Privacy Policy
Effective 12 October 2026. This policy explains what personal data Klassy Shoez collects, why, who we share it with, how long we keep it, and your rights under Ghana's Data Protection Act, 2012 (Act 843).
1. Who is responsible for your data
Klassy Shoez (“we”, “us”) is the data controller for personal data collected through https://klassyshoez.com and our WhatsApp and email channels.
- Address
- Accra, Greater Accra Region, Ghana
- Privacy contact
- info@klassyshoez.com · +233 549 443 475
2. What we collect
When you shop with us
- Order and delivery details: your name, phone number, email address, town or city, delivery address and landmark, delivery zone, and the items, sizes and amounts you order.
- Payment confirmation: Paystack tells us whether your payment succeeded, the amount, the payment reference and the email used. We never receive your card number, CVV or MoMo PIN.
- Google sign-in (optional): if you sign in to track orders, we receive your Google account ID, name, email address and profile photo link.
- Chat assistant: the messages you type to our “Anabel” shopping assistant. Please don't share personal or payment details there.
- Messages to us: anything you send us on WhatsApp, by email or by phone.
If you are a Klassy Shoez investor or a witness to an investor agreement
- Investors: full legal name, email, phone, investment amounts and dates, agreement terms, payout details (MoMo or bank account), a nominated representative's name, relationship and phone number, signatures, payment references and receipts, top-up, withdrawal and service requests, and portal login details (your password is stored only in encrypted, hashed form).
- Witnesses: name, relationship to the investor, phone number, email and signature.
Automatically
- A session cookie that keeps your bag and sign-in working (see Cookies). Our hosting provider keeps standard server logs (IP address, browser type, pages requested) for security. We do not use advertising or analytics trackers.
3. How and why we use it
| Purpose | Data used | Lawful basis (Act 843) |
|---|---|---|
| Process, deliver and support your order, including returns and refunds | Order, delivery and payment details | Needed to perform our contract with you |
| Show your order history when you sign in | Google sign-in details, orders | Your consent (you choose to sign in) |
| Answer questions through the chat assistant, WhatsApp or email | Your messages, contact details | Your request, and our legitimate interest in customer service |
| Manage investment agreements, payouts and statements | Investor and witness details | Needed to perform the investment agreement |
| Keep business and tax records | Orders, payments, investor records | Legal obligations under Ghanaian law |
| Keep the site, payments and accounts secure | Server logs, staff activity logs | Legitimate interest in security and fraud prevention |
We collect only what we need for these purposes. We do not sell your data, and we do not send marketing messages unless you have agreed to receive them. You can opt out at any time.
5. Transfers outside Ghana
Some of our providers store data outside Ghana. Our main database is hosted by Google in the European Union (Belgium), and other providers, such as Google, GitHub and Cloudinary, may process data in the United States or elsewhere. We use established providers that protect data with encryption, access controls and contractual safeguards. We transfer only what each service needs.
6. How long we keep it
- Orders and payment records: six years after the order, so we can meet Ghanaian tax and accounting obligations.
- Investor and witness records: for the life of the investment, then six years after it ends.
- Google sign-in details: kept with your orders. Signing out ends your session immediately.
- Session cookie: deleted when you close your browser.
- Chat messages: not stored by us.
7. How we protect it
The site runs only over encrypted HTTPS. Payments are handled by Paystack, so card and MoMo credentials never reach us. Passwords are stored as one-way hashes. Payment receipts and signed agreements are kept in private storage that only authorised staff can open. Staff access is password-protected and logged. If a personal data breach puts your rights at risk, we will notify you and the Data Protection Commission as the law requires.
8. Your rights
Under the Data Protection Act, 2012 (Act 843), you can:
- Access the personal data we hold about you.
- Correct data that is inaccurate, out of date or incomplete.
- Ask us to delete data we no longer need. We may keep what the law requires, such as tax records.
- Object to processing that causes you damage or distress, and to direct marketing at any time.
- Withdraw consent where we rely on it, for example by signing out of Google sign-in.
To use any of these rights, email info@klassyshoez.com or WhatsApp +233 549 443 475 with “Privacy request” and your order reference if you have one. We may ask you to confirm your identity. We will respond within 21 days.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Data Protection Commission of Ghana at dpc.gov.gh.
10. Children
Our shop is intended for adults. We do not knowingly collect data from children under 18. If you believe a child has given us personal data, contact us and we will delete it.
We may update this policy. The date at the top shows when it last changed, and we will highlight important changes on this page.
