Legal
Privacy notice
How HISP Ghana collects, uses and protects the personal data you send us through this website.
Last updated 27 October 2026.
This notice explains what personal data Health Information Systems Programme Ghana Ltd ("HISP Ghana", "we", "us") collects through this website, why we collect it, how long we keep it, and the rights you have under Ghana's Data Protection Act, 2012 (Act 843).
Who is responsible for your data
HISP Ghana is the data controller for the personal data described in this notice.
- Health Information Systems Programme Ghana Ltd, VI-0223-1556, Friedrich Gbagbo Avenue, Ho, Volta Region, Ghana
- Privacy contact: info@hispghana.org
- Data Protection Commission registration number: available on request
What we collect and why
When you write to us
The contact form asks for your name, email address, a subject and your message, and, if you wish, your phone number and organisation (both optional). We use them to answer your enquiry and to keep a record of it.
When you request a proposal or register for a course
When you request a proposal, we keep your name, e-mail address, your telephone number if you give it, your organisation, the service, budget range and timeline you choose, and what you tell us about your need. When you register for a course, we keep your name, e-mail address, your telephone number and organisation if you give them, the course and session, and how many people you register. We use them only to answer you and to organise the course, and keep them for 12 months, as we keep other enquiries.
When you apply for a position
The application form asks for your name, email address and CV (a PDF or Word document of up to 5 MB), and, if you wish, your phone number and a cover letter (both optional). We also record which position you applied for. We use this information to assess your application and to contact you about it.
Please leave out of your CV and cover letter anything we do not need to assess your application, such as details of your health, religion, ethnic origin or political opinions, or similar sensitive information.
When you visit the website
Our servers log each request they receive, including your IP address, the address of the page and the description your browser gives of itself. We use these logs to keep the website secure and working, and we keep them for up to 30 days. The forms do not store your IP address or browser details with your enquiry or application.
Our legal basis
We process the personal data you send us with your consent, which you give by sending a form, and because we need it to respond to your enquiry or to assess your application. We keep server logs because they are necessary to run and protect the website.
Who receives your data
- HISP Ghana staff who handle enquiries and recruitment, after signing in to our systems.
- Microsoft 365, our email provider, which delivers a notification of each enquiry and application to info@hispghana.org, with the details from the form but not the CV.
- Akamai (Linode), which hosts the website and our systems in Frankfurt, Germany. Your data is therefore stored outside Ghana.
- Our backups, which are encrypted and kept in the company's off-site storage.
We do not sell your personal data, and we do not share it with anyone else unless the law requires us to.
How long we keep it
- Enquiries from the contact form, proposal requests and course registrations: 12 months from the day we receive them.
- Job applications and CVs: until 6 months after the position closes.
- Server logs: up to 30 days.
How we protect it
Your connection to the website is encrypted (TLS). Only authorised staff can see enquiries and applications, after signing in with their own account, and our backups are encrypted.
Your rights
Under the Data Protection Act, you can ask us to:
- give you a copy of the personal data we hold about you (access);
- correct personal data that is inaccurate or incomplete (correction);
- delete your personal data (deletion);
- stop processing your personal data (objection).
We do not use your personal data for direct marketing.
To make a request, email info@hispghana.org. We will answer within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Commission.
Children
This website is not aimed at children, and we do not knowingly collect personal data from them.
Changes to this notice
When our practices change, we will update this notice and the date at the top of the page.