Open Base Africa Ltd ("Open Base Africa", "OBA", "we", "us", or "our") respects privacy. We build and run operations teams in Africa for companies based abroad, and trust is central to that work. This Privacy Policy explains how we collect, use, share, and protect personal information through our website, www.openbaseafrica.com, and through related enquiries, consultations, and business development communications.

Scope

This policy is written for website visitors, prospective clients, partners, investors, job applicants, and other people who contact us. Client operations, employee records, and client-specific data processing may be governed by separate agreements, including master services agreements, data processing addenda, employment agreements, confidentiality agreements, and statements of work.

1. Who We Are

Open Base Africa Ltd is a Ghana-based operations company with a presence in Accra, Ghana and Seattle, Washington, USA.

For privacy questions, requests, or complaints, contact us using the email address above with the subject line "Privacy Request".

2. Information We Collect

We collect only the information we reasonably need to respond to enquiries, evaluate opportunities, operate our website, protect our business, and comply with legal obligations.

Information you provide directly may include:

• Name, job title, company name, business email address, phone number, country, and preferred contact method.
• Messages, consultation requests, project briefs, service enquiries, proposal details, and information about the operations you want us to build or manage.
• Investor, partner, vendor, or business development information that you choose to send us.
• Recruitment information, if you apply for a role or send us career information, such as your CV, employment history, qualifications, references, and contact details.
• Documents or files you choose to share with us.

Information collected automatically may include:

• IP address, browser type, device type, operating system, pages viewed, referring pages, date and time of visit, approximate location derived from IP address, and similar analytics data.
• Cookie and tracking information, where cookies or similar technologies are used on the website.

Information from other sources may include:

• Referrals from clients, partners, advisors, or professional contacts.
• Public business information, such as company websites, LinkedIn profiles, corporate registries, or other sources used for normal B2B due diligence and outreach.
• Information from service providers that support our website, email, analytics, scheduling, security, or customer relationship management.

3. Sensitive Personal Information

Our public website is not designed to collect sensitive personal information. Please do not send us sensitive personal information unless we specifically request it and explain why it is needed.

Sensitive personal information may include government identification numbers, financial account details, health information, biometric information, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, criminal records, or information about children.

If you send us sensitive information without being asked, we may delete it or handle it only to the extent necessary to respond to your request, protect our legal position, or comply with applicable law.

4. How We Use Personal Information

We may use personal information to:

• Respond to enquiries and consultation requests.
• Understand a prospective client's operational needs.
• Prepare proposals, quotes, presentations, and service recommendations.
• Schedule calls, meetings, and follow-ups.
• Conduct due diligence on prospective clients, partners, vendors, investors, and advisors.
• Manage business development, client relationships, and investor or partner communications.
• Review recruitment enquiries and job applications.
• Operate, maintain, secure, and improve our website and systems.
• Monitor website usage and understand what content is useful to visitors.
• Send business updates or marketing communications where permitted by law.
• Prevent fraud, misuse, security incidents, and unlawful activity.
• Keep records needed for contracts, compliance, accounting, tax, legal claims, and internal administration.
• Comply with applicable laws, regulator requests, court orders, and lawful government requests.

5. Legal Bases Where Required

Where privacy law requires a legal basis for processing, we rely on one or more of the following:

• Consent, where you have agreed to a specific use, such as receiving certain marketing communications.
• Contract or pre-contract steps, where processing is needed to respond to a service enquiry, prepare a proposal, negotiate terms, or perform an agreement.
• Legitimate interests, where we have a business reason to process information and those interests are not overridden by your rights and freedoms. Examples include B2B communications, website security, fraud prevention, business development, service improvement, and record keeping.
• Legal obligation, where we must process information to comply with law, regulation, tax, accounting, employment, immigration, data protection, or court requirements.
• Vital interests or public interest, where applicable law recognizes those grounds and the facts justify their use.

6. Cookies and Analytics

Our website may use cookies, pixels, tags, logs, or similar technologies to help the site work properly, understand traffic, improve content, and protect the site.

Cookies may be used for:

• Essential website functions.
• Analytics and performance measurement.
• Security and fraud prevention.
• Remembering preferences, where applicable.
• Marketing or advertising, if we later enable those features.

You can usually control cookies through your browser settings. If the website uses non-essential analytics, marketing, or advertising cookies, we should provide appropriate cookie controls where required by law.

We do not currently intend to sell personal information. If we later use advertising technologies that count as "selling" or "sharing" personal information under California law, we will update this policy and provide any required opt-out mechanism.

7. How We Share Personal Information

We do not sell personal information for money. We share personal information only where there is a legitimate reason to do so.

We may share information with:

• Service providers that host, operate, secure, or support our website, email, cloud storage, analytics, CRM, scheduling, document management, IT, and communications systems.
• Professional advisors, including lawyers, accountants, auditors, insurers, and consultants.
• OBA team members, directors, employees, contractors, advisors, and approved representatives who need the information for their work.
• Prospective or active clients, partners, vendors, or investors where the sharing is necessary for a business discussion, proposal, due diligence, contract, or project.
• Regulators, courts, law enforcement, tax authorities, government bodies, or other parties where required or permitted by law.
• A buyer, investor, lender, successor, or professional advisor in connection with a financing, merger, acquisition, restructuring, sale of assets, or similar transaction.

When we use service providers, we expect them to process personal information only for the services they provide to us and to protect it appropriately.

8. International Transfers

Open Base Africa operates from Ghana and works with international clients, advisors, and service providers. Your personal information may be processed in Ghana, the United States, the United Kingdom, the European Economic Area, Australia, or other countries where we or our service providers operate.

Where required, we use appropriate safeguards for international transfers. These may include contractual protections, data processing agreements, access controls, and other measures designed to protect personal information in line with applicable law.

9. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.

Typical retention periods include:

• Website enquiries and business development records: up to 3 years after the last meaningful contact, unless a longer period is needed for a contract, dispute, compliance, or legitimate business reason.
• Client, vendor, partner, investor, and contract records: usually up to 7 years after the relationship ends, or longer if required by law or needed for legal claims.
• Recruitment records: usually up to 12 months after the application process ends, unless we need to retain them longer by law or you agree to a longer talent-pipeline period.
• Website analytics and security logs: usually up to 12 months, unless needed longer for security, fraud prevention, troubleshooting, or legal reasons.

When information is no longer needed, we delete it, anonymize it, or securely archive it according to our retention practices.

10. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, confidentiality obligations, staff training, device and system controls, secure storage, backup practices, and vendor oversight.

No website, email system, or online transmission is completely secure. Please avoid sending highly confidential or sensitive information through ordinary website forms or email unless we have agreed on a secure method.

11. Your Privacy Rights

Depending on where you live and how we process your information, you may have rights to:

• Ask whether we hold personal information about you.
• Request access to your personal information.
• Request correction of inaccurate, incomplete, or outdated information.
• Request deletion of information where we no longer have a lawful reason to keep it.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request a copy of certain information in a portable format.
• Opt out of marketing communications.
• Complain to a data protection authority or regulator.

Ghana

If you are in Ghana, your rights may include access, correction, deletion, objection to direct marketing, and related rights under Ghana's Data Protection Act, 2012 (Act 843).

UK / EEA

If you are in the United Kingdom, European Economic Area, or another jurisdiction with GDPR-style rights, you may have rights to access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and complaint to a supervisory authority.

California

If you are a California resident and the California Consumer Privacy Act applies to our processing, you may have rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising your rights. We do not knowingly sell personal information for money.

Australia

If you are in Australia and the Australian Privacy Act applies to our processing, you may have rights to access and correct personal information and to make a privacy complaint.

Contact Us