Privacy Policy & Personal Data Protection

1. Statutory Foundation & Data Controller Identity

This Privacy Policy governs the processing of personal data by Eniceberny Bakery and Culinary Hub (operating legally as Eniceberny Bakery & Catering Enterprise), headquartered opposite Victory Maternity Hospital, Kumasi Tech, Ashanti Region, Ghana.

We conduct our operations and digital commerce in strict accordance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana, and uphold the regulatory standards established by the Data Protection Commission (DPC) Ghana. As a registered Data Controller under Act 843, we are committed to safeguarding the confidentiality, integrity, and privacy of our customers, corporate event partners, and web patrons.

2. The Eight (8) Data Protection Principles (Act 843)

In compliance with Part Two (Sections 17 through 26) of Act 843, every aspect of our personal data collection, storage, and processing adheres to the eight statutory principles:

3. Information We Collect in the Ghanaian Context

To deliver bakery goods and banquet services across Ghana, we collect the following categories of information:

• Identity Information: Full name, company/organization name (for corporate bookings), and account authentication credentials.
• Contact Telephony: Active Ghanaian mobile phone numbers (+233 format, e.g., MTN, Telecel, AT) used for SMS order updates, delivery dispatch driver calls, and WhatsApp receipts.
• Geographical & Delivery Data: Street address, Ghana Digital Post GPS codes (e.g. AK-XXX-XXXX), physical landmarks (e.g. "Opposite Victory Maternity Hospital"), city, and dispatch notes.
• Special Category Data (Dietary & Allergies): In compliance with Section 37 of Act 843, customer-declared dietary restrictions (gluten intolerance, nut allergies, vegan, lactose-free) are processed solely to protect your health and culinary safety during meal preparation.
• Transactional History: Order numbers, itemized baked goods, custom cake inscriptions, invoice statuses, and timestamps.

4. Payment Processing: Mobile Money (MoMo) & Cards

Eniceberny Bakery processes digital financial payments in partnership with Paystack Payments Limited, a Payment Service Provider fully licensed and regulated by the Bank of Ghana (BoG) under the Payment Systems and Services Act, 2019 (Act 987).

5. Your Enforceable Rights under Act 843 (Ghana)

Under Ghanaian statutory law, you possess explicit rights regarding your personal records:

• Right of Access (Section 32): You may request confirmation of whether we hold your personal data and obtain a complete digital copy.
• Right to Rectification (Section 33): You may update or correct inaccurate telephone numbers, addresses, or culinary preferences via your Account Settings.
• Right to Prevent Processing (Section 35): You have the right to demand cessation of processing that causes or is likely to cause unwarranted damage or distress.
• Right to Object to Direct Marketing (Section 36): You may toggle off promotional WhatsApp, SMS, or email bulletins at any time without affecting order delivery.
• Right to Erasure / Deletion (Section 39): You can request permanent erasure of your user profile and past addresses, subject to mandatory Ghanaian tax and financial retention laws.

6. Data Retention, Safeguards & GRA Compliance

We retain order and invoice data for the period required by the Ghana Revenue Authority (GRA) for fiscal accounting and VAT/NHIL/GETFund audit integrity. All data is housed within secure, encrypted cloud facilities compliant with international ISO 27001 standards and Ghanaian data transfer regulations.

7. Data Protection Officer (DPO) & Regulatory Recourse

If you have inquiries, access requests, or wish to exercise your statutory rights under Act 843, please direct correspondence to our designated Data Protection Lead: