Privacy Policy

The data controller is Nexus Innov8 Africa Limited (“Nexus”, “we”, “us”), a company based in Accra, Ghana. Our postal address is P.O. Box 2284, Kaneshie.

We handle personal data in line with the Ghana Data Protection Act 2012 (Act 843). For any privacy question, or to exercise your rights, contact privacy@nexusinnov8.com.

This website has no project-enquiry form. When you contact us about a project, the enquiry is composed in your own email application, so nothing you write reaches us until you choose to send it, and you decide what to include.

Where we go on to discuss work with you, we keep that correspondence and anything you chose to send with it.

You can subscribe to Nexus marketing emails from the footer of this site or from our updates page. Subscribing is entirely optional and is never bundled with anything else: it is a separate, unticked choice, and we do not add you because you created an account, sent an enquiry, or used the site.

When you subscribe, or later change your preferences, we record:

• Your name and email address.
• The topics you selected, and which Nexus communications you asked for.
• That you gave consent, when, which version of the consent wording you were shown, and which page you were on.
• Later changes you make to those preferences.
• If you unsubscribe: that you unsubscribed, and when. We keep this so that we can continue to honour it.
• Delivery outcomes for your address, such as whether mail to it has failed permanently, so that we stop sending to a mailbox that cannot receive it.
• Where you also have a Nexus account and the email address is verified on it, a link between the two so that you can manage your preferences when signed in.

You can change your topics or unsubscribe at any time — from the link in any marketing email we send, or by signing in at email preferences. Unsubscribing from marketing does not stop essential service, account, security, receipt, application or operational emails, which are sent only where they are needed for something you asked for.

Parts of this site use accounts. Our identity provider’s software is loaded as part of this website on public pages as well as account pages, so that sign-in and session security work wherever you are on the site. Loading it involves ordinary connection and device data, such as your IP address and browser type, and it may place information in your browser’s storage. This happens whether or not you sign in. Where you do use an account, the provider also processes what is needed to establish and secure that session.

That software is there for sign-in and security. It is not behavioural analytics and it is not advertising: we do not run behavioural analytics on this website, and nothing here builds an advertising profile or measures how you move around the site.

Serving the site involves ordinary technical processing: your IP address, browser and device type, the pages requested and the time of the request, recorded by our hosting provider to deliver the site and keep it secure.

Where something goes wrong in your browser or on our servers, we receive a technical error report that may include the page, the browser and device type, and the IP address the request came from. These reports are for diagnosing faults. We do not use them to measure how the site is used.

• To operate, secure and maintain this website;
• To provide account and authentication functionality where you use it;
• To diagnose faults and fix them;
• To respond to enquiries you choose to send us, and to discuss the projects and opportunities you bring to us;
• To administer marketing subscriptions and store the preferences you set;
• To send the communications you selected;
• To honour unsubscribe and suppression instructions, including after you have left;
• To keep appropriate records of consent and of the instructions you have given us;
• To comply with legal and regulatory obligations under Ghanaian law.

We do not use your data to build an advertising profile, and we do not sell your personal data.

Different processing rests on different bases, and we do not treat all of it as consent:

• Marketing emails: your consent, which you give separately and can withdraw at any time. Withdrawing it does not affect processing that already happened.
• Operating, securing and maintaining the website, authentication, and error diagnostics: our legitimate interests in running a secure, working service.
• Responding to an enquiry you send: our legitimate interests in responding to prospective business, and steps taken at your request before any engagement.
• Keeping records we are required to keep, and honouring opt-out instructions: compliance with our legal obligations, and our legitimate interest in not contacting someone who asked us not to.

We share personal data only as needed to run this website and the communications you asked for. The providers we use are:

• Vercel — hosting and serving this website, and its access logs.
• Clerk — our identity provider, whose software is loaded across this website, public pages included, and which handles sign-in and session security.
• Sentry — error monitoring, which receives technical error reports.
• Brevo — our email delivery provider, used for marketing emails and for the email we send you.

We may also disclose data to authorities or other third parties where required by law, or to protect our rights and the safety of our users.

Some of our service providers may process personal data using infrastructure outside Ghana. Where they process personal data for us, appropriate contractual, organisational and security protections are used as applicable.

We keep personal data only as long as it is needed for the purpose it was collected for:

• Marketing preferences and consent records: while you are subscribed, and afterwards for as long as we need them to evidence the consent you gave and the instructions you set.
• Unsubscribe and suppression records: retained as reasonably necessary to keep honouring your opt-out. Deleting these would be the fastest way to start emailing you again by mistake.
• Correspondence: while it is needed to deal with your enquiry, and to meet our legal and record-keeping obligations.
• Hosting logs and error diagnostics: for the limited period our providers retain them.
• Where we go on to work with a client: as governed by the applicable client agreement and any legal requirements.

We may keep limited, non-identifying records for legitimate business and audit purposes.

Under the Data Protection Act 2012 (Act 843), you have the right to ask us to:

• Confirm whether we hold personal data about you, and give you access to it;
• Correct data that is inaccurate or incomplete;
• Delete your data, subject to legal retention requirements and to records we need in order to honour an opt-out;
• Stop or restrict certain processing, or object to it;
• Stop sending you marketing, at any time;
• Provide a copy of your data in a portable format.

You can also withdraw consent at any time where we rely on it, and you may lodge a complaint with the Ghana Data Protection Commission.

To exercise any right, email privacy@nexusinnov8.com. So that we do not disclose someone’s data to the wrong person, we may need to confirm your identity before we act, and we may ask for information that helps us locate your records. We respond within the time required by the Data Protection Act 2012 (Act 843).

We do not run behavioural analytics on this website and we do not use advertising or tracking cookies. Our identity provider’s software is loaded across the site and may use cookies or browser storage for authentication and security purposes, including during ordinary signed-out browsing. You do not need to sign in, or accept anything, to read the public pages. Your marketing preferences are stored on our own servers, not in your browser. See our Cookies and Browser Storage page for detail.

We use reasonable technical and organisational measures designed to protect personal data. Read more on our Security page. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authority as required by law.

This website is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy. Material changes will be notified through the website, and the date above indicates the latest revision.