Last Updated: January 15, 2025 Reading time: ~10 minutes
When you register, place an order, or interact with our platform, we collect:
When you visit our website, we automatically collect:
We use your personal data for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing your orders | Identity, order, payment data | Contract performance |
| Account management | Identity, contact, account data | Contract performance |
| Customer support | Identity, contact, communication data | Legitimate interest |
| Payment processing | Payment data | Contract performance |
| Platform improvement | Usage analytics (anonymised) | Legitimate interest |
| Marketing emails | Contact data | Consent |
| SMS notifications (mNotify) | Phone number | Consent / Contract |
| Security & fraud prevention | IP, device, account data | Legitimate interest |
Your data is stored on secure servers located in Ghana and/or within the European Economic Area (EEA). We implement technical and organisational measures to protect your personal information including:
Passwords are stored using bcrypt hashing and are never stored in plain text. Payment card data is never stored on our servers — all card processing is handled directly by Paystack and Flutterwave under their PCI DSS compliant infrastructure.
We use cookies and similar tracking technologies on our website. Cookies are small text files stored on your device. For full details, see our Cookie Policy.
In summary, we use:
You can manage cookie preferences through our Cookie Preference Centre or through your browser settings.
We use the following third-party service providers who may process your personal data on our behalf:
Payment processing. Processes payment data under their own privacy policy. Data stored in compliance with PCI DSS.
Alternative payment processing. Card and mobile money payments handled under Flutterwave's security standards.
SMS notifications (order confirmations, OTP, alerts). We share only your phone number for notification delivery.
Website traffic analytics. We use anonymised data only. IP masking is enabled. Governed by Google's privacy policy.
We do not sell, rent, or trade your personal data to any third parties for their own marketing purposes.
Under applicable data protection law (including GDPR principles adopted in Ghana's Data Protection Act), you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten"), subject to legal obligations.
Request that we limit how we process your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing for direct marketing or legitimate interest purposes.
To exercise any of these rights, email us at support@casowglobalresearch.com with "Data Rights Request" in the subject line. We will respond within 30 days.
We retain your personal data only for as long as necessary for the purposes outlined in this policy and to comply with legal obligations.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | Duration of account + 2 years | Service delivery, legal basis |
| Order data | 7 years | Financial record-keeping requirements |
| Payment records | 7 years | Tax and audit compliance |
| Support communications | 3 years | Dispute resolution |
| Analytics data | 26 months (Google Analytics default) | Platform improvement |
| Marketing consent | Until withdrawn | Legal compliance |
When data is no longer needed, it is securely deleted or anonymised.
Our services are not directed to children under the age of 13. We do not knowingly collect personal data from children under 13.
Users between 13 and 18 must have parental or guardian consent before using our platform. If you are a parent and believe your child has provided us with personal data without consent, please contact us immediately at support@casowglobalresearch.com and we will promptly delete the data.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make significant changes, we will:
Your continued use of our services after the changes take effect constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests related to this Privacy Policy, please contact our Data Protection team: