Privacy Policy

1. Introduction and Scope

Welcome to discountboxgh.com ("Website," "we," "us," or "our"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

This policy applies to all users of our website and services and is developed in accordance with the Data Protection Act, 2012 (Act 843) of Ghana, as well as international data protection frameworks including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) where applicable.

By using discountboxgh.com, you agree to the collection and use of information in accordance with this policy.

2. Definitions

For the purposes of this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person ('data subject').
• "Data Controller" means discountboxgh.com, which determines the purposes and means of the processing of Personal Data.
• "Data Processor" means a natural or legal person which processes Personal Data on behalf of the Data Controller.
• "Processing" means any operation performed on Personal Data, whether or not by automated means.

3. Information We Collect

We may collect and process the following categories of Personal Data about you:

a. Personal Information You Provide Directly

This is information you voluntarily give us when you use our services:

• Account Information: Name, email address, phone number, delivery address, and password.
• Order Information: Billing address, shipping address, payment details, and order history.
• Communication Data: Information you provide when you contact us via email, phone, or through our website.
• User Generated Content: Reviews, comments, or feedback you post on our platform.

b. Information Collected Automatically

When you access our website, we may automatically collect:

• Technical Data: IP address, browser type and version, operating system, and device information.
• Usage Data: Information about how you use our website, products, and services, including pages visited, time spent, and clickstream data.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to enhance your experience, analyze website traffic, and deliver targeted advertisements. Please see our Cookie Policy below for more details.

c. Information from Third Parties

We may receive information about you from third party services, such as payment processors, delivery partners, and analytics providers (e.g., Google Analytics).

4. How We Use Your Information

We process your Personal Data for the following purposes:

1. To Provide and Manage Services: To process orders, arrange delivery, manage your account, and respond to your inquiries.
2. For Transactional Communications: To send order confirmations, shipping updates, and customer service emails.
3. For Marketing and Promotions: To send you promotional materials, newsletters, and special offers, only where you have provided your consent.
4. To Improve Our Services: To analyze usage trends, understand user preferences, and enhance the functionality and user experience of our website.
5. For Legal and Regulatory Compliance: To comply with our legal obligations under Act 843 and other applicable laws, including fraud prevention and cybersecurity.
6. For Security: To ensure the security and integrity of our network and systems.

5. Legal Basis for Processing (GDPR & Act 843)

We process your Personal Data based on the following legal grounds:

• Consent: You have given us clear consent to process your Personal Data for a specific purpose (e.g., direct marketing).
• Contract: Processing is necessary for the performance of a contract with you (e.g., fulfilling your order).
• Legal Obligation: Processing is necessary for compliance with a legal obligation (e.g., tax and record keeping requirements).
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving our services, preventing fraud), provided these interests are not overridden by your data protection rights.

6. Sharing and Disclosure of Your Information

We will not sell or rent your Personal Data to third parties. We may share your information in the following circumstances:

• Service Providers: We share data with trusted third party vendors who perform services on our behalf, such as payment processing, logistics/delivery, and analytics (e.g., Google Analytics).
• Legal and Regulatory Authorities: We may disclose data where required by law, regulation, or a court order, or to cooperate with law enforcement and the Data Protection Commission.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your Personal Data may be transferred.

7. International Data Transfers

We may transfer your Personal Data to third party service providers located outside of Ghana. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in compliance with Act 843 and the GDPR, such as using Standard Contractual Clauses.

8. Data Security

We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, accidental loss, alteration, or disclosure. This includes:

• Encryption of sensitive data (e.g., payment information).
• Secure servers and firewalls.
• Internal policies and procedures to limit access to Personal Data to authorized personnel.

9. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this policy, or as required by law (e.g., for record keeping, legal claims, and tax purposes). According to the Electronic Transactions Act, certain records may need to be retained for a minimum period. When data is no longer required, we will securely delete or destroy it.

10. Your Data Protection Rights

Under the Data Protection Act, 2012 (Act 843) and international regulations, you have the following rights:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your Personal Data, subject to certain legal exceptions.
• Right to Restriction of Processing: You have the right to request the restriction of processing of your Personal Data.
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, and machine readable format.
• Right to Object: You have the right to object to the processing of your Personal Data, including for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process data, you have the right to withdraw that consent at any time.
• Right to Complain: You have the right to lodge a complaint with the Data Protection Commission in Ghana if you believe your rights have been violated.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond within 21 days as required by Act 843.

11. Children's Privacy

Our website is not intended for children under the age of 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.

12. Cookie Policy

We use cookies and similar tracking technologies to improve your browsing experience, analyze site traffic, and for marketing purposes.

• What are Cookies? Cookies are small text files that are stored on your device when you visit a website.
• Types of Cookies We Use:
  • Strictly Necessary: These cookies are essential for you to browse the website and use its features (e.g., shopping cart functionality).
  • Performance/Analytics: These collect information about how you use the website (e.g., Google Analytics).
  • Functional: These allow the website to remember choices you make and provide enhanced, more personalized features.
  • Targeting/Advertising: These are used to deliver relevant advertisements to you.
• Managing Cookies: You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and set most browsers to prevent them from being placed. If you do this, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.

In compliance with the ePrivacy Directive, we obtain your consent via a cookie consent banner before placing non essential cookies on your device.

13. Third Party Links

Our website may contain links to other websites. This Privacy Policy does not apply to those third party sites. We are not responsible for the privacy practices of other sites. We encourage you to read the privacy policies of every website you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We will provide prominent notice for significant changes and, where required, seek your consent.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint, please contact us at: