Cyber Liability Policy

1. Purpose & Scope

This Cyber Liability Policy explains how Kraapht Bags Ltd protects the security of kraaphtbags.com, what happens in the event of a cyber security incident, and how liability for such incidents is handled. It applies to all visitors, account holders, and customers of kraaphtbags.com, and should be read alongside our Privacy Policy and Terms of Service.

2. Security Measures We Take

Kraapht Bags Ltd uses reasonable technical and organizational measures to protect kraaphtbags.com and the personal data it holds, including encrypted transmission (HTTPS), access controls on our systems, and reliance on the built-in security infrastructure of our service providers — Supabase (accounts and database), Paystack (payment processing), and Vercel (website hosting). No website or system can be made completely secure, and we cannot guarantee that a security incident will never occur.

3. Your Responsibilities

You play a part in keeping your account secure. As set out in our Terms of Service, you are responsible for keeping your login credentials confidential and for all activity under your account, and you should notify us immediately at kraaphtbags@gmail.com if you suspect unauthorized access to your account.

4. Third-Party Systems & Shared Responsibility

kraaphtbags.com relies on third-party providers for payments (Paystack) and account/data storage (Supabase). These providers are responsible for the security of their own systems and infrastructure. Kraapht Bags Ltd is responsible for the security of kraaphtbags.com itself and for how it configures and uses these third-party services. If a security incident originates entirely within a third-party provider's own systems, and is not caused by how Kraapht Bags Ltd configured or used that service, Kraapht Bags Ltd will still notify and support affected customers as described in Section 6, but is not liable for that provider's independent security failure; in that case, your recourse may be against the provider directly.

5. Incident Detection & Response

Kraapht Bags Ltd monitors kraaphtbags.com and its systems for signs of unauthorized access or unusual activity, using the security tools provided by its infrastructure providers. If a suspected security incident is identified, Kraapht Bags Ltd will investigate, take reasonable steps to contain it, and notify affected parties as described in Section 6.

6. Notification in the Event of a Cyber Incident

If a cyber security incident occurs that is likely to put your personal data at risk, we will notify affected users and, where required, the Data Protection Commission of Ghana, without undue delay, as described in our Privacy Policy.

7. Limitation of Liability for Cyber Incidents

For customers who have placed an order with us, Kraapht Bags Ltd's total liability for any and all claims arising from a cyber security incident — including any resulting indirect or consequential loss — is limited as set out in our Terms of Service: capped at the amount paid for the most recent relevant order. For website visitors and account holders who have not placed an order, kraaphtbags.com is provided free to browse and register, and Kraapht Bags Ltd's liability for a cyber security incident is excluded to the maximum extent permitted by law. Nothing in this section excludes liability that cannot be excluded under Ghanaian law.

8. Insurance Status

Kraapht Bags Ltd does not currently carry cyber liability insurance. We rely on the security measures described in this Policy to protect our systems and your data.

9. Reporting a Security Vulnerability

If you discover a security vulnerability on kraaphtbags.com, please report it to us at kraaphtbags@gmail.com with enough detail for us to investigate. We ask that you report vulnerabilities responsibly and do not access, modify, or delete data beyond what is necessary to demonstrate the issue. We will not pursue legal action against anyone who reports a vulnerability to us in good faith and in accordance with this section.

10. Changes to This Policy

Kraapht Bags Ltd may update this Policy at any time. Changes take effect once posted on kraaphtbags.com. We encourage you to review this Policy periodically.

11. Contact

Kraapht Bags Ltd
Accra, Ghana
Email: kraaphtbags@gmail.com
WhatsApp / Phone: +233 558 619 224