Privacy Policy

DamaForge Ltd ("Damaforge", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit damaforge.com or engage our services.

We operate in compliance with the Ghana Data Protection Act, 2012 (Act 843). Where our services extend to individuals in the European Economic Area, we also honour the rights established under the General Data Protection Regulation (GDPR).

Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this policy.

---

1. Who We Are

Data Controller: DamaForge Ltd
Address: 123 Business Street, Suite 100, Awoshie, Accra, Ghana
Email: contact@damaforge.com
Phone: +233 26 502 7087

---

2. Information We Collect

2.1 Information You Provide Directly

• Contact form: Name, email address, phone number (optional), company name (optional), subject, and message.
• Account registration: First name, last name, email address, password (stored as a one-way hash), company name (optional), and selected plan.
• Newsletter subscription: Email address and subscription date.
• Project engagements: Business information, project requirements, and communications shared during the course of our work together.

2.2 Information Collected Automatically

• Session data: We use server-side PHP sessions to maintain your logged-in state. A session cookie is placed in your browser for this purpose.
• Usage data: Pages visited, referring URLs, browser type, device type, and approximate location derived from IP address (where analytics are active).
• Log data: Our web server may record IP addresses, request timestamps, and response codes for security and operational purposes.

---

3. How We Use Your Information

• Responding to enquiries: To reply to your contact form submissions and provide you with project quotes or information.
• Delivering services: To fulfil our contractual obligations when you engage us for a software project.
• Account management: To create and maintain your user account and provide access to your dashboard.
• Newsletter communications: To send you updates, insights, and news about Damaforge — only where you have subscribed and consented.
• Website improvement: To analyse how visitors use our site and improve its content and performance.
• Security: To detect, prevent, and address technical issues, fraud, or abuse.
• Legal compliance: To meet our obligations under applicable law.

---

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we rely on the following lawful bases:

• Legitimate interests — responding to contact form enquiries and improving our website.
• Contract performance — delivering agreed software development services.
• Consent — newsletter subscriptions and non-essential cookies. You may withdraw consent at any time.
• Legal obligation — where we are required to retain records under applicable law.

---

5. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

• Service providers: Hosting providers and infrastructure partners who process data on our behalf under strict data processing agreements.
• Analytics providers: Where analytics are active, usage data is shared with the relevant provider in anonymised or pseudonymised form.
• Legal authorities: Where required by law, court order, or to protect our legal rights.

---

6. Data Retention

• Contact form submissions: Retained for up to 2 years from the date of submission, unless a longer period is required for an ongoing project relationship.
• User accounts: Retained for as long as your account is active. You may request deletion at any time.
• Newsletter subscriptions: Retained until you unsubscribe.
• Project data: Retained for 5 years following project completion for legal and warranty purposes.
• Server logs: Typically retained for 90 days.

---

7. Your Rights

Under the Ghana Data Protection Act 2012 and, where applicable, the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data where there is no lawful reason to retain it.
• Restriction — request that we limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, commonly used format (GDPR, where applicable).
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at contact@damaforge.com. We will respond within 30 days.

---

8. Cookies

We use the following types of cookies:

You can control cookies through your browser settings. Disabling strictly necessary cookies may affect site functionality.

---

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• HTTPS encryption for all data in transit.
• Passwords stored as bcrypt hashes — we never store plain-text passwords.
• Prepared SQL statements to prevent injection attacks.
• Access controls limiting data access to authorised personnel only.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

---

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us immediately.

---

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes acceptance of the updated policy.

---

12. Contact & Complaints

For any privacy-related questions, requests, or complaints, please contact our Data Protection contact:

DamaForge Ltd
123 Business Street, Suite 100, Awoshie, Accra, Ghana
Email: contact@damaforge.com
Phone: +233 26 502 7087

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Commission of Ghana or, for EU residents, your local data protection supervisory authority.