Privacy Policy

Hive Afriq Management (“HAM”, “we”, “us” or “our”) respects your privacy and is committed to handling personal data lawfully, fairly, securely and transparently. This Privacy Policy explains how we process personal data when you visit this Website, make an enquiry, subscribe to communications, apply for a role, attend an event, become a client or supplier, or otherwise interact with us.

This Policy is designed to reflect Ghana’s Data Protection Act, 2012 (Act 843) and, where applicable, the European Union General Data Protection Regulation (“GDPR”) and comparable privacy rules. If a specific engagement notice or contract gives more detailed information, that specific notice applies alongside this Policy.

Hive Afriq Management, Accra, Ghana, is the data controller for personal data covered by this Policy unless we state otherwise. As controller, we decide why and how that data is processed.

Privacy and data-rights enquiries may be sent to hello@hiveafriq.com. Please include “Data Rights Request” in the subject line. We may need proportionate information to verify identity before acting on a request.

The personal data we collect depends on the relationship and may include:

• Identity and contact data: name, title, organisation, business address, email, telephone number and professional profile.
• Enquiry and relationship data: service interests, correspondence, meeting notes, preferences, feedback and relationship history.
• Business and engagement data: information supplied for proposals, onboarding, conflict checks, contracts, project delivery, billing and support. Client materials may contain personal data relating to directors, staff, investors, customers or counterparties.
• Recruitment data: CV, employment and education history, qualifications, references, interview notes, work eligibility and compensation expectations.
• Transaction data: invoice, payment status and limited payment-administration information. We do not intend to collect full payment-card credentials through this Website.
• Technical and usage data: IP address, browser and device type, approximate location derived from IP, timestamps, referral information, page interactions, security logs and consent preferences—only to the extent generated by our hosting, security or consent tools and permitted by your choices.
• Marketing data: communication preferences, consent records and engagement with communications where measurement is permitted.

Please provide personal data about another person only when you are authorised to do so and have given them any required privacy information.

We collect personal data directly from you when you complete a form, email or call us, participate in meetings or events, provide engagement materials, apply for a role, or enter into a contract.

We may also receive data from your organisation, professional advisers, referees, clients, counterparties, publicly available corporate records, professional networking platforms, event partners, due-diligence providers and service providers. When required, we will tell you the source or source category.

We process personal data only where we have an appropriate purpose and legal basis. The bases below may vary by jurisdiction.

Where we rely on legitimate interests, we consider necessity, proportionality and the impact on your rights. Where we rely on consent, you may withdraw it at any time without affecting processing already lawfully completed.

We do not intentionally request sensitive personal data through general Website forms. In a professional engagement or recruitment process, limited sensitive data may be processed where genuinely necessary and lawful—for example, disability accommodation information, criminal-offence information required for a regulated check, or data relevant to a legal claim.

We apply an additional legal condition, access restriction and safeguard where required. Do not include health, biometric, political, religious, sexual-orientation, banking credential or similarly sensitive information in an initial Website enquiry.

The Website uses one strictly necessary first-party preference cookie to remember your consent decision. Optional analytics, personalisation and marketing technologies are disabled by default and are not loaded unless the relevant service has been configured and you opt in.

Our Cookie Policy provides the current inventory, purposes, retention periods and controls. “Cookie settings” in the footer lets you withdraw or change consent as easily as you granted it.

We do not sell personal data. We may disclose only what is reasonably necessary to:

• authorised Hive Afriq personnel and contractors who need access for their role;
• hosting, IT, cybersecurity, communications, document, accounting, professional and operational providers acting under appropriate terms;
• professional advisers, auditors, insurers, financiers and banks;
• clients, counterparties, investors or project participants where disclosure is part of an agreed service and is lawful;
• regulators, courts, law-enforcement bodies and public authorities when legally required or necessary to protect rights and safety; and
• a buyer, investor or successor in a genuine business reorganisation, subject to confidentiality and applicable law.

Service providers must use personal data only for authorised purposes, protect it and assist with applicable rights and security obligations.

Our work and service providers may involve processing in Ghana and other countries. Some recipients may be outside the country in which you are located and may have different data-protection laws.

Where Ghanaian law or GDPR transfer restrictions apply, we use an appropriate mechanism—such as an adequacy decision, approved contractual clauses, binding safeguards, explicit consent in limited circumstances, or another lawful derogation—and assess supplementary safeguards where needed. You may contact us for information about the mechanism relevant to your data.

We keep personal data only as long as reasonably necessary for the purpose collected, including legal, accounting, regulatory, security and dispute requirements. We consider the amount, nature, sensitivity, risk, purpose and applicable limitation periods.

These are policy targets, not promises to retain every record for the maximum period. Data may be deleted earlier, anonymised, or retained longer where a legal hold or documented requirement applies.

We use risk-appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, misuse or disclosure. Measures may include access control, least privilege, authentication, encryption in transit, secure configuration, backups, supplier review, confidentiality duties, incident procedures and staff awareness.

No internet or storage system is completely secure. If a personal-data breach occurs, we will assess risk, contain and investigate it, document the response, and notify affected individuals and regulators where required by applicable law.

Subject to applicable law and relevant exceptions, you may have the right to:

• be informed about processing and obtain access to your personal data;
• correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain data in a structured, commonly used, machine-readable format and transmit it to another controller;
• withdraw consent at any time;
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects; and
• complain to a competent data-protection authority or seek a judicial remedy.

Rights under Ghana’s Act 843 and the GDPR are not identical in every respect. We will apply the rights and response rules relevant to your circumstances and location.

Email hello@hiveafriq.com with “Data Rights Request” in the subject. Describe the request and your relationship with us. We may ask for proportionate identity verification and clarification, but never for your account password.

We aim to respond without undue delay and within the period required by law—generally one month for GDPR requests, subject to permitted extensions, and within the applicable period under Ghanaian law. Requests are normally free, but the law may permit a reasonable fee or refusal for manifestly unfounded or excessive requests.

The Website and our advisory services are not directed to children under 18, and we do not knowingly collect their personal data through the Website. Contact us if you believe a child has provided data so we can investigate and take appropriate action.

We do not currently make decisions about Website visitors based solely on automated processing that produce legal or similarly significant effects. If that changes, we will provide the information and safeguards required by law.

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Data Protection Commission of Ghana. If GDPR applies, you may complain to the supervisory authority in the EU or EEA country of your habitual residence, place of work or the alleged infringement.

Using our complaints process does not affect any statutory right to contact a regulator or court.

We may update this Policy when our practices, services or legal obligations change. The latest version will appear here with a revised date. Where a change materially affects how we use existing data, we will provide additional notice or seek consent where required.

Questions about this Policy or our data practices may be sent to hello@hiveafriq.com or addressed to Hive Afriq Management, Accra, Ghana.