Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Kraapht Bags Ltd ("Kraapht Bags Ltd", "we", "us", or "our") collects, uses, shares, and protects your personal data when you visit kraaphtbags.com, create an account, or place an order with us. It applies to all visitors, customers, and account holders of Kraapht Bags Ltd. This Policy should be read alongside our Terms of Service.

2. Data Controller Information

Kraapht Bags Ltd is the data controller responsible for your personal data under Ghana's Data Protection Act, 2012 (Act 843). Kraapht Bags Ltd is registered in the Republic of Ghana under the Companies Act, 2019 (Act 992), Registration No. CS126850822, TIN C0062045253, and operates from Accra, Ghana.

3. What Personal Data We Collect

3.1 Account Information

When you create an account on kraaphtbags.com, we collect your name, email address, and phone number.

3.2 Order Information

When you place an order, we collect the details of your order, including product specifications (paper type, size, print colours, quantity), any artwork or design files you upload, and your delivery address.

3.3 Payment Information

Payments are processed by Paystack. We do not collect or store your card or mobile money details — Paystack handles this directly and provides us only with a transaction reference and payment status.

3.4 Communications

If you contact us directly (for example, by WhatsApp or email), we collect the information you choose to share in that communication.

4. How We Collect It

We collect personal data directly from you when you create an account on kraaphtbags.com, place an order (including uploading artwork), complete payment through Paystack, or contact us via WhatsApp, phone, or email. We do not collect personal data from you if you only browse the website without creating an account or placing an order.

5. How We Use It

We use your personal data to:

• Process and fulfil your orders, including production and delivery
• Manage your account, including order history and identifying returning customers for applicable discounts
• Communicate with you about your order — confirmations, updates, delivery arrangements, and defect resolution
• Process payments through Paystack
• Maintain the security of our website and prevent fraud

We do not send you marketing or promotional communications (such as marketing emails or WhatsApp messages) using your name, email address, or phone number. All communication from Kraapht Bags Ltd to you directly is transactional and tied to your order or account.

We use website advertising tools (Meta Pixel — see Section 9) to measure and improve the performance of our advertising on Facebook and Instagram. This involves data about your browsing activity on the site, not the account or order information described in Section 3. See Section 9 for details.

Note: as described in our Terms of Service, we may photograph finished products — including products bearing your artwork or branding — and use those images for marketing and portfolio purposes. This is product photography, not a use of your personal data, and is separate from the data uses described above.

6. Sharing With Third Parties

We share personal data with the following third parties, only as necessary to provide our services:

• Paystack — to process your payment. Paystack receives your payment details directly; we only receive a transaction reference and payment status.
• Supabase — our account and database provider, which securely stores your account and order information.
• Our email service provider — to send order-related notifications and confirmations.
• Third-party delivery/transport providers — for deliveries outside Accra, we share your delivery address and contact details with the transport provider arranging your delivery.
• Meta (Facebook/Instagram) — see Section 9.2. The Meta Pixel on kraaphtbags.com shares browsing and conversion data about your visit with Meta to measure and improve our advertising — not your account details (name, email, phone). Meta processes this data under its own privacy policy.

Kraapht Bags Ltd does not sell your personal data and does not share it with any other third party, including for marketing purposes. Kraapht Bags Ltd currently manages all customer data internally and does not use any third-party accounting, marketing, or analytics services beyond those listed above. We may disclose personal data if required to do so by law or a valid legal process.

If you are an institutional or bulk-order client who supplies us with personal data belonging to third parties (for example, recipient names for a personalized event or gift run), that processing is additionally governed by our Data Processing Agreement, which applies automatically whenever such data is submitted.

7. Data Storage, Security & Retention

7.1 Security

We take reasonable technical and organizational measures to protect your personal data, including encrypted transmission (HTTPS) and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Full details of our security practices are set out in our Cyber Liability Policy.

7.2 Where Your Data Is Stored

Your account and order data is stored on Supabase's cloud infrastructure, which may be located outside Ghana. Where personal data is transferred or stored outside Ghana, we take steps to ensure it receives an appropriate level of protection, consistent with Ghana's Data Protection Act, 2012 (Act 843).

7.3 Retention

We retain your account and order data for as long as your account remains active, and for up to 12 months after your account becomes inactive or is closed. After this period, your personal data is deleted, except for records we are required to keep for longer under Ghanaian law — for example, financial and tax records, which we retain for 6 years. If you would like your data deleted sooner, contact us at kraaphtbags@gmail.com and we will act on your request, except where retention is legally required.

7.4 Data Breach Notification

If a security incident occurs that is likely to put your personal data at risk, we will notify affected users and, where required, the Data Protection Commission of Ghana, without undue delay.

8. Your Rights Under Ghana's Data Protection Act

Under Ghana's Data Protection Act, 2012 (Act 843), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data, subject to any legal retention requirements (see Section 7.3)
• Object to the processing of your personal data in certain circumstances
• Complain to the Data Protection Commission of Ghana if you believe your data has been mishandled
• Object to the use of the Meta Pixel for advertising, once it is active (see Section 9.3 for how)

To exercise any of these rights, contact us at kraaphtbags@gmail.com. We will respond to your request within 30 days.

9. Cookies & Website Tracking

9.1 Technical Cookies

Our website uses session/authentication data (via Supabase) to keep you logged in, and requests to third-party services (Google Fonts, Tailwind CSS, Paystack) required to display and operate the site.

9.2 Advertising Cookies (Meta Pixel)

kraaphtbags.com uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram and to track conversions (such as completed orders) resulting from those ads. It runs on every page of the site, and additionally records when a visitor begins configuring an order and when an order is genuinely paid for. It uses cookies and collects information about your visit — such as pages viewed and actions taken on the site — and shares this with Meta. If you are logged into Facebook or Instagram in the same browser, Meta may associate this activity with your Meta account, subject to Meta's own privacy policy. We do not use any other advertising, tracking, or analytics tools.

9.3 Your Choices

Continuing to use kraaphtbags.com constitutes consent to the use of the Meta Pixel as described above. You can decline this tracking by adjusting your browser's cookie settings, using a browser extension that blocks tracking pixels, or managing your ad preferences directly in your Facebook or Instagram account settings.

10. Children's Privacy

Kraapht Bags Ltd's website and services are not directed at children. You must be at least 18 years old, or have the consent of a parent or legal guardian, to create an account or place an order (see our Terms of Service). We do not knowingly collect personal data from children under 18.

11. Changes to This Policy

Kraapht Bags Ltd may update this Privacy Policy at any time. Changes take effect once posted on kraaphtbags.com. Continued use of the website or your account after changes are posted constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

12. Contact / Data Protection Contact Person

For any questions about this Privacy Policy, or to exercise your data protection rights, contact:

Kraapht Bags Ltd
Accra, Ghana
Email: kraaphtbags@gmail.com
WhatsApp / Phone: +233 558 619 224