1. Introduction & Scope of this Policy
This Global Privacy Policy governs the collection, processing, transfer, and protection of personal data and enterprise telemetry handled by TechONE IT Services & Digital Solutions Ltd and its operating subsidiaries (collectively referred to as “TechONE”, “we”, “us”, or “our”).
This policy applies across our entire global operations network, including:
- Our 24/7 Global MSP Operations Center & NOC in Accra, Ghana (HQ).
- Our European Corporate Office & Strategic Advisory in Leeds, United Kingdom.
- Our Software Engineering, Cloud & Dev Lab in Punjab, India.
- Our corporate websites, client service portals, TechONE Academy, and LearnUP LMS platform.
2. Data Controllers & Data Protection Officer
Depending on your location and the services contracted, the primary data controller responsible for your personal information is:
TechONE IT Services & Digital Solutions Ltd
GE-345-8831, Greater Accra, Ghana
DPC Registration No: DPC/REG/2026/0891
TechONE IT Solutions UK Ltd
LS10 1BL, West Yorkshire, United Kingdom
ICO Data Protection Register: ZB481920
Our designated Data Protection Officer (DPO) oversees compliance across our global infrastructure and can be reached directly at dpo@techoneitsolutions.com.
3. Multi-Jurisdictional Regulatory Framework
Because TechONE provides seamless 24/7 follow-the-sun delivery to multinational enterprises, our data protection infrastructure is engineered to comply with three primary international legal frameworks:
Ghana Data Protection Act, 2012 (Act 843)
We strictly adhere to the eight data protection principles codified under Section 17 of Act 843, including accountability, lawfulness of processing, specification of purpose, data quality, security safeguards, and data subject participation under the oversight of the Data Protection Commission (DPC) Ghana.
UK Data Protection Act 2018 & UK GDPR
Governing all client data processed through our Leeds corporate hub and UK customers, compliant with Chapter 2 of the Data Protection Act 2018 and the retained General Data Protection Regulation.
EU General Data Protection Regulation (Regulation (EU) 2016/679)
Applying to all European Union data subjects, ensuring transparent processing, automated breach notifications within 72 hours, and strict Standard Contractual Clauses (SCCs).
4. Categories of Information We Collect
We collect and process the following categories of data in connection with our services:
A. Managed Infrastructure & Security Telemetry (NOC/SOC)
System logs, IP addresses, firewall event flows, endpoint security telemetry (via EDR agents), resource utilization statistics, and incident diagnostics necessary to detect anomalies and uphold our 99.9% uptime SLA.
B. Client Business & Account Details
Authorized company representative names, corporate email addresses, phone numbers, job titles, billing details, and support ticket correspondence.
C. TechONE Academy & LearnUP LMS Data
Student enrollment details, academic course completion records, assessment scores, certification verifications, and corporate employee training logs.
D. Careers & Recruitment Submissions
Candidate CVs, portfolios, employment history, contact details, and interview evaluation notes.
5. Legal Bases for Processing Personal Data
Under GDPR Article 6 and Section 20 of Act 843, we process personal information under the following lawful grounds:
- Contractual Performance: Providing contracted Managed IT, cloud engineering, cybersecurity, and Academy educational services.
- Legitimate Interests: Defending enterprise networks against cyber attacks, preventing unauthorized network intrusions, and continuous telemetry optimization.
- Legal & Regulatory Compliance: Retaining mandatory accounting, tax, anti-fraud, and statutory compliance documentation.
- Consent: Marketing communications and newsletter subscriptions, which can be revoked at any time.
6. International Cross-Border Data Transfers
Our 24/7 follow-the-sun operational model necessitates controlled data transfers between our delivery hubs in Accra (Ghana), Leeds (United Kingdom), and Punjab (India).
To guarantee that international transfers maintain an equivalent standard of protection:
- We execute the UK International Data Transfer Addendum (IDTA) and EU Standard Contractual Clauses (SCCs) governing intra-group data flows.
- All trans-border data tunnels utilize end-to-end TLS 1.3 protocol encryption with mandatory multi-factor authentication and zero-trust role isolation.
- Our Accra HQ operates under continuous certification compliance with the Ghana Data Protection Commission.
7. Technical & Organizational Security Standards
TechONE maintains enterprise security aligned with ISO/IEC 27001, SOC 2 Type II, and CIS benchmarks:
- 256-bit AES encryption at rest for all databases, backups, and storage volumes.
- Least-privilege Role-Based Access Control (RBAC) enforced with FIDO2 / hardware MFA.
- Automated vulnerability assessments and continuous third-party penetration testing.
- 24/7 SOC surveillance with automated threat quarantine capabilities.
8. Data Retention Policies
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory legal and accounting retention periods:
- Active client telemetry and monitoring logs: retained for 90 days, then securely purged.
- Support ticket history and incident reports: retained for the duration of the MSA plus 3 years.
- Financial, billing, and tax documentation: retained for 7 years in compliance with statutory audit laws.
- Candidate recruitment profiles: retained for 12 months with consent for future opportunities.
9. Your Statutory Data Protection Rights
Under Act 843, the UK DPA 2018, and GDPR, you possess the following rights regarding your personal information:
Request a copy of the personal information we hold about you.
Request correction of inaccurate or incomplete personal records.
Request deletion of personal data where statutory retention grounds expire.
Object to processing based on legitimate interests or direct marketing.
To exercise any of these statutory rights, please submit a formal request to our DPO at dpo@techoneitsolutions.com. We respond to all verified requests within 30 days without charge.
11. Updates to this Global Privacy Policy
We review and update this Global Privacy Policy annually, or whenever significant modifications occur in our technical architecture or statutory regulations. Any material changes will be published here with an updated revision date.
