Privacy Policy

Last updated: 29 July 2026

Avalon Technologies Ghana ("Avalon", "we", "us") builds and licenses business software, and operates this website. This notice explains what personal information we collect, why we collect it, how long we keep it, and what you can ask us to do with it.

We are the data controller for the information described here. Our processing is governed by the Data Protection Act, 2012 (Act 843) of the Republic of Ghana.

1. Who we are

• Avalon Technologies Ghana
• Cinergy City Estate, Off Central University College Road, Dawhenya, Accra, Ghana
• Email: info@avalongh.com
• Telephone: +233 20 092 8765 · +233 24 707 1369 · +233 20 924 0000

2. What we collect, and why

When you contact us

Our contact form asks for your name, email address, an optional telephone number, and your message. We also record the IP address the message was sent from and the time it was sent, which helps us identify and block automated spam. We use this information solely to reply to you and to keep a record of what was discussed.

Lawful basis: your consent, and our legitimate interest in responding to enquiries about our services.

When you subscribe to our mailing list

We store your email address, an optional name, the date you subscribed, and where on the site you subscribed from. Every email we send includes a one-click unsubscribe link that works without needing to log in or contact us.

If you unsubscribe, we keep your address on a suppression list rather than deleting it outright. This is deliberate: it is the only reliable way to ensure you are not added back by a later import. You can ask us to erase it completely instead.

Lawful basis: your consent, which you may withdraw at any time.

When you buy software or reserve an event place

We collect your name, email address, telephone number, organisation, country, the item purchased, the amount, and the payment reference. We keep the IP address the order was placed from as a fraud-prevention measure.

We never see, receive, or store your card details. Card data is captured directly by our payment providers on their own systems. We receive only a confirmation that payment succeeded, along with a reference we can use for support and reconciliation.

Lawful basis: performance of our contract with you, and compliance with our tax and accounting obligations.

When you simply browse

Our servers keep standard access logs. We also count page views on product pages so we know which of our systems people are interested in — this is an anonymous counter, not tied to you.

If website analytics are enabled, they are described in section 5 below.

3. What we never do

• We do not sell, rent, or trade your personal information to anybody.
• We do not buy mailing lists, and we do not add people to our mailing list who did not ask to be on it.
• We do not use your information to make automated decisions that have a legal or similarly significant effect on you.
• We do not run advertising networks or behavioural tracking on this website.

4. Who we share information with

We share the minimum necessary with a small number of service providers:

• Paystack — processes card, mobile money, bank transfer and USSD payments. They receive your name, email and the transaction amount.
• Stripe — processes international card payments, Apple Pay and Google Pay. They receive your name, email and the transaction amount.
• Our web host and email provider — who necessarily store the data in order to run the site and deliver messages.

Each of these providers is bound by its own privacy terms and applicable law. Because Paystack and Stripe operate internationally, payment data may be processed outside Ghana; both maintain PCI-DSS certification and contractual safeguards for such transfers.

We will also disclose information where we are legally required to — for example in response to a valid court order or a lawful request from the Data Protection Commission or another competent authority.

5. Cookies and similar technologies

This website uses cookies sparingly:

• Session cookie — a single essential cookie that keeps you signed in if you are an administrator, and protects forms against cross-site request forgery. It expires when you close your browser or after a period of inactivity. The site cannot function securely without it.

If we have enabled Google Analytics, it sets its own cookies to measure visits in aggregate. You can opt out using Google's browser add-on, or by blocking cookies in your browser settings. Blocking analytics cookies does not affect your use of this site.

We do not use advertising, retargeting, or cross-site tracking cookies.

6. How long we keep things

• Contact messages: up to 3 years from your last contact with us, so we have context if you come back.
• Mailing list entries: until you unsubscribe or ask for erasure.
• Order and payment records: at least 6 years, as required by Ghanaian tax and accounting law.
• Download links: the secure link issued after a purchase expires 30 days after payment and allows a limited number of downloads.
• Server and security logs: typically 90 days.
• Backups: encrypted archives are retained on a short rolling window and overwritten as new backups are taken.

7. How we protect your information

The measures below are the ones actually in place on this website, not aspirations:

• The entire site is served over HTTPS; requests made over plain HTTP are redirected.
• All database access uses parameterised queries, which protect against SQL injection.
• Administrator sessions are bound to the browser, time out after inactivity, and rotate their identifiers periodically.
• Administrator passwords are stored as one-way hashes. Nobody at Avalon can read your password.
• Repeated failed sign-in attempts lock the account temporarily.
• Uploaded files are validated by type and content, renamed, and stored in a location where they cannot be executed as code.
• Every change made in our control panel is recorded in an audit log.
• Backups run automatically and are stored separately from the live site.

No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify you and the Data Protection Commission as required by Act 843.

8. Your rights

Under the Data Protection Act, 2012 (Act 843) you have the right to:

• Be informed about how your data is used — which is the purpose of this notice.
• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Object to processing, including direct marketing, at any time.
• Request erasure of your information where we have no continuing legal reason to keep it.
• Withdraw consent you previously gave, without affecting anything done before you withdrew it.
• Complain to the Data Protection Commission if you believe we have handled your information improperly.

To exercise any of these, email info@avalongh.com or call any of the numbers above. We respond within 30 days. We may ask you to confirm your identity first — this protects you from someone else requesting your data.

You can reach the regulator directly at the Data Protection Commission, Ghana — dataprotection.org.gh.

9. Children

This website and our products are intended for businesses and adults. We do not knowingly collect personal information from children under 18. If you believe a child has given us their information, contact us and we will delete it promptly.

10. Data held inside software we build for clients

When we develop or host a system for a client — a school management system, a payroll system, a church management system — the client is the data controller for the information inside it, and we act as a data processor on their instructions. If you are a parent, employee, member or customer of one of our clients and have a question about your data in their system, please contact that organisation directly. We will support them in responding.

11. Links to other websites

Our site links to demonstration systems, client websites, and payment providers. Once you leave our site, this notice no longer applies. We encourage you to read the privacy notice of any site you visit.

12. Changes to this notice

We update this notice when our practices change. The date at the top always reflects the current version. Where a change materially affects how we use information you have already given us, we will tell you directly rather than relying on you noticing the update.

13. Contact

Questions, requests, or complaints about privacy should go to info@avalongh.com, or by post to Avalon Technologies Ghana, Lashibi, Vivian Farm, Adjacent Assemblies of God Church, Accra.