Privacy Policy

1. Introduction

Institute of Business Brokers Ghana Ltd ("IBB", "we", "us", or "our") is committed to protecting the privacy and personal data of visitors, clients, partners, and users ("you", "data subject") who access or use our website and services.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data in compliance with the Ghana Data Protection Act, 2012 (Act 843) and guidelines issued by the Data Protection Commission of Ghana.

By accessing or using our website, you consent to the practices described in this Privacy Policy.

2. Legal Basis for Processing Personal Data

We process personal data based on one or more of the following lawful grounds under Act 843:

• Your consent
• Performance of a contract
• Compliance with a legal obligation
• Protection of your legitimate interests, provided these do not override your fundamental rights and freedoms

3. Personal Data We Collect

3.1 Information You Provide Directly

• Full name
• Email address
• Phone number
• Company name and role
• Business or financial information submitted via forms
• Curriculum vitae (CV), résumé, and other application materials, when you apply for a position through our Careers page
• Newsletter subscription details, when you sign up to receive updates from us
• Referral details, including your name and contact information alongside those of a person you refer to us (see Section 5 below for how this is handled)
• Any other information you voluntarily provide through contact forms, emails, or service requests

3.2 Information Collected Automatically

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on the website
• Referring URLs

3.3 Cookies and Tracking Technologies

We do not use third-party advertising trackers or analytics cookies on this website. Where you interact with a feature that requires a signed-in session, a small amount of session data is stored in your browser's local storage rather than a cookie, solely to keep that session active. This is functionally necessary and is not used to track you across other websites.

4. Purpose of Data Collection

We collect and process personal data for the following purposes:

• To provide and manage our professional services
• To respond to inquiries and communications
• To comply with legal and regulatory obligations
• To improve website functionality and user experience
• To send business-related communications, where permitted
• For internal record keeping and reporting

5. Disclosure of Personal Data

We do not sell or rent personal data.

We may disclose personal data only to:

• Authorized employees and contractors of IBB
• Professional advisers under confidentiality obligations
• Regulatory authorities where required by law
• Third-party service providers strictly for operational purposes

Sister firms: where you engage a service that IBB renders through a sister firm, we share the personal data needed to carry out that specific engagement with the firm responsible for it: accounting and audit engagements with KAP Chartered Accountants, insurance placement with Pacific Insurance Brokers, and legal matters with Okyere Consult. Each firm is independently responsible for the data it holds once the engagement is transferred to it, and is required to process it securely and lawfully. See our Partners page for more on these relationships.

The service providers we use to operate this website and its forms include: website hosting and content delivery (Vercel), database and backend infrastructure (Supabase), transactional email delivery for form confirmations (Resend), and interactive maps (Mapbox). Each processes personal data only as needed to provide its service to us and is required to process it securely and in accordance with Act 843.

Referrals: if you submit a referral through our website, you provide us with personal data about another person (the referred party) on their behalf. By submitting a referral, you confirm that you have their permission to share this information with us. We use referral data solely to reach out about our services and do not use it for any other purpose.

6. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil the purposes for which it was collected
• Comply with legal, regulatory, or contractual requirements

When data is no longer required, it is securely deleted or anonymized.

7. Data Security Measures

IBB implements appropriate technical and organizational security measures to protect personal data against:

• Unauthorized access
• Accidental loss
• Misuse, alteration, or disclosure

These measures include access controls, encryption, secure servers, and internal data protection policies.

8. Your Rights Under Ghana's Data Protection Act

As a data subject, you have the right to:

• Request access to your personal data
• Request correction or updating of inaccurate data
• Request deletion or restriction of processing
• Object to processing of your personal data
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Data Protection Commission

Requests may be submitted using the contact details below.

9. Cross-Border Data Transfers

Where personal data is transferred outside Ghana, IBB ensures that:

• The receiving country provides adequate data protection; or
• Appropriate safeguards are in place in accordance with Act 843

10. Children's Privacy

Our website and services are not intended for persons under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated revision date.

Your continued use of the website constitutes acceptance of the updated policy.

12. Contact Information

For questions, requests, or complaints relating to this Privacy Policy or your personal data, please contact:

13. Regulatory Authority

You may also contact the Data Protection Commission of Ghana for further information or to lodge a complaint regarding data protection matters.