Annabi Cookies (referred to in this policy as “we”, “us”, or “our”) is a handcrafted cookie brand based in Accra, Ghana. We operate the website at www.annabicookies.com (the “Site”). This Privacy Policy explains what personal data we collect when you visit or use the Site, place an order with us, or otherwise communicate with us (together, the “Services”). References to “you” and “your” mean you as the person using the Services, whether as a customer, a website visitor, or a corporate or event enquirer. Defined terms used in this policy are set out in Section 2 below.
By using our Site or placing an order with us, you acknowledge that your Personal Data will be handled in accordance with this policy. Please read it carefully.
Data Controller: Annabi Cookies
Address: Accra, Ghana
Contact: [your email address]
We are registered with the Data Protection Commission of Ghana as a data controller.
The following terms have the meanings given to them below wherever they appear in this policy.
“the Act” means the Data Protection Act, 2012 (Act 843) of Ghana.
“Cookies” means small files placed on your device by a website that record certain information about your visit. Our use of Cookies is described in Section 10.
“Data Controller” means a person who, alone or jointly with others, determines the purposes for and the manner in which Personal Data is processed, as defined under the Act. Annabi Cookies is the Data Controller in respect of Personal Data collected through the Services.
“Personal Data” means data about an individual who can be identified from that data, or from that data together with other information in the possession of, or likely to come into the possession of, the Data Controller. This includes information such as your name, delivery address, telephone number, and email address.
“Services” means our website, online ordering process, enquiry forms, and any other means by which you communicate with us.
“Site” means our website at www.annabicookies.com.
“Third-Party Processor” means any external service provider that processes Personal Data on our behalf, as described in Section 6.
When you complete our contact form, we collect:
When you place an order through our Site, we collect:
Payment is made directly to us via Mobile Money (MoMo). We do not collect or store your payment credentials or MoMo account details.
The data fields marked as required on our order form are necessary for us to fulfil your order. If you do not provide this information, we will not be able to process or deliver your order. Fields not marked as required are optional and their omission will not affect fulfilment. For enquiry form submissions, providing your contact details is discretionary, but we will be unable to respond to you without them.
Our website hosting provider automatically records standard server log data when you visit our Site. This may include your IP address, browser type, and pages visited. We do not use this data to identify individual visitors.
We use your personal data only for the purposes for which it was collected:
We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We will not use your Personal Data for direct marketing purposes — including promotional emails or marketing messages — without your separate prior written consent, in accordance with section 40 of the Act.
Under the Act, we process your personal data on the following bases:
We use the following categories of third-party service to operate our Site and manage orders. Each processes your data on our behalf and is bound by its own data protection obligations. The specific providers we use are available on request.
Our contact and enquiry form is powered by a third-party form provider based in the United States. When you submit a message, your data is transmitted to and temporarily stored on that provider’s servers in the United States.
When you place an order, your data passes through a US-based automation platform which relays your information from our order form to our order management system. This transfer is automated and the data is not retained by this provider beyond the relay process.
Your order details are stored in a cloud-based database platform based in the United States. Access to this data is restricted to authorised personnel at Annabi Cookies only.
Our Site is hosted by a third-party hosting provider, which may store server log data including IP addresses as part of standard website operations.
By using our Site, you acknowledge that your data may be transferred to and processed in the United States. We take reasonable steps to ensure that our third-party processors maintain appropriate security standards. If you wish to know the identity of any specific provider, please contact us at [your email address].
After the applicable retention period, we will delete or anonymise your data so that it can no longer be associated with you.
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to order data stored in our order management database is restricted to authorised personnel only.
However, no method of electronic transmission or storage is completely secure. If you have concerns about the security of your data, please contact us directly.
In the event of a data breach — meaning unauthorised access to or acquisition of your Personal Data — we will notify both you and the Data Protection Commission of Ghana as soon as reasonably practicable after becoming aware of the incident, in accordance with section 31 of the Act. Our notification to you will include sufficient information for you to take protective measures.
Under the Act, you have the right to:
To exercise any of these rights, please contact us at [your email address]. We will respond within a reasonable timeframe and in accordance with our obligations under the Act.
If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ghana at www.dataprotection.org.gh.
Our Site does not currently use marketing or analytics cookies. Our hosting provider may set functional cookies as part of standard website operation. These do not track you across other websites and are not used for advertising purposes.
We will update this policy if our use of cookies changes.
Our Site is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has submitted data to us, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will always reflect when the policy was last revised. We encourage you to review it periodically.
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Annabi Cookies
Accra, Ghana
Email: [your email address]
We are registered with the Data Protection Commission of Ghana.