Privacy Policy

This Privacy Policy explains how Upliftthrive (“we”, “us”, “our”) collects, uses, discloses, and protects personal information in accordance with Ghana’s Data Protection Act, 2012 (Act 843) and related regulations. The policy applies to all interactions with our website, in-person sessions, virtual engagements, and communications.

By engaging with our services or visiting this website, you agree to the practices described below. We encourage you to review this policy regularly as updates may be made to reflect changes in legislation or our processes.

Information we collect

We collect the following categories of information to deliver our services effectively:

  • Identity details: Name, job title, organisation, age bracket, or demographic data you share voluntarily.
  • Contact information: Phone numbers, email addresses, physical addresses, and preferred communication channels.
  • Financial context: Budget outlines, income ranges, spending categories, savings targets, debt summaries, or investment goals provided during sessions.
  • Engagement data: Records of attendance, progress logs, feedback forms, and session notes compiled by facilitators.
  • Technical information: IP address, browser type, device identifiers, and interaction data collected through essential cookies for security and analytics.

We collect data directly from you, through authorised organisational representatives, or via publicly available sources when conducting due diligence. We do not buy personal data from third parties.

How we use your information

Your information is processed for legitimate business purposes, contractual obligations, and legal compliance. Key uses include:

  • Delivering financial habit guidance, coaching sessions, and workshops tailored to your context.
  • Maintaining accurate records of engagements, progress, and action plans.
  • Contacting you with updates, scheduling information, or responses to enquiries.
  • Producing anonymised reports for impact measurement, research, or donor requirements.
  • Ensuring compliance with Ghanaian regulations, including taxation, anti-money laundering, and data protection laws.
  • Protecting the integrity of our systems, preventing fraud, and safeguarding client information.

Legal bases for processing

We rely on the following legal grounds under Ghana’s Data Protection Act:

  • Consent: You provide clear consent for specific uses, such as receiving newsletters or participating in testimonials.
  • Contractual necessity: Processing is required to fulfil the services you request or to prepare for entering into an agreement.
  • Legal obligation: We retain certain records to meet statutory requirements, including financial reporting and regulatory audits.
  • Legitimate interests: We process data reasonably expected by clients to improve service quality, maintain security, and build program insights.

Data sharing and disclosures

We share personal information only when necessary and with appropriate safeguards:

  • Facilitators and consultants: Independent professionals engaged by us access relevant data under confidentiality agreements.
  • Technology providers: Reputable platforms (e.g., email hosting, collaboration tools, cloud storage) that comply with industry security standards.
  • Regulators or authorities: When required by law, court order, or government directive within Ghana.
  • Partners: With your explicit consent, we may collaborate with partner organisations supporting your financial journey. Data is shared on a need-to-know basis.

We do not sell your data. When sharing outside Ghana, we ensure adequate protection through contractual clauses or partner compliance commitments.

Data retention and security

We keep personal data only as long as necessary for the purposes outlined above or as required by law.

  • Client engagement records are retained for up to seven years to support continuity and meet regulatory obligations.
  • Inactive enquiries and unsuccessful applications are deleted or anonymised within two years.
  • Technical logs may be stored for shorter periods to support security monitoring.

Security measures include encrypted storage, restricted access, secure backups, multi-factor authentication, and regular policy reviews. Staff and consultants undergo training on data protection obligations.

Your rights

Under Ghana’s Data Protection Act you have the right to:

  • Request access to personal data we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Withdraw consent for optional processing (e.g., marketing communications).
  • Request deletion of data when retention is no longer necessary.
  • Object to processing based on legitimate interests or direct marketing.
  • Lodge a complaint with the Data Protection Commission of Ghana.

To exercise these rights, contact us using the details below. We will respond within 30 days, subject to verification requirements.

Children’s privacy

Our services are designed for adults. We do not knowingly collect personal information from individuals under 18 without parental or guardian consent. If you believe a minor has provided data without consent, contact us immediately for removal.

Updates to this policy

We may update this policy to reflect regulatory changes or improvements to our practices. When material changes occur, we will notify clients through email or website notices. The “last updated” date indicates the most recent revision.

Contact us

If you have questions or requests regarding this Privacy Policy or your personal data, reach us at:

Address: 11 Ring Road East, Accra, Ghana

Email: [email protected]

Phone: +233 24 503 9917

This policy was last updated on 1 May 2024.