Privacy Policy

Effective date: 1 April 2024

Coreimpulses respects the privacy of our clients, partners, and website visitors. This policy explains how we collect, use, disclose, and safeguard personal data in line with the Ghana Data Protection Act 2012 (Act 843) and relevant regulations.

1. Identity of the data controller

Coreimpulses operates as the data controller for information processed through our website and professional engagements. You can reach us at:

2. Personal data we collect

We collect personal data only when necessary for legitimate business purposes or when you provide it voluntarily. Categories include:

  • Identity data: full name, job title, company, and demographic information provided during consultations.
  • Contact data: email address, phone number, physical address, and preferred communication channels.
  • Financial context data: details regarding income, expenses, savings goals, and investment preferences when directly relevant to engagements.
  • Usage data: website navigation, device type, and interaction logs obtained through analytics tools.
  • Consent records: documentation of approvals for data processing, marketing communication, or cookie usage.

3. Purposes of processing

We use personal data for the following purposes:

  • Delivering financial guidance services, including assessments, planning, and follow-up.
  • Responding to enquiries and maintaining client relationships.
  • Fulfilling contractual obligations and invoicing where applicable.
  • Improving our products and services through aggregated analytics.
  • Meeting legal and regulatory requirements under Ghanaian law.

We process data based on consent, legitimate interest, or contractual necessity. When we rely on consent, you may withdraw it at any time.

4. Data sharing and disclosures

We do not sell personal data. We may share information with trusted third parties under the following circumstances:

  • Service providers assisting with communication, secure document storage, or analytics.
  • Professional advisors (legal, accounting, compliance) bound by confidentiality obligations.
  • Government authorities when legally required to provide information.

All third-party processors sign agreements requiring them to handle data securely and limit usage to agreed purposes.

5. International data transfers

Coreimpulses primarily stores data within Ghana. In limited instances where partners operate outside Ghana, we ensure appropriate safeguards such as contractual clauses that align with Ghanaian data protection standards.

6. Data security

We implement technical and organisational measures to protect personal data, including encrypted storage, access controls, and regular security reviews. Staff receive training on confidentiality obligations and responsible handling of sensitive information.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy. In most cases, records related to engagements are stored for up to seven years to comply with regulatory requirements. When data is no longer needed, we securely delete or anonymise it.

8. Your rights

Under the Ghana Data Protection Act, you have the right to:

  • Request access to personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion where data is no longer needed or consent is withdrawn.
  • Object to processing based on legitimate interest.
  • Request restriction of processing in certain circumstances.
  • Receive personal data in a portable format when technically feasible.

To exercise these rights, contact us using the details provided above. We will respond within the timelines set by Ghanaian law.

9. Children’s data

Our services are intended for adults. We do not knowingly collect personal data from individuals under 18 years without parental or guardian consent. If we learn that a minor has provided personal data without proper consent, we will delete it promptly.

10. Complaints

If you believe your privacy rights have been violated, please contact us first so we can seek resolution. You may also lodge a complaint with the Data Protection Commission of Ghana.

11. Updates to this policy

We may update this policy to reflect changes in our practices or legal obligations. When updates occur, we will revise the effective date and post the updated policy on our website.