Privacy policy

1. Scope and data controller

This policy applies when you visit anansekrom.org, send a contact, support or booking inquiry, join the newsletter, or otherwise communicate with us through this website. It does not govern a third-party website merely because we link to it.

Anansekrom Heritage Foundation, located at Teiman Mountains near Borger Town last stop, off the main Aburi–Ayi Mensah road, Ghana, determines why and how personal information is used for these activities and acts as the data controller. Privacy questions can be sent to heritagefoundation25@gmail.com.

2. Personal information we handle

We do not ask for payment-card details on this website. If an external donation provider is introduced, payment information will be collected under that provider’s notice and terms rather than by these forms.

3. Purposes and legal bases

We use personal information only for defined, proportionate purposes:

• Responding and taking requested steps: to answer an inquiry, discuss a visit or partnership, and take steps you request before an arrangement is made.
• Consent: to add you to the newsletter, send direct marketing and store any future optional cookie categories you choose. You can withdraw consent without affecting earlier lawful use.
• Legitimate interests: to operate and secure the website, prevent spam, measure anonymous aggregate traffic, understand which pages are useful, keep appropriate correspondence records, improve service quality and protect legal rights, where those interests are not overridden by your rights.
• Contract: where processing becomes necessary to administer a confirmed visit, program, contribution or partnership.
• Legal obligations and public safety: where records or disclosures are required by law, a lawful authority request, safeguarding obligations or the establishment and defence of legal claims.

Providing form information is voluntary, but we cannot respond without the required contact and message fields. Newsletter consent is always optional and is separate from service inquiries.

4. Where information comes from

Most information comes directly from you. Technical information is generated by your browser, our hosting infrastructure, Vercel Web Analytics and security controls when a request is made. We may also receive relevant information from a person or organization arranging a group visit or partnership, but they should only provide information they are authorized to share.

Vercel Web Analytics measures page traffic without placing analytics cookies. Vercel derives a temporary visitor identifier from request data so that aggregate visits can be counted; the identifier is not intended to identify a person and is discarded within 24 hours. Reports may include the page visited, referrer, country or region, device type, operating system and browser. We do not currently send custom-event properties through this service.

5. Who receives personal information

Access is limited to people and providers who need the information for the stated purpose. These may include:

• authorized Anansekrom team members responsible for inquiries, programs, communications or administration;
• Vercel, the website hosting, delivery and cookie-free Web Analytics provider, which may process request, network, security and anonymous aggregate usage data;
• Twilio SendGrid, which sends form acknowledgments and administrator notifications and stores opted-in newsletter contacts;
• professional advisers, insurers, safeguarding contacts or technology specialists where reasonably necessary and subject to confidentiality; and
• courts, regulators, law-enforcement bodies or other recipients when disclosure is required or permitted by law.

We do not sell personal information and do not share form submissions with advertisers or data brokers.

6. International processing and transfers

Our providers operate international infrastructure. Personal information may therefore be processed outside Ghana, including in the United States, the European Union or other locations used by the provider and its published subprocessors.

Where transfer rules apply, we seek to use reputable providers and appropriate contractual or legal safeguards, such as data-processing terms and recognized standard contractual clauses. No transfer method can remove every risk associated with international processing.

7. How long information is kept

We keep personal information only for as long as it reasonably serves the purpose described above, taking account of the relationship, legal obligations, dispute periods, safeguarding needs and whether a record can be securely deleted or anonymized.

• Contact, support and booking inquiries: for the active inquiry and a reasonable follow-up period; longer only where the conversation becomes part of a booking, partnership, safeguarding matter or legal record.
• Newsletter contacts: until you unsubscribe or we end the list. A minimal suppression record may be retained so that an opt-out is respected.
• Security and delivery logs: for the limited period set by the hosting or security provider and as needed to investigate abuse or incidents.
• Web Analytics: Vercel discards the temporary visitor identifier after 24 hours. Aggregate reports are retained according to the Vercel plan and account configuration and may be deleted when no longer needed.
• Cookie preference: for six months, unless you clear it earlier or a material change requires a new choice.

8. Your data-protection rights

Depending on the law and circumstances, you may ask us to:

• confirm whether we process your personal information and provide access to it;
• correct information that is inaccurate or incomplete;
• erase information that is no longer authorized or necessary;
• object to particular processing, especially direct marketing;
• restrict processing while a concern is resolved;
• provide eligible information in a portable format;
• withdraw consent at any time; and
• avoid a significant decision based solely on automated processing. We do not currently make such decisions through this website.

Send a request to heritagefoundation25@gmail.com. We may ask for proportionate information to verify identity and protect another person’s data. We will respond within the period required by applicable law and explain if a right is limited in a particular case.

9. Security

We use reasonable technical and organizational measures intended to protect personal information, including encrypted transport, restricted administrative access, server-side validation, form throttling and vetted service providers. Message bodies are not intentionally written to application logs.

No internet service is completely secure. If a breach creates a legally reportable risk, we will notify the appropriate regulator and affected people as required.

10. Children and sensitive information

This general website is not designed to collect personal information directly from children. A parent, guardian, school or responsible organization should manage inquiries involving a child. Please do not include health information, identity documents, financial details or other sensitive information in a general form unless we specifically request it through an appropriate process.

If you believe a child has submitted personal information without appropriate involvement, contact us so that we can assess and remove it where required.

11. Changes to this policy

We will update this page when our forms, providers, cookie use or legal responsibilities materially change. The date at the top identifies the current version. If a change affects an existing consent, we will request a new choice where required.

12. Contact and complaints

Contact Anansekrom Heritage Foundation at heritagefoundation25@gmail.com, +233 20 223 5459, or Teiman Mountains near Borger Town last stop, off the main Aburi–Ayi Mensah road, Ghana.

You may also complain to Ghana’s Data Protection Commission. If EU or UK data-protection law applies, you may contact the supervisory authority in the country where you live, work or believe an infringement occurred. We would appreciate the opportunity to address your concern first, but contacting us does not remove your right to approach a regulator.

For browser storage, see our Cookie Policy. Website use is also governed by our Terms of Use.