This policy explains what personal information NTOMA APP ("we") handles in Ntoma, why, and the choices you have. We follow Ghana's Data Protection Act, 2012 (Act 843).
1. Two kinds of information
- Shop account information: the details of tailoring businesses and their team members who use Ntoma. For this, we are the data controller.
- Shop customer information: the details a shop records about its own customers, and what customers enter on a shop's booking page. For this, the shop is the data controller and we process it only on the shop's instructions to run Ntoma. Customers should contact the shop first about their information. We will help the shop respond.
2. What we collect
- Account details: name, email, phone or WhatsApp number, shop name, logo, address and password (stored only as a secure one-way hash).
- Records shops create: customers' names and phone numbers, optional email and location, body measurements, orders, garment details, prices, payments, bookings and notes.
- Booking requests: the name, phone number, preferred date and time and message a customer enters on a shop's booking page.
- Payments to Ntoma: the amount, date and MoMo or bank reference of subscription payments. We never see or store card or MoMo PINs.
- Technical information: sign-in records, IP address (to block abuse), a record of changes made in each shop (the Activity log), and daily counts of how much each shop uses Ntoma.
- Cookies: one cookie keeps you signed in and one remembers light or dark mode. We use no advertising or third-party tracking cookies.
3. Why we use it
- To provide Ntoma: run your shop, show booking and tracking pages, and produce invoices and receipts. This is needed to perform our agreement with you.
- To send service messages you rely on: password resets, new-booking alerts and the morning summary. You can turn the alerts off in My account.
- To keep Ntoma secure, prevent abuse and fix problems. This is our legitimate interest.
- To understand which features shops use so we can improve them. We look at usage counts, not the content of your records.
- To manage billing and contact shop owners about their account.
We do not sell personal information and we do not use it for advertising.
4. Who we share it with
- Service providers who help us run Ntoma, only as needed: our hosting provider (servers and backups) and our email provider (sending service emails). They are bound to protect it.
- WhatsApp: when you tap a WhatsApp button, the message opens in your own WhatsApp app and is sent by you, under WhatsApp's own terms.
- Authorities, only where the law requires it.
5. Where it is stored
Ntoma runs on servers operated by our hosting provider, which may be located outside Ghana (for example in the European Union). Information is encrypted when it travels between your device and our servers, and we only use providers that offer adequate protection for personal information.
6. How long we keep it
- Shop information is kept while the shop's account exists.
- Demo shops are deleted automatically after 3 days.
- Shops that remain unpaid for 60 days after a trial or yearly period ends may be deleted after we warn the owner.
- When information is deleted, it is removed from our backups within 30 days.
- Sign-in attempt records are kept for one day and password-reset links expire after 30 minutes.
7. How we protect it
- Every shop's information is kept separate, and access is checked on every request.
- Passwords are stored as one-way hashes, and repeated failed sign-ins are blocked for a while.
- Team members only see what their role allows. For example, staff cannot see prices or payments.
- Every change is recorded in the shop's Activity log, and the database is backed up every night.
8. Your rights
Under Act 843 you can ask to see the personal information held about you, have it corrected or deleted, and object to how it is used. Shop users can correct most information directly in Ntoma. For anything else, write to [email protected]. We will respond within a reasonable time and within any period the law sets.
If you are not satisfied with our response, you can complain to the Data Protection Commission of Ghana.
9. Children
Ntoma accounts are for businesses, not children. Shops that record measurements or orders for children should do so only with a parent's or guardian's agreement.
10. Changes
We may update this policy. We will tell shop owners about significant changes before they apply.
11. Contact
NTOMA APP · [Business address: set PLATFORM_ADDRESS] · [email protected]