Ghana Data Protection Act, 2012 (Act 843) Compliance
Keyedmap Services Limited operates in full compliance with the statutory provisions of the Data Protection Act, 2012 (Act 843) of the Republic of Ghana. We treat all institutional inquiries, security consultation records, and applicant credentials with military-grade discretion and data integrity.
1. Data Controller Identification
This Privacy Policy applies to Keyedmap Services Limited (“KSL”, “we”, “our”, or “us”), a licensed Private Security Organization registered and operating in Accra, Republic of Ghana. For all data processing activities conducted via this website (https://keyedmapservices.com), KSL acts as the Data Controller under Act 843.
SECTION 022. Information We Collect
Depending on your interaction with our digital platforms, we collect and process the following categories of personal information:
A. Security Consultation & Client Inquiries
When corporate entities or private clients request a risk appraisal, security personnel deployment, or consultation, we collect: full name, organization or corporate affiliation, professional email address, contact telephone number, required service sector, and specific security operational requirements.
B. Recruitment & Career Applications
When candidates submit applications for security officer, supervisory, or administrative postings, we collect: applicant name, telephone contact, email address, residential location, employment history, military or law enforcement background, educational credentials, and curriculum vitae (CV/resume documents in PDF, DOC, or DOCX formats).
C. Technical & Operational Metadata
To ensure application availability, mitigate distributed attacks, and maintain network security, our servers automatically log internet protocol (IP) addresses, browser user-agents, HTTP request timestamps, and session verification tokens.
3. Legal Grounds for Processing
In accordance with Section 18 of the Ghana Data Protection Act (Act 843), we process your personal data exclusively under the following lawful grounds:
- Contractual Pre-Conditions & Execution: Processing consultation details required to formulate bespoke security service level agreements (SLAs).
- Statutory & Regulatory Compliance: Fulfilling vetting, licensing, and reporting obligations mandated by the Ministry of the Interior and relevant state security authorities.
- Legitimate Institutional Interests: Safeguarding commercial operations, preventing fraud or impersonation, and maintaining physical site safety.
- Explicit Consent: Provided by you when submitting inquiries, CV files, or configuring cookie preferences.
4. Document Retention & CV Storage Protocols
We enforce rigorous lifecycle limits on stored records:
- Consultation Inquiries: Retained for twelve (12) months following operational engagement or until client requests closure of inactive records.
- Recruitment CVs & Files: Uploaded CVs are stored in isolated, cryptographically isolated storage directories inaccessible via direct web requests. Unsuccessful candidate applications are retained for up to six (6) months for active consideration, after which they are permanently purged.
- Server Access & Error Logs: Maintained for ninety (90) days for operational diagnostics and intrusion monitoring before cyclical rotation.
5. Cookie Governance & Digital Tracking
Our website employs transparent cookie controls. We categorize digital identifiers into three distinct groups:
| Category | Purpose & Mechanism | Mandatory |
|---|---|---|
| Strictly Essential | Session identification (ksl_sess), CSRF token security, and core routing. |
Yes (Cannot Disable) |
| Performance & Analytics | Aggregated anonymous traffic analysis to optimize server speed and page responsiveness. | Optional (User Toggle) |
| Communications & Advisory | Tailoring sector-specific security advisories based on past interaction. | Optional (User Toggle) |
You can modify your consent settings at any time by clicking in the website footer.
SECTION 066. Data Subject Rights Under Act 843
Under Part V of the Ghana Data Protection Act 2012, individuals whose personal data is processed by KSL enjoy statutory rights, including:
- Right of Access: Requesting confirmation and copies of personal data held about you.
- Right to Rectification: Requesting prompt correction of inaccurate or incomplete credentials.
- Right to Erasure (“Right to be Forgotten”): Requesting permanent destruction of personal data where retention is no longer justified.
- Right to Object: Objecting to data processing based on legitimate interests or direct communications.
- Right to Lodge a Regulatory Complaint: Submitting a formal inquiry to the Data Protection Commission (DPC) of Ghana (www.dataprotection.org.gh).
7. Technical Safeguards & Operational Security
KSL implements rigorous technical controls: TLS 1.3 encryption in transit, strict directory-level web server isolation, MIME-type and magic-byte validation for document submissions, anti-CSRF token verification, and automated honeypot defenses. All personnel handling client intelligence are bound by comprehensive statutory Non-Disclosure Agreements (NDAs).
SECTION 088. Contact Our Data Compliance Desk
For privacy-related inquiries, data subject access requests (DSAR), or compliance coordination, contact our operational governance team:
Keyedmap Services Limited — Compliance Desk
Official Address: Accra, Ghana
Compliance Email: info@keyedmapservices.com
Recruitment Inquiries: hr.ass@keyedmapservices.com