Privacy Policy

Compliant with the Ghana Data Protection Act, 2012 (Act 843) | Effective Date: August 01, 2026

Contents

At BnBIT Services, we prioritize the protection and confidentiality of your personal and business data. This Privacy Policy outlines how we collect, store, process, and protect your information when you interact with our platform.

1. Legal Framework & Overview

BnBIT Services operates in strict compliance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana. We adhere to key privacy principles of transparency, data minimization, accuracy, and robust security safeguards.

2. Information We Collect

We collect information to provide, secure, and improve our services:

Account Credentials Full name, work email address, phone number, gender, date of birth, district, department, and passwords.
Google OAuth Data Email address and identity payload provided directly via Google Services.
Billing & Transaction Proof Mobile Money (MoMo) or GTBank transaction references, quote requests, and invoice records.
System Telemetry Document download counts, LMS(Learning Management System) course progress percentages, and automated client spend metrics.

3. How We Use Your Data

Your information is used strictly for legitimate business purposes:

  • Authenticating user sessions and managing staff/client access permissions.
  • Processing course enrollments, LMS progress tracking, and certificate issuance.
  • Verifying invoice payment references and approving deliverable download access.
  • Sending 2-step verification codes (OTP), welcome insights, and account notifications.
  • Generating automated background telemetry to improve platform health and client support.

4. Data Security & Storage

We employ enterprise-grade security protocols to protect your data against unauthorized access, loss, or alteration:

  • Encryption: All passwords are salted and hashed. Passwords are never stored in plain text.
  • Transmission: All web traffic is encrypted in transit using SSL/TLS protocols (HTTPS).
  • Access Control: Internal staff access to client records is strictly role-based and monitored.

5. Third-Party Sharing

We do not sell, rent, or trade your personal information. Third-party integrations are limited to necessary infrastructure providers:

  • Google Identity Services: Used solely for secure OAuth sign-in authentication.
  • SMTP Email Gateway: Used strictly to dispatch verification OTPs, welcome guides, and transactional notifications.

6. Retention & Automated Data Cleanup

We retain personal data only for as long as necessary to fulfill service commitments.

Automated System Purge: System notifications older than 6 months are automatically permanently deleted from our database during system maintenance runs.

7. Your Data Protection Rights

Under the Data Protection Act (Act 843), you have the right to:

  • Access and review personal information stored in your client profile.
  • Request corrections to inaccurate or incomplete account details.
  • Request soft-deletion or account termination from our system.

8. Cookies & Session Management

Our platform utilizes encrypted HTTP Session cookies (`UserType`, `UserId`, `UserEmail`) strictly for maintaining active authentication states while you browse our portal. We do not use intrusive third-party tracking cookies.

9. Contact Privacy Office

For questions regarding this Privacy Policy or to exercise your data rights, contact us at:

BnBIT Services Data Protection Officer

Jama-Techiman (Bono East), Ghana

bnbitservices2022@gmail.com

+233 (0) 20 844 4063 / +233 (0) 24 301 1261