1. Who is responsible for your data
Studio Visio Ltd (trading as Visio Studio), a company incorporated in Ghana, is the data controller for personal data described in this policy. Our Data Protection Supervisor oversees how we handle personal data and can be contacted using the details in section 12.
2. What we collect
This website has no accounts, sign-up forms or advertising trackers. We collect personal data only in these situations:
| Situation | Data |
|---|---|
| You email, call or message us | Your name, contact details, and anything you choose to tell us (for example about your organisation or project). |
| We work together | Business contact details of your team, project communications, contracts, invoices and payment records. |
| You visit the website | Technical data processed automatically by our hosting provider to deliver and protect the site: IP address, browser and device type, pages requested, referring page and timestamps. |
| You apply to work with us | Your CV, portfolio links and the information you include in your application. |
We do not knowingly collect special personal data (such as health, religious or political information) through this website, and we ask you not to send it to us.
3. How we use it, and our lawful basis
| Purpose | Lawful basis (Act 843, s.20) |
|---|---|
| Responding to your enquiry and preparing a proposal | Steps taken at your request before entering a contract; legitimate interest |
| Delivering services under a Project Agreement and managing our relationship | Performance of a contract |
| Operating, securing and improving the website | Legitimate interest |
| Assessing job applications | Steps taken at your request; legitimate interest |
| Keeping accounting, tax and company records | Compliance with a legal obligation |
| Sending occasional studio news (only if you opt in) | Consent, which you can withdraw at any time |
We do not sell personal data, and we do not use it for solely automated decisions that significantly affect you.
4. Who we share it with
We share personal data only where necessary, with:
- Service providers acting as our processors—for example website hosting and security (Cloudflare), email and document collaboration (Google), and code hosting (GitHub)—each bound by written terms requiring them to protect the data and use it only on our instructions (Act 843, s.30);
- Professional advisers such as accountants and lawyers, under duties of confidentiality;
- Authorities where we are required by law, court order or a lawful request from a regulator;
- A successor if our business is reorganised or sold, subject to this policy.
When you load our pages, your browser also fetches styling and fonts from third-party networks (Tailwind CSS from cdn.tailwindcss.com and Inter from Google Fonts). Those providers receive your IP address and browser details to serve those files, under their own privacy policies.
5. Where your data is processed
We are based in Ghana. Some of our service providers—including our website host, which serves the site from a global network of data centres—may process data outside Ghana. Where that happens, we rely on providers that apply appropriate contractual and technical safeguards, and we take care that transfers are consistent with Act 843.
6. How long we keep it
| Record | Retention |
|---|---|
| Enquiries that don’t lead to a project | Up to 24 months after our last contact |
| Client project records and communications | Duration of the engagement plus 24 months |
| Financial and statutory records | 6 years, as required by tax and company law |
| Job applications | Up to 12 months, unless you agree to a longer period |
| Website request logs | Short-term, as set by our hosting provider for security and operations |
| Marketing preferences | Until you withdraw consent |
When data is no longer needed, we delete it or de-identify it so it cannot be reconstructed (Act 843, s.24).
7. Security
We protect personal data with appropriate technical and organisational measures, including encryption in transit (HTTPS), access controls and multi-factor authentication on the systems we use, and least-privilege access for our team. No method of transmission or storage is completely secure, but if a breach occurs that affects your data, we will notify you and the Data Protection Commission as required by Act 843, s.31.
8. Your rights
Under Act 843 you have the right to:
- access the personal data we hold about you (s.35);
- ask us to correct inaccurate data, or to delete data we no longer have a right to keep (s.33);
- object to processing that is likely to cause you damage or distress (s.39);
- stop us using your data for direct marketing (s.40);
- not be subject to solely automated decisions that significantly affect you (s.41);
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email visiostudioworks@gmail.com. We may need to verify your identity before responding. We will reply without undue delay and within the time limits set by the Act.
9. Children
This website is intended for businesses and adults. We do not knowingly collect personal data from children under 18. If you believe a child has sent us personal data, please contact us and we will delete it.
10. Our products
This policy covers this website and our studio’s client and recruitment activities. Products we build or operate—such as Asem and Ananse—have their own privacy policies, which explain how they handle data in those products.
11. Changes to this policy
We review this policy at least once a year and when our practices change. The “Last updated” date above shows the latest version. If we make significant changes that affect how we use data you have given us, we will tell you directly where we can.
12. Contact & complaints
For privacy questions or requests, contact our Data Protection Supervisor:
- Email: visiostudioworks@gmail.com (subject line “Privacy”)
- Phone: +233 20 158 8243
If you are not satisfied with our response, you have the right to complain to the Data Protection Commission of Ghana.