Legal information
Privacy policy
A transparent account of the personal information Anansekrom handles, why it is needed and the choices available to you.
Last updated: 21 August 2026
Effective: 21 August 2026
1. Scope and data controller
This policy applies when you visit anansekrom.org, send a contact or support enquiry, join the newsletter, or otherwise communicate with us through this website. It does not govern a third-party website merely because we link to it.
Anansekrom Heritage Foundation, located at Teiman Mountains, near Ayi Mensah, Greater Accra, Ghana, determines why and how personal information is used for these activities and acts as the data controller. Privacy questions can be sent to heritagefoundation25@gmail.com.
We apply Ghana’s Data Protection Act, 2012 (Act 843). Where the EU or UK GDPR applies to a particular interaction, we also provide the relevant rights and safeguards required by that law.
2. Personal information we handle
| Interaction | Information | Why it is needed |
|---|---|---|
| Contact form | Name, email address, subject, message and consent confirmation | To understand and respond to your enquiry |
| Support form | Name, email address, type of support, message and consent confirmation | To discuss donations, volunteering, visits, programmes or partnerships |
| Newsletter | Email address, opt-in record and later unsubscribe status | To send occasional updates you requested and honour your choices |
| Website, analytics and security | IP address used for request delivery and security, request time, requested page, referrer, approximate location, browser/device information, security events and cookie preference | To deliver and protect the site, diagnose faults, understand anonymous aggregate traffic and remember privacy choices |
| Direct correspondence | Information in emails, calls or follow-up conversations | To manage the relationship or arrangement you initiated |
We do not ask for payment-card details on this website. If an external donation provider is introduced, payment information will be collected under that provider’s notice and terms rather than by these forms.
3. Purposes and legal bases
We use personal information only for defined, proportionate purposes:
- Responding and taking requested steps: to answer an enquiry, discuss a visit or partnership, and take steps you request before an arrangement is made.
- Consent: to add you to the newsletter, send direct marketing and store any future optional cookie categories you choose. You can withdraw consent without affecting earlier lawful use.
- Legitimate interests: to operate and secure the website, prevent spam, measure anonymous aggregate traffic, understand which pages are useful, keep appropriate correspondence records, improve service quality and protect legal rights, where those interests are not overridden by your rights.
- Contract: where processing becomes necessary to administer a confirmed visit, programme, contribution or partnership.
- Legal obligations and public safety: where records or disclosures are required by law, a lawful authority request, safeguarding obligations or the establishment and defence of legal claims.
Providing form information is voluntary, but we cannot respond without the required contact and message fields. Newsletter consent is always optional and is separate from service enquiries.
4. Where information comes from
Most information comes directly from you. Technical information is generated by your browser, our hosting infrastructure, Vercel Web Analytics and security controls when a request is made. We may also receive relevant information from a person or organisation arranging a group visit or partnership, but they should only provide information they are authorised to share.
Vercel Web Analytics measures page traffic without placing analytics cookies. Vercel derives a temporary visitor identifier from request data so that aggregate visits can be counted; the identifier is not intended to identify a person and is discarded within 24 hours. Reports may include the page visited, referrer, country or region, device type, operating system and browser. We do not currently send custom-event properties through this service.
5. Who receives personal information
Access is limited to people and providers who need the information for the stated purpose. These may include:
- authorised Anansekrom team members responsible for enquiries, programmes, communications or administration;
- Vercel, the website hosting, delivery and cookie-free Web Analytics provider, which may process request, network, security and anonymous aggregate usage data;
- Twilio SendGrid, which sends form acknowledgements and administrator notifications and stores opted-in newsletter contacts;
- professional advisers, insurers, safeguarding contacts or technology specialists where reasonably necessary and subject to confidentiality; and
- courts, regulators, law-enforcement bodies or other recipients when disclosure is required or permitted by law.
We do not sell personal information and do not share form submissions with advertisers or data brokers.
6. International processing and transfers
Our providers operate international infrastructure. Personal information may therefore be processed outside Ghana, including in the United States, the European Union or other locations used by the provider and its published subprocessors.
Where transfer rules apply, we seek to use reputable providers and appropriate contractual or legal safeguards, such as data-processing terms and recognised standard contractual clauses. No transfer method can remove every risk associated with international processing.
7. How long information is kept
We keep personal information only for as long as it reasonably serves the purpose described above, taking account of the relationship, legal obligations, dispute periods, safeguarding needs and whether a record can be securely deleted or anonymised.
- Contact and support enquiries: for the active enquiry and a reasonable follow-up period; longer only where the conversation becomes part of a booking, partnership, safeguarding matter or legal record.
- Newsletter contacts: until you unsubscribe or we end the list. A minimal suppression record may be retained so that an opt-out is respected.
- Security and delivery logs: for the limited period set by the hosting or security provider and as needed to investigate abuse or incidents.
- Web Analytics: Vercel discards the temporary visitor identifier after 24 hours. Aggregate reports are retained according to the Vercel plan and account configuration and may be deleted when no longer needed.
- Cookie preference: for six months, unless you clear it earlier or a material change requires a new choice.
8. Your data-protection rights
Depending on the law and circumstances, you may ask us to:
- confirm whether we process your personal information and provide access to it;
- correct information that is inaccurate or incomplete;
- erase information that is no longer authorised or necessary;
- object to particular processing, especially direct marketing;
- restrict processing while a concern is resolved;
- provide eligible information in a portable format;
- withdraw consent at any time; and
- avoid a significant decision based solely on automated processing. We do not currently make such decisions through this website.
Send a request to heritagefoundation25@gmail.com. We may ask for proportionate information to verify identity and protect another person’s data. We will respond within the period required by applicable law and explain if a right is limited in a particular case.
9. Security
We use reasonable technical and organisational measures intended to protect personal information, including encrypted transport, restricted administrative access, server-side validation, form throttling and vetted service providers. Message bodies are not intentionally written to application logs.
No internet service is completely secure. If a breach creates a legally reportable risk, we will notify the appropriate regulator and affected people as required.
10. Children and sensitive information
This general website is not designed to collect personal information directly from children. A parent, guardian, school or responsible organisation should manage enquiries involving a child. Please do not include health information, identity documents, financial details or other sensitive information in a general form unless we specifically request it through an appropriate process.
If you believe a child has submitted personal information without appropriate involvement, contact us so that we can assess and remove it where required.
11. Changes to this policy
We will update this page when our forms, providers, cookie use or legal responsibilities materially change. The date at the top identifies the current version. If a change affects an existing consent, we will request a new choice where required.
12. Contact and complaints
Contact Anansekrom Heritage Foundation at heritagefoundation25@gmail.com, +233 20 223 5459, or Teiman Mountains, near Ayi Mensah, Greater Accra, Ghana.
You may also complain to Ghana’s Data Protection Commission. If EU or UK data-protection law applies, you may contact the supervisory authority in the country where you live, work or believe an infringement occurred. We would appreciate the opportunity to address your concern first, but contacting us does not remove your right to approach a regulator.
For browser storage, see our Cookie Policy. Website use is also governed by our Terms of Use.