Legal

Privacy Policy

Last updated 20 August 2026

Contents

1. Who we are

2. What we collect

3. Why we use it

4. Who we share it with

5. How long we keep it

6. How we protect it

7. Your rights

8. Cookies and analytics

9. Children

10. Changes to this policy

This policy explains what personal information Apex-Meta collects, why we collect it, and what you can do about it. It applies to this website, to our client engagements, and to our Obali point of sale product. We handle personal data in line with the Data Protection Act, 2012 (Act 843) of Ghana.

1. Who we are

Apex-Meta is an information technology company registered and operating in Ghana. For the purposes of Act 843 we are the data controller for the information described in this policy.

Address

H/No M07/1, Banana Lane, Accra, Ghana

hello@apex-meta.com

Telephone

+233 (0) 558 456 251

2. What we collect

We collect the following categories of information, and no more than we need:

Enquiry details. When you contact us, whether through the form on our contact page, by email or by telephone, we receive the name, email address and telephone number you give us, the service you say you are interested in, and the message you write.

Client and engagement records. If you become a client, we hold the contact details of your staff, your billing information, the quotations and invoices between us, and correspondence relating to the work.

Payment information. Card and mobile money payments are processed by Paystack. We receive confirmation that a payment succeeded, the amount, and a masked reference. We never receive or store your full card number, PIN or one-time passcode.

Systems we administer. Where you engage us for Microsoft 365 administration or IT support, we may access accounts and devices on your systems in order to do the work you asked for. We access only what the task requires.

Obali account data. If you use Obali, we hold your account and business details and the transaction records your business generates in the product. That data belongs to your business. We process it to run the service for you.

Website usage. Standard server logs, including IP address, browser type and pages visited, used to keep the site secure and understand which pages are useful.

3. Why we use it

To respond to your enquiry and prepare a quotation.

To deliver the products, services and support you have contracted for.

To issue invoices, take payment and keep the accounting records the law requires.

To provide technical support and to keep the systems we manage secure.

To meet our legal, tax and regulatory obligations in Ghana.

We do not sell personal data. We do not share it with third parties for their own marketing. We will not send you marketing email unless you have asked to receive it, and every such message carries an unsubscribe link.

4. Who we share it with

We share personal data only with service providers who need it to deliver something on our behalf, and only to the extent required:

Resend, which delivers enquiries and feedback sent through the forms on this website to our inbox.

Paystack, to process card and mobile money payments.

Cloudflare, which counts page views for us as described in section 8, without cookies and without identifying you.

Google, which provides the analytics described in section 8, and only for visitors who have accepted it.

Microsoft, where we provision or administer Microsoft 365 on your behalf.

Hosting and infrastructure providers, who store this website and the Obali platform.

Equipment suppliers and distributors, where a delivery address or warranty claim requires it.

We may also disclose information where we are required to by law, by a court, or by a regulator with authority to demand it.

Some of these providers operate outside Ghana, which means your data may be stored or processed abroad. Where that happens we satisfy ourselves that the provider applies protections consistent with Act 843.

5. How long we keep it

Enquiries that do not become engagements are deleted after 24 months. Client records, invoices and accounting documents are kept for six years after the end of the relationship, which is the retention period Ghanaian tax and company law expects. Obali account data is kept for as long as the account is active and for 90 days after closure, after which it is deleted unless you ask us to export it first.

Analytics data is kept for 14 months, after which Google deletes it automatically. That applies only to visitors who accepted analytics; declining means nothing was collected to keep. The cookieless page-view count described in section 8 stores nothing on your device at any point.

6. How we protect it

Access to client data is limited to the members of our team who need it for their work. Administrative accounts require multi-factor authentication. Data in transit is encrypted. We review access rights when someone joins or leaves the team. No system is perfectly secure, but if a breach affects your personal data we will tell you and the Data Protection Commission promptly.

7. Your rights

Under the Data Protection Act, 2012 (Act 843) you have the right to:

Ask what personal data we hold about you and receive a copy of it.

Have inaccurate or incomplete information corrected.

Ask us to delete data we no longer have a lawful reason to keep.

Object to processing, including any direct marketing.

Withdraw consent at any time where our processing rests on consent.

Write to hello@apex-meta.com and we will respond within 30 days. There is no charge. If you are not satisfied with our answer you may complain to the Data Protection Commission of Ghana.

8. Cookies and analytics

There are two kinds of cookie on this site, and only one of them is your choice.

Essential. The small amount of storage the site needs to work and to remember the choice you make below. These are always on, because without them the site cannot function.

Analytics. Google Analytics, which tells us which pages people read, how they arrived, and which country they are in. It sets cookies in your browser. We use it to decide what to write and what to fix, not to build a profile of you.

We also count page views with Cloudflare Web Analytics, which sets no cookie and stores nothing in your browser. That one runs whether or not you accept below, because there is nothing stored on your device for you to refuse.

Analytics is off until you turn it on. Nothing is loaded from Google, and no analytics cookie is set, unless you press Accept on the banner. Declining costs you nothing: every part of this site works the same either way. We do not run advertising trackers, and we do not sell or share what analytics collects with anyone.

You can change your mind at any time. Withdrawing is meant to be as easy as agreeing was.

Google processes this data outside Ghana. Your browser can also block or delete cookies directly, though doing so may affect how parts of the site behave.

9. Children

Our services are sold to businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us information, tell us and we will delete it.

10. Changes to this policy

When we change this policy we update the date at the top of the page. If a change materially affects how we use your information, we will tell active clients directly rather than relying on you to notice.

Questions about your data

Write to hello@apex-meta.com or call +233 (0) 558 456 251, Monday to Friday, 8am to 5pm GMT.