What we do with your information

ShepherdCloud is a small team of technologists based in Nungua, Accra, Ghana. We are not yet a formally registered company in Ghana — we're a team working under the ShepherdCloud name, and registration is in progress. For now, "ShepherdCloud" in this document means the team itself.

We operate the website you're reading and a separate platform at shepherdcloud.work for our customers.

For the purposes of Ghana's Data Protection Act, 2012 (Act 843), the ShepherdCloud team acts as the data controller in practice for any personal information you give us through this website.

You can reach us at [email protected] or by visiting at Nungua Wazar, adjacent Christ Apostolic Church Int., Accra, Ghana.

We only collect things you give us directly. Concretely:

• <strong>Contact form fields.</strong> Your name, email, phone number, the service you're interested in, your budget range, your timeline, and the message you type.
• <strong>Email replies.</strong> When we email you back, we keep the thread so we have a record of what we said.
• <strong>Server logs.</strong> Our hosting provider (currently Vercel, Inc. for the website) records basic request metadata: IP address, browser type, pages visited, and timestamps. Standard web server stuff, kept for a short window for security and debugging.

We do not use third-party advertising trackers on this website. We do not set advertising cookies. We do not run Meta Pixel, Google Ads, or anything similar.

We use the information you give us to:

• Reply to your enquiry and quote the work you asked about.
• Schedule, deliver and follow up on the services you hire us for.
• Send you service-related messages (appointment reminders, project updates, invoices).
• Improve the website based on aggregated, non-identifying patterns (e.g. which pages people land on).

We rely on the legal bases of consent (when you submit the contact form) and contractual necessity (when you hire us for a service) under Act 843.

We do not sell, rent, or trade your personal information. We only share it with a small number of trusted processors who help us run the business:

• <strong>Resend, Inc.</strong> — to send you the email reply you asked for when you fill in the contact form. They process the email on our behalf under a data-processing agreement.
• <strong>Vercel, Inc.</strong> — our website hosting provider. They see standard server logs.
• <strong>Cloudflare, Inc.</strong> — DNS and edge routing. They see IP addresses and request metadata at the network edge.
• <strong>Mobile network operators and telecom providers</strong> — only when you call or WhatsApp us on the numbers listed on this site. Those conversations aren't recorded by us unless we tell you they are.

We may also disclose information where required by a valid Ghanaian court order, subpoena, or to the Data Protection Commission. We will challenge any request we consider overbroad.

This website does not use advertising cookies and does not use cross-site tracking. We may use a small number of strictly necessary cookies or local storage entries to make the site work (e.g. remembering a form draft). None of these identify you to third parties.

• <strong>Contact form submissions and email threads:</strong> kept for up to 24 months from your last interaction, then deleted. We keep it long enough to be useful if you come back; short enough that we're not hoarding.
• <strong>Invoices and tax records:</strong> kept for at least 5 years as required by the Ghana Revenue Authority.
• <strong>Server logs:</strong> rotated and deleted within 30 days by our hosting provider.

Under the Ghana Data Protection Act, 2012, you have the right to:

• Ask what personal information we hold about you.
• Request a copy of that information.
• Ask us to correct anything that's wrong.
• Ask us to delete your information, subject to the retention rules above.
• Object to processing that's not covered by a legitimate basis.
• Withdraw consent at any time (without affecting work we've already done).

To exercise any of these rights, email [email protected]

We use HTTPS across this site and a need-to-know policy for the small team. No system is perfect, but we treat your data the way we'd want our own treated.

If we ever have a breach that affects your personal information, we'll tell you and ascertain the extent of the impact.

Our services are aimed at adults running businesses, churches, and households. We do not knowingly collect personal information from children under 18. If you believe a child has submitted data through our form, contact us and we'll delete it.

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top. If the change is material, we'll make a reasonable effort to notify active customers by email before it takes effect.

This policy is governed by the laws of the Republic of Ghana. Any disputes will be handled in the courts of Ghana, unless an applicable data-protection law gives you the right to bring the action elsewhere.