Privacy Policy

Eshhh Music ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and services. Please read it carefully. By using our website or services, you consent to the practices described in this policy, subject to your rights under applicable law (including the Data Protection Act, 2012 (Act 843) of Ghana where applicable).

1. Data controller

The data controller responsible for your personal data is Eshhh Music. For enquiries about this policy or your data, contact us at privacy@esshhmusic.com or via our Support page.

2. Information we collect

We may collect the following categories of information:

• Account and identity: name, email address, phone number, password (stored in hashed form), and profile details you provide when registering or updating your account.
• Transaction and order data: billing and delivery addresses, payment method details (processed by our payment providers; we do not store full card numbers), order history, and quote requests.
• Usage and technical data: IP address, browser type and version, device information, pages visited, referring URLs, and similar data collected via cookies and similar technologies (see our Cookie Policy).
• Communications: records of correspondence (e.g. support emails, contact form submissions) and, where applicable, call or chat logs.

We may also receive information from third parties (e.g. payment processors or authentication providers) where you have consented or where permitted by law.

3. How we use your information

We use your personal data to: (a) provide, operate, and improve our website and services; (b) process orders, payments, and deliveries; (c) manage your account and authenticate you; (d) communicate with you about orders, support, and (where you have opted in) marketing; (e) comply with legal obligations and enforce our Terms of Use; (f) analyse usage and improve security and performance; and (g) for other purposes described at the time of collection or with your consent.

4. Legal basis for processing

We process your data on the basis of: (a) performance of a contract (e.g. fulfilling orders and account management); (b) your consent (e.g. marketing, non-essential cookies); (c) our legitimate interests (e.g. improving our services, security, analytics), where such interests are not overridden by your rights; and (d) compliance with legal obligations. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Sharing and disclosure

We may share your data with: (a) service providers who assist us (e.g. hosting, payment processing, email delivery, analytics), subject to contractual safeguards; (b) professional advisers (e.g. lawyers, auditors) where necessary; (c) law enforcement or regulatory bodies when required by law or to protect our rights; and (d) other parties in connection with a merger, sale, or restructuring of our business, with notice where required. We do not sell your personal data to third parties for their marketing purposes.

6. Data retention

We retain your data only for as long as necessary to fulfil the purposes set out in this policy, including to satisfy legal, accounting, or reporting requirements. For example, we typically retain account and order data for the duration of the relationship and for a reasonable period thereafter; marketing preferences until you withdraw consent or object; and logs and security-related data as required for operational and legal purposes. When data is no longer needed, we delete or anonymise it in accordance with our retention procedures.

7. Your rights

Depending on applicable law (including the Data Protection Act, 2012 (Act 843) of Ghana and, where relevant, the GDPR), you may have the right to: access your personal data; correct inaccurate data; request erasure ("right to be forgotten"); restrict or object to certain processing; data portability; withdraw consent; and lodge a complaint with a supervisory authority. To exercise these rights, contact us at privacy@esshhmusic.com. We will respond within the timeframe required by applicable law.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption (e.g. in transit), access controls, and secure storage. No method of transmission or storage is completely secure; we cannot guarantee absolute security and you provide data at your own risk to the extent permitted by law.

9. Cookies and similar technologies

We use cookies and similar technologies to operate the website, analyse usage, and improve your experience. For details on the types of cookies we use and how to manage them, please see our Cookie Policy.

10. International transfers

Your data may be processed in Ghana and, where we use service providers or systems located in other countries, your data may be transferred to those countries. We ensure that such transfers are subject to appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) as required by applicable law.

11. Children

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. For material changes, we may provide additional notice (e.g. by email or a prominent notice on the website). Your continued use of our website or services after the effective date constitutes acceptance of the updated policy, subject to your rights under applicable law.

13. Contact

For privacy-related questions, to exercise your rights, or to report a concern, contact us at privacy@esshhmusic.com or via our Support page.