocked until you consent. Essential cookies are required for the service to work and cannot be switched off.

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time, without affecting prior processing

To exercise any of these, email scan2tap@gmail.com. We will respond within the timeframes required by law.

If you believe we have mishandled your data, please contact us first so we can put it right. You also have the right to lodge a complaint with a supervisory authority — the Data Protection Commission of Ghana, or, if you are in the EEA/UK, your local data protection authority (in the UK, the Information Commissioner’s Office).

Our services are not directed to children. We do not knowingly collect personal data from anyone under 16, or under the minimum age of digital consent in their country. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this privacy policy from time to time. We will post any changes on this page and update the “Last updated” date above. Significant changes will be communicated where appropriate.

To ask about this policy or exercise any of your rights, email scan2tap@gmail.com or reach us through the contact form.