Privacy Policy
Last Updated Friday, September 15, 2023
Your privacy is of paramount importance to us. We are dedicated to upholding the privacy of your personal data, in line with the relevant laws of Ghana. This Privacy Policy outlines how we collect, use, and protect your Personal Data when you use the Tewaa School Finance App ("App"). By utilizing the App, you signify your agreement to the practices described in this policy.
Types of Information We Collect
We collect a variety of information to deliver and enhance our services:
- Personal Details: This encompasses information you provide for account creation, such as name, contact details, date of birth, identity documents, and educational information.
- Transaction Data: We collect transaction history, balances, and payment details to facilitate money transfers using our payment channels.
- Financial Information: For specific products/services, we may collect financial details like payment history.
- Images and Media We may collect images of documents required for certain products/services and access your device camera and microphone for functionalities like video KYC and voice typing.
- Device Information: We gather device-related data including location, communication information, contacts, call logs, and device details.
- Network Information: We collect WiFi details and access NFC chip for specific functionalities like network security and tap to pay.
How We Use Your Information
We use the collected information for various purposes, including but not limited to:
- Service Provision: To provide and manage the products and services you avail through the App.
- Analytics: To improve our services and analyze user behavior and preferences.
- Communication: To send notifications, updates, and promotional materials relevant to your interests.
- Customer Support: To address queries, grievances, and provide assistance.
- Legal Obligations: To comply with applicable laws, regulations, and court orders.
Sharing and Storage of Your Personal Data
We do not share your Personal Data without your consent. We may share data on a "need to know" basis with designated personnel, partners, or service providers for the purpose of providing our services. Your data may be stored on our servers and on servers of third parties with whom we have contractual relationships. Sensitive Personal Data is stored exclusively within Ghana.
Cookie Policy
Cookies and tracking technologies play a crucial role in enhancing your experience while using the Tewaa School Finance App ("App"). Cookies are small pieces of data that are stored on your device by a web server.
These technologies help us understand how you interact with our services, personalize your experience, and improve our offerings. This Cookie Policy explains how we use cookies and similar technologies and how you can manage your preferences.
Types of Cookies We Use
- Essential Cookies: These cookies are necessary for the functioning of the App and enable core features such as security, account access, and transaction processing. Disabling these cookies may prevent you from using certain essential features.
- Functional Cookies: Functional cookies enhance your experience by remembering your preferences and choices. For instance, they help us pre-fill forms with your saved information, making your interaction with the App smoother.
- Analytics and Performance Cookies: We use these cookies to collect information about how you use the App. They help us understand user behavior, identify popular features, and identify areas for improvement. This data is aggregated and anonymized for analysis.
- Advertising and Targeting Cookies: These cookies are used to deliver advertisements that are relevant to your interests. They also help us measure the effectiveness of our advertising campaigns. These cookies may be set by us or by third-party advertising partners.
- Device Information: We gather device-related data including location, communication information, contacts, call logs, and device details.
- Third-Party Cookies: Some of our pages or features may use third-party services or software, such as social media sharing buttons or embedded videos. These third parties may place cookies on your device. We do not control these cookies, and you should refer to the third party's privacy policy for more information.
Managing Cookies
You can manage your cookie preferences within the App settings or in your device's browser settings. Most web browsers allow you to control cookies through their settings. However, disabling certain cookies may impact your experience on the App and limit your access to specific features.
Opting Out of Tracking
You can opt out of certain tracking technologies used by our advertising partners by visiting the applicable opt-out pages. Please note that opting out of certain cookies may not entirely stop the collection of data in relation to the App, but it will prevent the data from being used for targeted advertising purposes.
Changes to Cookie Policy
We may update this Cookie Policy to reflect changes in our practices or regulatory requirements. We encourage you to review this policy periodically for any updates.
Data Security
Ensuring the security and confidentiality of your personal data is a paramount commitment for us. We employ stringent security measures to safeguard your data against unauthorized access, modification, disclosure, or loss. Our approach to data security encompasses multiple layers of protection to ensure the highest level of safety for your information.
Encryption and Secure Protocols
We utilize industry-standard encryption protocols to protect your data during transmission and storage. This includes encrypting data using secure socket layer technology (SSL/TLS) while it's being transmitted between your device and our servers. This encryption ensures that the information exchanged between you and the App remains confidential and cannot be intercepted by unauthorized parties.
Access Control and Authentication
Access to your data within the App is restricted to authorized personnel and partners on a need-to-know basis. We implement robust authentication mechanisms to ensure that only authorized users can access sensitive information. Multi-factor authentication (MFA) adds an extra layer of security, requiring multiple forms of verification before granting access.
Regular Security Audits
We conduct regular security audits and assessments to identify and rectify vulnerabilities in our systems. These audits are carried out by independent third-party cybersecurity experts to provide an objective evaluation of our security infrastructure. Any identified risks or weaknesses are promptly addressed to maintain a robust security posture.
Employee Training and Awareness
Our employees undergo rigorous training to understand the importance of data security and privacy. They are educated about best practices for handling sensitive information and maintaining the confidentiality of user data. Regular awareness programs ensure that our team remains updated on the latest security threats and mitigation strategies.
Secure Development Practices
We follow secure software development practices to ensure that the App is built with security in mind. This includes conducting code reviews, applying security patches promptly, and adhering to industry best practices to prevent common vulnerabilities.
Data Retention and Disposal
We retain your personal data only for as long as required to fulfill the purposes for which it was collected. Once the purpose no longer exists, we dispose of the data in a secure manner to prevent unauthorized access. We also follow any legal or regulatory requirements for data retention and disposal.
Incident Response Plan
Despite our best efforts, security incidents can still occur. We have a comprehensive incident response plan in place to manage and mitigate the impact of such incidents. This plan includes steps to identify, contain, investigate, and report any data breaches or security breaches in a timely manner.
User Responsibilities
While we implement robust security measures, your active involvement is also crucial. We recommend that you take the following precautions:
- Use strong, unique passwords, and consider using a password manager.
- Enable multi-factor authentication (MFA) whenever possible.
- Keep your device's operating system and the App updated to the latest versions.
- Be cautious of sharing sensitive information through unsecured channels.
Your Rights
We respect your rights and understand the importance of maintaining control over your personal data. As a user of the Tewaa School Finance App ("App"), you have certain rights that you can exercise to ensure transparency, accountability, and the protection of your privacy.
Access and Rectification
You have the right to access the personal data we hold about you. If you believe that any of the information we have about you is inaccurate, incomplete, or outdated, you can request its rectification. You can do this by accessing your account settings within the App or by contacting our support team at support@tewaa.africa.
Data Portability
You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format. This allows you to transfer your data to another service provider if you wish to do so. You can initiate a data portability request by reaching out to us at support@tewaa.africa.
Withdraw Consent
If you have previously provided consent for the processing of your personal data, you have the right to withdraw that consent at any time. Please note that withdrawing consent may affect the availability of certain services or functionalities within the App. You can manage your consent preferences within the App settings.
Erasure ("Right to be Forgotten")
You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected or processed. To initiate an erasure request, you can reach out to us at support@tewaa.africa. Please note that some data may be retained for compliance with legal obligations or other legitimate purposes.
Restriction of Processing
You can request the restriction of processing of your personal data under specific conditions, such as when you contest the accuracy of the data or when the processing is unlawful. If you believe your data is being processed incorrectly or unlawfully, please contact us at support@tewaa.africa.
Object to Processing
You have the right to object to the processing of your personal data if the processing is based on legitimate interests or for direct marketing purposes. You can express your objection by contacting us at support@tewaa.africa.
Complaints
We are committed to maintaining the highest standards of data protection and privacy. If you believe that your rights as a user of the Tewaa School Finance App ("App") are not being respected or that your personal data is being processed in violation of applicable laws and regulations, we encourage you to voice your concerns.
Lodging a Complaint
If you have a complaint related to the processing of your personal data, you can lodge a complaint with us. We take all complaints seriously and will address them promptly and thoroughly. You can initiate the complaint process by following these steps:
- Contact Us: In the event that you have a complaint, the first step is to contact our designated Privacy Officer at support@tewaa.africa. Please provide as much detail as possible about your concern.
- Description: Clearly describe the nature of your complaint, including the specific data or processing activity you are concerned about. Providing detailed information will help us better understand and investigate your complaint.
- Supporting Documents: If you have any supporting documents or evidence related to your complaint, please include them in your communication. This will assist us in conducting a thorough investigation.
- Response Time: We will acknowledge receipt of your complaint and initiate an investigation. We are committed to responding to complaints within a reasonable timeframe, typically within 5 business days.
Escalating the Complaint
If you are not satisfied with the resolution provided to your initial complaint, you have the right to escalate the matter. You can follow these steps:
- Appeal: If you disagree with the outcome of the initial investigation, you can appeal the decision. Clearly state the reasons for your appeal and provide any additional information you believe is relevant.
- Internal Review: Your appeal will be reviewed internally by our designated Privacy Officer or another authorized individual. We will conduct a comprehensive review of the case and provide a response within 5 business days.
Contacting the Relevant Authority
If you are dissatisfied with our resolution process, you have the right to lodge a complaint with the relevant supervisory authority responsible for data protection in Ghana (Data Protection Commission). The supervisory authority's role is to independently review complaints and ensure that data protection laws are upheld.
Changes to the Complaints Process
We are committed to continuously improving our processes to address user concerns effectively. As such, this section on "Complaints" may be updated from time to time. We recommend reviewing this section periodically to stay informed about the complaints process.
Changes to Your Rights
As we strive to enhance your experience and uphold your rights, this section may be updated from time to time. We encourage you to review this section periodically to stay informed about your rights and how to exercise them.
Changes to Privacy Policy
We may update this Privacy Policy as required. Material changes will be communicated through the App or other means. Continued use of the App after changes indicates your acceptance.
Contact Us
For any questions, concerns, or requests regarding your Personal Data or this Privacy Policy, contact us at support@tewaa.africa.