Your information.
Handled with care.

01. Who we are

Goldchest Technologies is based in Ghana and works with businesses internationally. We are responsible for deciding how personal information is used for our own website, enquiries and business outreach (the “data controller”).

Goldchest Technologies
P.O. Box DS 470, Dansoman Estate
Accra, Ghana
[email protected]

This notice concerns our own business activities. If we handle your customers’ information on your instructions while delivering a service, the project agreement and applicable data-processing terms govern that work.

02. When you get in touch

Our project form collects your name, email address, business name, selected goal and project description, plus any website or social link, location, timing or budget you choose to provide. We also receive information you share in emails or calls and keep relevant correspondence about your request.

We use this to understand what you need, respond, prepare a proposal and discuss next steps. Required form fields help us assess and answer your enquiry; without them we may be unable to do so. Optional fields are your choice. There is no obligation to buy a service.

Netlify Forms receives and stores website form submissions. Sending a brief does not subscribe you to marketing emails. Please do not include passwords, payment-card details, health information or confidential customer records.

The website action planner generates your plan in your browser. Its answers are not submitted through our enquiry form unless you choose to share them with us.

03. Why we use information

Where the UK GDPR or EU GDPR applies, our legal basis depends on the purpose and our relationship with you:

Answering enquiries and providing services

Taking steps you request before entering a contract, or performing a contract with you. When you represent a company, our legitimate interest is communicating with that company and delivering its project.

Relevant business development

Our legitimate interest in offering relevant services to businesses, only after considering your expectations and rights and where the marketing rules allow it. Where prior consent is required, legitimate interests cannot replace it.

Running and protecting the website

Our legitimate interest in reliable hosting, preventing spam and addressing misuse. Hosting providers may process technical request information such as IP addresses, browser information and access times.

Advertising and optional tracking

Consent where required for advertising cookies and similar technologies. Your advertising choices are separate from your ability to contact us.

Required records

Applicable legal obligations, such as accounting requirements. Where record-keeping is not an obligation under the relevant GDPR regime, we assess the appropriate basis, including legitimate interests in maintaining business records and handling legal claims.

04. If we contact your business

We may find professional contact information on company websites or through Google search, and contact potential clients by email or telephone. This can include a name, work email or telephone number, job role, business name, website and notes about the business need we identified.

Public availability is not permission to market. Our outreach must be relevant to your work and permitted for your location, business type and contact channel. UK rules distinguish corporate subscribers from sole traders and some partnerships; EU electronic-marketing rules vary by country.

When we obtain your personal information elsewhere, we will explain the source and purpose when we first contact you, or earlier where required, and no later than one month after obtaining it unless a lawful exception applies.

You can object to direct marketing at any time. Reply to our message or email [email protected]. We will stop using your information for that purpose. We retain the minimum suppression record needed to respect your choice, rather than re-adding you to future outreach.

05. Sharing & international access

Netlify provides website hosting and form handling. Zoho Mail handles our business email correspondence. Google provides AdSense advertising. These providers process information needed to deliver their services. Information may also be disclosed where necessary to professional advisers or authorities for an applicable legal requirement or claim.

Goldchest operates in Ghana, so information you send us can be accessed there. Providers may also process information in other countries, including the United States, where privacy protections may differ from your country’s.

Netlify’s Data Processing Agreement forms part of its service terms and includes EU Standard Contractual Clauses and a UK transfer addendum for covered transfers. Zoho offers a Data Processing Addendum and describes its international safeguards in its privacy information. Processing locations and the applicable arrangements depend on the service and account region.

You can contact us to ask about recipients and the safeguards relevant to your information.

06. How long we keep information

We keep unsuccessful project enquiries for up to 12 months after the last meaningful contact. If a project is still being discussed, we keep the relevant correspondence while that discussion continues. Prospect records that do not result in a response are deleted within six months after our last outreach. These periods apply to our enquiry records, business email and exported lead lists.

When someone becomes a client, relevant information becomes part of the client record. We retain client records for the relationship and as needed for applicable accounting requirements or legal claims. Where a specific legal obligation or dispute requires us to keep information longer, we limit its use to that purpose. We retain only the minimum contact details needed to honour a marketing opt-out for as long as necessary.

07. Cookies, advertising & other websites

Goldchest uses Google AdSense. Where advertising is displayed, Google and its advertising partners may use cookies or similar identifiers to serve and measure ads, limit repetition and, depending on your choices, personalise advertising. This can involve device identifiers, IP addresses and information about your browsing activity.

For UK and European visitors, the AdSense consent message lets you make choices about optional advertising purposes and partners. You can change or withdraw those choices through the consent message’s privacy settings where ads are served. Withdrawal does not affect processing that was lawful before it.

Read how Google uses information from partner sites and Google’s cookie information. Browser cookie controls are also available, but do not replace the site’s consent choices.

Articles link to videos on YouTube and resources on ArcGIS instead of loading those services inside the page. Those providers receive information when you choose to visit them, under their own privacy notices.

Links to external websites take you to services with their own privacy notices. We will update this notice and any necessary consent controls before introducing new tracking.

08. Your choices & rights

Depending on the law that applies and the circumstances, you can:

• Ask for access to your personal information and a copy of it.
• Ask us to correct inaccurate or incomplete information.
• Request deletion or restriction of processing, subject to applicable exceptions.
• Object to processing based on legitimate interests, and object to direct marketing at any time.
• Request a portable copy where processing is automated and based on consent or a contract.
• Withdraw consent at any time, without affecting earlier lawful processing.

Email [email protected]. We may need proportionate information to verify your identity. Under the UK/EU GDPR, requests are normally answered within one month; a permitted extension of up to two further months for complexity or multiple requests will be explained within the first month. Requests are normally free.

The project form does not make automated eligibility or pricing decisions. Any future use of automated decisions with legal or similarly significant effects would require a separate assessment and appropriate information for you.

09. Questions, complaints & updates

We’re happy to help with privacy questions at [email protected]. You also have the right to complain directly to the relevant regulator; you do not have to contact us first.

• UK: Information Commissioner’s Office (ICO).
• EU/EEA: your local data protection authority, including where you live, work or believe an infringement occurred.
• Ghana: Data Protection Commission.

We will update this notice when our practices change and provide additional information where a new use of your information requires it.