Privacy Policy
Last Updated: April 8, 2026 | Effective Date: April 8, 2026
Eight Fold Cr8ation is committed to protecting your privacy. This policy explains clearly what data we collect, why we collect it, and how we protect it. Please read it carefully.
Introduction and Scope
Eight Fold Cr8ation ("we," "our," or "us") operates as a creative and digital services agency in Ghana. This Privacy Policy applies to all personal data collected through our website, client portal, mobile applications, AI tools, marketing communications, and service engagements.
We process your personal data in compliance with the Ghana Data Protection Act, 2012 (Act 843) and, where applicable, internationally recognised data protection principles. By using our services, you acknowledge and consent to the data practices described in this policy.
If you do not agree with this policy, please discontinue use of our website and services.
1. Information We Collect
Personal Information You Provide:
- Full name, email address, phone number, and postal address
- Business name, job title, and industry sector
- Payment details (processed securely - we never store raw card data)
- Account credentials (username and encrypted password)
- Project briefs, requirements, feedback, and communication records
- Survey responses, testimonials, and review submissions
- Content and materials you upload or share with us
Automatically Collected Information:
- IP address, device type, operating system, and browser information
- Pages visited, time on page, navigation flow, and click behaviour
- Referring URLs and search terms used to find our site
- Cookies, session tokens, and similar tracking data
- Geographic location (country/region level, not precise GPS)
AI Tool Interaction Data:
- Project names and descriptions submitted to our AI analysis tools
- AI-generated reports and analysis results saved to your account
- Usage patterns, feature interactions, and session history within AI features
Information from Third Parties:
- Payment and transaction data from Paystack and other payment processors
- Social media profile data (only when you explicitly connect accounts)
- Analytics data from providers such as Google Analytics
2. How We Use Your Information
We process your personal data on the following lawful bases: contract performance, legitimate business interests, legal obligations, and consent (where required). Specifically, we use your data to:
- Deliver, manage, and improve our services and digital products
- Process payments, generate invoices, and manage billing
- Communicate about your projects, orders, and service requests
- Send important notices, security alerts, and support communications
- Provide access to the client portal and project management tools
- Personalise your experience and recommend relevant services
- Conduct analytics to improve platform performance and user experience
- Detect, prevent, and investigate fraud, abuse, and security threats
- Fulfil contractual obligations and deliver agreed project outputs
- Send marketing communications about new services and offers (with consent; you may opt out at any time)
- Comply with legal and regulatory requirements under Ghanaian law
3. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your data only in the following circumstances:
Trusted Service Providers:
Third-party vendors engaged to support our operations (payment processors, cloud hosting, email delivery, analytics). All such providers are bound by data processing agreements requiring them to handle your data securely and solely for specified purposes.
AI Model Providers:
When you use our AI tools, project inputs may be transmitted to AI model providers (e.g., Google, OpenAI) solely to generate your requested output. We ensure these providers comply with appropriate data protection standards. Your data is not used for third-party model training without explicit consent.
Legal and Regulatory Authorities:
When legally required by Ghanaian or international law, court order, or regulatory authority. We will notify you of such requests where legally permitted to do so.
Business Transfers:
In the event of a merger, acquisition, or sale of business assets, your data may be transferred to the successor entity, subject to the same privacy protections described in this policy.
With Your Consent:
For any purpose not described herein, only with your prior explicit written consent.
We will never sell your personal information. Period.
4. Data Security
We implement a range of technical and organisational measures to protect your data from unauthorised access, loss, alteration, or disclosure:
- TLS/SSL encryption for all data in transit
- Encrypted storage for sensitive data at rest
- PCI-DSS compliant payment processing - we never store raw card details
- Role-based access controls and least-privilege principles
- Regular security audits, vulnerability assessments, and software updates
- Secure client portal with authenticated and session-managed access
- Staff confidentiality agreements and data handling training
No digital system is 100% secure. While we use best-practice measures, we cannot guarantee absolute security of information transmitted over the internet. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
5. Your Rights Under Ghana Data Protection Act 843
As a data subject, you have the following rights:
- Right of Access: Request a copy of personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal retention obligations)
- Right to Restrict Processing: Request we limit processing in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw previously given consent at any time without affecting prior processing
To exercise your rights, contact us at eightfoldcr8ation@gmail.com. We will respond within 30 calendar days. We may request proof of identity before processing sensitive requests.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyse usage, and support marketing. You can control cookies through your browser settings; disabling essential cookies may impair site functionality.
Essential Cookies:
Necessary for site functionality - authentication, session management, security. Cannot be disabled.
Analytics Cookies:
Help us understand visitor behaviour to improve site performance (e.g., Google Analytics).
Functional Cookies:
Remember your preferences such as language, currency, and display settings.
Marketing Cookies:
Used to deliver relevant advertising and measure campaign effectiveness - only activated with your consent.
A cookie consent banner appears on your first visit. You can update your preferences at any time via our cookie settings.
7. Data Retention
We retain personal data only as long as necessary for the stated purposes or as required by law:
- Active account data: retained for the duration of the account relationship
- Closed account data: retained for up to 2 years after closure
- Financial and project records: retained for 7 years (Ghana Revenue Authority requirements)
- AI analysis history: retained for 12 months, then deleted unless you request otherwise
- Marketing communication preferences: retained until opt-out is exercised
- Legal claim evidence: retained for the applicable statutory limitation period
After retention periods expire, data is securely deleted or anonymised.
8. International Data Transfers
Our services use cloud infrastructure and AI providers that may process your data outside Ghana. Where data is transferred internationally, we ensure appropriate safeguards are in place - including standard contractual clauses and data processing agreements - to protect your data to a standard equivalent to the Ghana Data Protection Act.
9. Children's Privacy
Our services are not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at eightfoldcr8ation@gmail.com and we will promptly delete the information.
10. Third-Party Links and Services
Our website and platform may contain links to third-party websites, social media platforms, or integrated services (e.g., payment gateways, calendar tools). These third parties have their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you access through our platform.
11. How to Lodge a Complaint
If you are unhappy with how we have handled your personal data, you may:
- Contact us directly at eightfoldcr8ation@gmail.com - we aim to resolve all complaints within 30 days
- Lodge a complaint with the Ghana Data Protection Commission at www.dataprotection.gov.gh
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy with a revised effective date. Where changes are material, we will notify you by email or a prominent notice on our platform. Your continued use of our services after the effective date constitutes acceptance of the updated policy.
Data Controller Contact
Eight Fold Cr8ation is the data controller responsible for your personal information. For any privacy-related enquiries, requests, or concerns:
Company: Eight Fold Cr8ation
Email: eightfoldcr8ation@gmail.com
Phone: +233 20 546 0185 / +233 24 577 2016
Address: Accra, Ghana
Business Hours: Monday - Friday, 9:00 AM - 6:00 PM GMT