1. Our commitment
You trust us with your identity documents, company records and financial information. We treat that information with the discretion of a professional firm. This Policy explains what we collect, why, who we share it with, how we protect it and the rights you hold under the Data Protection Act, 2012 (Act 843).
BizAccess Consult Limited, including its BizAccess Travel division, is the data controller for personal data processed under this Policy. Data Protection Commission Registration No. CS068902018.
2. Scope of policy
This Policy applies to clients, prospective clients, website and tool users (including the Compliance Requirements Generator and Career Compass), directors, shareholders and beneficial owners named in client filings, sponsors and guarantors of travel applicants, and agents and partners.
3. Information we collect
| Category | Examples |
|---|---|
| Identity | Full name, date of birth, nationality, Ghana Card, passport, photographs, signatures |
| Contact | Phone, email, residential and postal address, digital address |
| Corporate | Business name, objects, directors, shareholders, beneficial owners, stated capital, TIN, registration documents |
| Financial | Bookkeeping records, bank details, payroll data, tax filings, invoices, payment records |
| Travel | Academic records, passports, travel history, employment history, statements and letters you supply, sponsor details |
| Technical | IP address, device and browser data, cookies, pages visited, tool inputs |
Payment Security: We do not store full payment card details. Card and mobile money payments are processed securely by our licensed payment provider.
Sensitive Data: We collect sensitive data, such as health information on a visa medical form, only where a Service strictly requires it and with your explicit consent.
4. How we collect it
- Directly from you through our platform, forms, email, phone, WhatsApp and USSD
- From our agents and partners who refer you to us
- From Authorities, banks and licensed Audit Firms in the course of delivering your Service
- Automatically through our website and interactive tools
Where you give us data about another person (such as a director, shareholder, or sponsor), you confirm that you have their permission and have informed them about this Privacy Policy.
5. Why we use it
We do not use your data for any purpose incompatible with the legal bases specified below:
| Purpose | Legal Basis under Act 843 |
|---|---|
| Delivering the Services you order | Performance of our contract with you |
| Filing with Authorities, KYC, anti-money laundering checks, tax and record-keeping duties | Legal obligation |
| Billing, payment collection and fraud prevention | Contract and legitimate interest |
| Service updates, deadline reminders and customer support | Contract |
| Improving our platform and tools | Legitimate interest |
| Marketing of our services | Your consent, which you may withdraw at any time |
Communications Data: Includes emails, WhatsApp and SMS messages, call notes, and support inquiries.
7. International transfers
Some Services require transfers outside Ghana: to foreign embassies, overseas universities, international employers, foreign investors' advisers, or trusted cloud service providers. We transfer data only as needed for your Service and take reasonable steps to ensure it is protected to a standard consistent with Act 843.
8. How we protect it
We apply appropriate technical and organizational measures to ensure your data is secure:
- Encrypted transmission (SSL/TLS) and secure, access-controlled cloud storage
- Role-based staff access restricted on a strict need-to-know basis
- Confidentiality obligations in all staff, agent and partner agreements
- Regular staff training on data protection and privacy compliance
- Security standards aligned with the Cybersecurity Act, 2020 (Act 1038)
No system is completely immune to security threats. If a breach compromises your personal data, we will promptly notify the Data Protection Commission and you as required by Act 843, and take immediate steps to contain it.
9. How long we keep it
- Corporate and tax records: Retained for at least six years after the end of the relevant financial year, or longer where statutory regulations require.
- KYC records: Retained for the statutory duration required by the Anti-Money Laundering Act, 2020 (Act 1044).
- Travel files: Retained for two years after the Service concludes, unless you ask for earlier deletion and no statutory provision requires retention.
- Marketing data: Retained until you withdraw consent.
- Website and tool logs: Retained for up to 24 months.
Following the applicable retention period, data is securely erased or irrevocably anonymised.
10. Your rights
Under the Data Protection Act, 2012 (Act 843), you hold several fundamental rights:
- Right of Access: Ask whether we hold your personal data and request a copy.
- Right to Rectification: Request correction of inaccurate, incomplete, or out-of-date records.
- Right to Erasure: Request deletion of personal data we are not legally obligated to maintain.
- Right to Object: Object to processing for direct marketing at any time, or where processing causes damage or distress.
- Right to Withdraw Consent: Revoke consent at any time where processing was grounded on consent.
To exercise your rights, email admin@bizaccess.co. We verify your identity and respond within 21 days. Please note that requesting deletion of essential records may terminate ongoing Services.
11. Marketing communications
We send direct marketing messages only where you have explicitly opted in. Every email, SMS, or notification provides an easy, one-click mechanism to unsubscribe.
Opting out of promotional messages does not affect essential service communications, such as statutory filing reminders, account alerts, or invoice notifications.
13. Children's privacy
Our standard services are designed exclusively for adults. Where a BizAccess Travel or Career Compass applicant is under 18, a verified parent or legal guardian must provide written authorization before we process personal data beyond what is needed to verify consent. We never knowingly market to children.
14. Changes to this policy
We periodically review and update this Privacy Policy. Any updates will be posted to our website with an updated revision date. Material revisions will be highlighted or communicated directly to active clients by email.
15. Contact and complaints
If you have questions, data requests, or concerns regarding your privacy, contact our Data Protection Officer:
- Data Protection Officer, BizAccess Consult Limited
- House No. F457/2, Troas Crescent, near Trust Mother and Child Hospital, Osu, Accra, Ghana
- Email: admin@bizaccess.co
- Phone: +233 (0) 59 690 0005
If you believe we have not resolved your concern adequately, you have the right to lodge a formal complaint with the Data Protection Commission of Ghana.
