Who we are
Ohweapim Foundation LBG ("we", "us") is the data controller for personal data collected through this website. We are based in Gomoa Asempayin, Central Region, Ghana.
Contact for anything in this notice: ohweapimfoundation@gmail.com, 0544007144 or 0594849499.
We handle personal data in line with the Data Protection Act, 2012 (Act 843) of Ghana.
What we collect and why
| When | What we collect | Why | Lawful basis |
|---|---|---|---|
| You tell us about a donation | Name, phone number or email, amount, chosen project and mobile money reference, when you tell us about a gift. | To confirm your gift, thank you, keep financial records and show project progress. | Performing the donation you asked for; keeping legally required financial records. |
| You send a message | Name, email, subject and your message. | To reply to you. | Your consent, given when you tick the box on the form. |
| You offer to volunteer | Name, email, optional phone, area of interest and your message. | To consider your offer and contact you. | Your consent, given when you tick the box on the form. |
| You visit the site | Your IP address and browser type are recorded in our hosting provider's server logs. | Keeping the site secure, finding faults and preventing abuse. | Our legitimate interest in running a secure site. |
| Staff sign in to the admin area | Name, username, email, role, sign-in times and an audit trail of actions with the IP address used. | Access control and accountability. | Our legitimate interest in protecting the data we hold. |
What we do not collect
- Card numbers, mobile money PINs or bank details. You send a gift from your own phone and we never ask for these.
- Advertising or tracking data. We do not use advertising cookies, and we do not follow you around the web.
- We do not knowingly collect personal data from children through the website. If you are under 18, please ask a parent or guardian to contact us or donate on your behalf.
Who we share it with
- Your mobile money provider carries out the transfer under its own privacy terms. We see only what appears on our wallet statement.
- Our hosting provider stores the website and database.
- Google provides the email inbox where we receive notifications of messages and applications.
- Public authorities, only where the law requires it.
Counting visits. To learn which pages are useful, our website records each page view with the page address, the website you came from (site name only), whether you use a phone, tablet or computer, and a short code made from your device details and the date. The code changes every day and cannot be turned back into your address or used to follow you from one day to the next. We do not store your IP address for this, and we do not set a cookie. Visits are deleted after 13 months. We respect the "Do Not Track" setting of your browser.
Security records. To protect the website we keep a record of suspicious activity (for example repeated wrong passwords or scans for weak spots), including the IP address, for 12 months. Our lawful basis is our legitimate interest in keeping the website and your data secure.
We do not sell personal data and we do not use it for advertising. Fonts and images on this site are served from our own domain, so visiting does not send your details to font or analytics companies.
Some of these providers may process data outside Ghana. We use them because they apply security measures appropriate to the data they handle.
How long we keep it
- Messages and volunteer applications: up to 24 months after our last contact with you, then deleted.
- Donation records: 7 years, because financial records must be kept. After that they are deleted or anonymised.
- Admin audit trail: 24 months.
- Server logs: kept by our hosting provider for a short rolling period.
Your rights
You can ask us to tell you what data we hold about you, correct it, delete it, restrict or stop using it, or give you a copy. You can also withdraw consent at any time. Email ohweapimfoundation@gmail.com with the subject "Privacy request" and the email address you used. We may ask you to prove it is you before we act. We will answer within 30 days.
Donation records may have to be kept for the period above. Where that applies we will remove your name, email and phone number from the record and keep only the amount and date.
If you are not happy with how we handled your data, you can complain to the Data Protection Commission of Ghana.
How we protect it
The site uses HTTPS, strict browser security headers, hashed passwords, optional two-step sign-in for staff, role-based access, an audit trail and regular deletion of old data. If a breach puts your data at risk we will tell you and the Data Protection Commission as soon as reasonably practicable.
Photos and children
Read our Child protection and photo policy.
Cookies
See our Cookie notice.
Changes
If we change this notice in a way that matters to you, we will update the date and version above.