Privacy Policy

1. Who We Are

Chrispo E.P.O Ltd is the data controller responsible for your personal information. We operate serviced accommodation, an event centre, and related hospitality and real-estate services in Ghana, and the website at www.chrispoestate.com. If you have any question about this policy or your data, contact us using the details in Section 13.

2. Information We Collect

2.1 Information you give us

• Account details: your full name, email address, phone number, and a securely hashed password when you register a guest account.
• Booking details: check-in and check-out dates, room type, number of guests, and the name and details of the actual occupant where that differs from the person booking.
• Payment information: payments made online are processed by our payment provider, Paystack. Card and mobile-money details are entered on Paystack's secure systems; we receive only a transaction reference, the amount, the payment method, and its status. We do not store full card numbers.
• Identification: at check-in we record the type and number of the government-issued ID you present (Ghana Card, national ID, or passport), as required by the Ghana Tourism Authority and applicable security legislation.
• Enquiries and messages: information you submit through our contact form (handled by Formspree), by email, WhatsApp, or phone, including event and property-purchase enquiries.

2.2 Information we collect automatically

• Usage data: server logs recording your IP address, browser and device type, pages viewed, referring pages, and the dates and times of your visits.
• Cookies and local storage: small files and browser storage used to keep you signed in and remember your preferences. See Section 5.

2.3 CCTV

CCTV cameras operate in the common areas of our property for the safety and security of guests and staff. Footage is retained for a limited period and is not shared with third parties except where required by law.

3. How We Use Your Information

We use your personal data to:

• create and manage your guest account;
• take, confirm and manage your bookings and event hire;
• process payments and issue receipts and invoices;
• send you essential booking communications (confirmations, receipts, changes);
• send courtesy messages such as check-in and check-out reminders and thank-you notes, unless you have opted out (see Section 7);
• operate our loyalty and promotions programmes;
• respond to your enquiries and provide customer support;
• meet legal, regulatory and tax obligations, including record-keeping required by the Ghana Tourism Authority;
• protect our guests, staff and property, and prevent and investigate fraud, damage or misconduct;
• understand and improve our website and services.

4. Our Legal Basis

Depending on the situation, we rely on one or more of the following bases under the Data Protection Act, 2012 (Act 843):

• Performance of a contract: to take and fulfil your booking and provide the services you have requested.
• Legal obligation: to comply with laws that apply to us, including guest-registration and tax requirements.
• Your consent: for optional communications and certain cookies, which you may withdraw at any time.
• Legitimate interests: to secure our premises, prevent fraud, keep proper business records, and improve our services, provided these do not override your rights.

5. Cookies & Similar Technologies

We use:

• Essential cookies and storage: needed to sign you in, keep your session active, and let core features work. The site cannot function properly without these.
• Preference storage: to remember choices such as staying signed in on this device.

You can control or delete cookies through your browser settings. Blocking essential cookies may prevent you from signing in or completing a booking.

6. How We Share Your Information

We do not sell your personal data. We share it only as follows:

• Payment processing: Paystack, to take and verify your online payments.
• Website and communication services: our hosting provider and our email and contact-form providers (including Formspree), acting on our behalf to run the website and our communications.
• Our team: authorised staff and management, on a need-to-know basis, to service your booking and stay.
• Legal and regulatory bodies: the Ghana Tourism Authority, the Ghana Police Service, tax authorities, courts, and other bodies where we are required or permitted by law to disclose information.
• Professional advisers and successors: auditors and legal advisers, or a buyer if the business is sold or reorganised, subject to appropriate confidentiality.

7. Marketing & Courtesy Emails

If you hold a guest account, you can turn courtesy emails (such as check-in and check-out reminders and thank-you notes) on or off from the email preferences in your account dashboard. Even if you opt out, we will still send essential emails about your bookings, such as confirmations and receipts, because these are part of providing the service you booked.

8. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, tax and reporting requirements. Booking, payment and guest-registration records are generally retained for the period required by Ghanaian law. Account information is kept while your account is active; if you close your account, we delete or anonymise your data unless we are required to keep it. CCTV footage is retained for a short period and then overwritten.

9. How We Protect Your Data

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access or disclosure. These include hashed password storage, restricted staff access, secure payment processing through Paystack, and transmission of website data over encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Some of the service providers we use (for example for payments, contact-form handling and email delivery) may process data on servers located outside Ghana. Where this happens, we take steps to ensure your data continues to be protected to a standard consistent with the Data Protection Act, 2012 (Act 843).

11. Your Rights

Subject to the Data Protection Act, 2012 (Act 843), you have the right to:

• ask what personal data we hold about you and request a copy;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data where there is no lawful reason for us to keep it;
• object to or ask us to restrict certain processing;
• withdraw consent where we rely on it, without affecting processing already carried out;
• complain to the Data Protection Commission of Ghana.

To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before acting on your request.

12. Children

Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. Where a booking includes children, the details are provided by the responsible adult making the booking.

13. Contact Us

For any question about this Privacy Policy, or to exercise your data-protection rights, contact us: