Privacy Policy

1. Data Controller Identification

The data controller responsible for the collection, storage, and processing of your personal information collected through this website and our operational studios is:

2. Principles of Data Processing

Under Section 18 of the Ghana Data Protection Act, 2012 (Act 843), all personal data collected by Sellux Plaster Limited is processed strictly in adherence to the eight statutory data protection principles:

• Accountability: We take organizational and technical responsibility for all data in our custody.
• Lawfulness of Processing: We collect and process data strictly with prior consent or lawful statutory grounds.
• Specification of Purpose: Data is collected for explicit, defined architectural and procurement functions.
• Limitation on Further Processing: We do not reuse your information for unrelated purposes.
• Quality of Information: We maintain complete, accurate, and up-to-date client records.
• Openness & Transparency: You are always informed of how your data is handled.
• Security Safeguards: Robust safeguards protect against data breach, loss, or unauthorized interception.
• Data Subject Participation: You maintain continuous statutory rights to access, amend, or delete your records.

3. Personal Information We Collect

In strict compliance with the principle of data minimization, we collect only the information required to fulfill our contracts and services:

4. Lawful Bases for Processing

In accordance with Section 20 of Act 843, we process personal data exclusively under the following recognized legal grounds:

• Consent (Section 20(1)): When you opt-in to technical digests, accept non-essential cookies, or check our consent box on inquiry forms.
• Contractual Necessity (Section 20(2)(a)): Necessary to generate preliminary quotations, deliver materials to your construction site, or execute finishing contracts.
• Statutory Compliance (Section 20(2)(b)): Necessary to fulfill Ghana Revenue Authority (GRA) invoicing requirements, VAT documentation, and the Electronic Transactions Act, 2008 (Act 772).
• Legitimate Interests: To prevent fraud, maintain website security, and resolve site installation inquiries.

5. Purpose of Data Use

Your personal data is used solely for genuine architectural and business operations:

1. To calculate bill of quantities (BOQ) and cost estimations via our digital estimator.
2. To coordinate physical material dispatch, freight logistics, and haulage to site locations across Greater Accra and Ghana.
3. To communicate technical installation schedules and milestone inspections.
4. To verify transaction confirmations, issue tax-compliant VAT invoices, and facilitate refunds where eligible.
5. To optimize website performance, security, and accessibility standards.

6. Third-Party Disclosures & Processors

We share your information strictly with vetted service processors who are contractually bound to comply with rigorous data protection standards:

7. Technical & Organizational Security Measures

Pursuant to Section 28 of Act 843, we maintain robust administrative and technical protections:

• Encryption in Transit: 256-bit TLS/SSL encryption for all HTTP communications.
• Access Controls: Administrative access restricted to authorized personnel via multi-factor authentication.
• Zero Local Financial Storage: No card numbers or financial credentials touch our application servers.
• Regular Vulnerability Scanning: Ongoing source code audits, static analysis, and security updates.

8. Data Retention & Destruction

We retain personal data only for as long as necessary to satisfy the purpose for which it was collected:

• Procurement & Invoice Records: Retained for six (6) years in compliance with Ghana statutory tax and financial reporting requirements.
• Inquiry & Contact Submissions: Retained for two (2) years following project completion or resolution of the inquiry.
• Uploaded Blueprints & Site Photos: Retained for the duration of the project warranty period (2 years) and securely archived or deleted upon request.

9. Your Statutory Rights as a Data Subject

Under the Ghana Data Protection Act, 2012 (Act 843), you are entitled to exercise the following legal rights without cost:

To exercise any of these rights, email our Data Protection Officer at privacy@selluxplaster.com. We respond to verified requests within thirty (30) business days.

10. Cookies & Tracking Technologies

Our website utilizes cookies and local storage tokens. Non-essential cookies (analytics and advertising pixels) remain inactive until you provide explicit consent via our cookie consent interface.

You may review our comprehensive cookie inventory, purpose disclosures, and lifetimes on our dedicated Cookie Policy Page, or update your preferences at any time using the link below:

11. Supervisory Authority & Complaints

If you believe your personal data has been handled inconsistently with Act 843, you have the statutory right to lodge a formal complaint with the primary data protection supervisory authority in Ghana: