Effective as of 12/09/2025.
EXECUTIVE SUMMARY
This comprehensive privacy policy outlines how HanglowGH collects, processes, stores, and protects personal data in compliance with applicable privacy laws including GDPR, CCPA, and other relevant privacy regulations.
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
1. SCOPE AND APPLICATION
This policy applies to:
• https://hanglowgh.com/ and all related services
• Hanglow Virgin Coconut Oil with Tradename HanglowGH operates in Ghana
• Data processing activities under Agribusiness industry standards
• International data transfers and processing
• User-generated content and community features
2. INFORMATION WE COLLECT
2.1 Personal Information
We collect personally identifiable information including:
• Contact details: Name, email, phone number, address
• Account information: Username, password, preferences
• Identity verification: Government-issued ID, date of birth
• Financial data: Payment information, billing address, transaction history
• Health information: Medical records, fitness data, wellness metrics
• Location data: GPS coordinates, IP geolocation, check-in information
2.2 Data Categories
We process the following categories of personal data:
• Contact Information
• Location Data
• Usage Analytics
• Transaction History
• Communication Content
• Behavioral Data
• Device Information
• Social Media Data
• Demographic Data
2.3 Cookies and Tracking Technologies
We use various tracking technologies including:
• Essential cookies: Required for basic site functionality
• Performance cookies: Analytics and site improvement
• Functional cookies: Enhanced features and personalization
• Marketing cookies: Targeted advertising and remarketing
• Analytics tools: Google Analytics, custom analytics platforms
• Cross-device tracking: Linking activities across devices
2.4 Automated Data Collection
Our systems automatically collect:
• Device information: Browser type, operating system, device identifiers
• Usage patterns: Page views, click streams, session duration
• Behavioral data: Interaction patterns, feature usage, preferences
• AI-generated insights: Predictive analytics, recommendation algorithms
3. PURPOSES OF PROCESSING
We process your personal data for the following purposes:
• Customer Support
• Service Provision
• Analytics
• Research & Development
• Security
• Personalization
• Fraud Prevention
• Marketing
• Legal Compliance
• Payment Processing
• Quality Assurance
Specific purposes include:
• Service provision and maintenance
• Customer support and communication
• Account management and authentication
• Marketing communications and promotional offers
• Automated decision-making and personalization
• Business intelligence and strategic planning
3.1 Legal Bases for Processing (GDPR Article 6)
• Consent
• Vital Interests
• Contract Performance
• Legal Obligation
• Legitimate Interest
• Public Task
4. DATA SHARING AND DISCLOSURE
We maintain strict data confidentiality and do not sell, trade, or transfer your personal information to unauthorized third parties.
5. DATA RETENTION
5.1 Retention Periods
We retain personal data for different periods based on:
• Legal requirements and regulatory compliance
• Business operational needs
• User account status and activity
• Data category and sensitivity level
Default retention period: 2 years
5.2 Data Deletion
Upon expiration of retention periods, we:
• Securely delete personal data from active systems
• Remove data from backup systems within 90 days
• Maintain anonymized data for statistical purposes
6. YOUR PRIVACY RIGHTS
6.1 GDPR Rights (EU Residents)
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right not to be subject to automated decision-making
6.2 CCPA Rights (California Residents)
• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access personal information
• Right to equal service and price
• Right to deletion of personal information
To exercise these rights, contact us at info@hanglowgh.com.
7. DATA SECURITY
7.1 Technical Safeguards
• End-to-end encryption for data transmission
• AES-256 encryption for data at rest
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• SOC 2 Type II compliance (where applicable)
7.2 Organizational Measures
• Privacy by design implementation
• Regular staff training on data protection
• Data breach response procedures
• Third-party security assessments
• Incident response and notification protocols
7.3 Infrastructure Security
• Secure data centers with physical access controls
• Network segmentation and firewall protection
• Regular security updates and patch management
• Backup and disaster recovery procedures
8. SPECIAL CATEGORY DATA
8.2 Health Information
• Health data processing complies with HIPAA (where applicable)
• Used only for specified health-related purposes
• Shared only with authorized healthcare providers
• Subject to additional security and privacy protections
9. AUTOMATED DECISION-MAKING
We use automated processing and artificial intelligence for:
• Content personalization and recommendations
• Fraud detection and security monitoring
• Customer service chatbots and virtual assistants
• Marketing campaign optimization
You have the right to:
• Request human intervention in automated decisions
• Express your point of view regarding automated processing
• Contest decisions made solely by automated means
10. USER-GENERATED CONTENT
When you create or share content on our platform:
• You retain ownership of your original content
• We may use your content to provide and improve our services
• Content may be visible to other users based on your privacy settings
• We have the right to remove inappropriate or harmful content
• Deleted content may remain in backups for up to 90 days
11. INTERNATIONAL DATA TRANSFERS
When transferring data internationally, we ensure:
• Adequate level of protection in recipient countries
• Standard Contractual Clauses (SCCs) implementation
• Binding Corporate Rules (BCRs) where applicable
• Regular assessment of transfer mechanisms
• Data localization compliance where required
Primary data processing locations:
• Ghana (primary jurisdiction)
• European Union (GDPR-compliant processing)
• United States (with Privacy Shield or SCC protections)
12. CHILDREN’S PRIVACY
We comply with COPPA requirements:
• We do not knowingly collect information from children under 13
• Parental consent required for children’s data collection
• Parents can review, update, or delete children’s information
• Special protections for children’s personal information
13. CALIFORNIA SHINE THE LIGHT
California residents may request information about disclosures of personal information to third parties for direct marketing purposes. To make such a request, contact us at info@hanglowgh.com.
14. DATA BREACH NOTIFICATION
In the event of a data breach affecting your personal information:
• We will notify affected users within 72 hours
• Notification will include breach details and mitigation steps
• We will cooperate with regulatory authorities as required
• We maintain comprehensive breach response procedures
15. POLICY UPDATES
We may update this privacy policy to reflect:
• Changes in our data processing practices
• New legal or regulatory requirements
• Enhanced privacy protections
• Business operational changes
Material changes will be communicated via:
• Email notification to registered users
• Prominent website notice for 30 days
• In-app notifications where applicable
16. CONTACT INFORMATION
For privacy-related questions, concerns, or requests:
General Contact: info@hanglowgh.com
Website: https://hanglowgh.com/
Phone: +233 54 521 2680
Business Hours: Monday 9:am 5pm – Friday 9:am – 5pm
