Privacy Policy

Last updated: September 2026

This Privacy Policy explains how Romeo Jeff Fredson (“I”, “me”, or “Jeff Fredson”) collects, uses, stores, and protects personal data when you visit jeff-fredson.com (the “Site”) or contact me through it.

I am based in Accra, Ghana. This Policy is prepared with particular regard to the Data Protection Act, 2012 (Act 843) of the Republic of Ghana, including the principles of accountability, lawfulness of processing, purpose specification, compatibility of further processing, quality of information, openness, data security safeguards, and data subject participation.

Where an enquiry or engagement involves individuals or organisations in other jurisdictions (for example the European Union or United Kingdom), I also take into account comparable fair-processing expectations such as those under the GDPR, to the extent they apply to the relationship.

1. Who is responsible for your data

For personal data collected through this Site, the data controller is:

  • Name: Romeo Jeff Fredson
  • Trading as: Jeff Fredson
  • Location: Accra, Ghana
  • Email: romeofredson3@gmail.com
  • Website: https://jeff-fredson.com

Client engagements may be governed by separate written agreements. Those agreements take precedence over this Policy for data processed under the engagement.

2. Scope

This Policy applies to:

  • Visitors browsing the Site
  • People who submit the contact form or email me using Site contact details
  • Technical data generated when the Site is accessed

This Policy does not apply to:

  • Third-party websites or applications linked from case studies or external project URLs, which have their own privacy notices and access controls
  • Personal data processed solely under a separate consulting, employment, vendor, or client contract, except where that data was first collected through this Site

3. Personal data I collect

3.1 Information you provide

If you use the contact form or otherwise send an enquiry, I may collect:

  • Name
  • Email address
  • Organisation (optional)
  • Area of interest
  • Message content and any other details you choose to include

Please do not submit special-category or highly sensitive personal data through the public contact form (for example medical records, government ID numbers, passwords, or confidential client datasets) unless we have expressly arranged a secure channel.

3.2 Information collected automatically

When you visit the Site, hosting and infrastructure providers may process limited technical data needed to operate and protect the service, such as:

  • IP address
  • Date and time of request
  • Browser type and version
  • Device and operating-system information
  • Pages requested and referring URL
  • Basic diagnostic or security logs

3.3 Cookies and tracking

This Site is designed as a professional information site. It does not run advertising trackers and it does not sell personal data. The Site may use only essential technical cookies or similar storage required for security, session integrity, or hosting platform operation. If analytics or non-essential cookies are introduced later, this Policy will be updated and, where required, appropriate notice or consent mechanisms will be added.

4. Purpose of processing

Personal data is processed for the following purposes:

  • Responding to enquiries and arranging professional conversations
  • Understanding the nature of a request so I can reply meaningfully
  • Keeping a record of correspondence related to potential or ongoing work
  • Operating, securing, troubleshooting, and improving the Site
  • Complying with legal obligations applicable in Ghana or another relevant jurisdiction
  • Establishing, exercising, or defending legal claims where necessary

Enquiry data is not used to build marketing lists, and I do not sell personal information.

5. Legal basis under Act 843

Under the Data Protection Act, 2012 (Act 843), personal data must be processed lawfully and for a specified purpose. Depending on the circumstances, processing through this Site is based on one or more of the following:

  • Consent — where you voluntarily submit an enquiry or communicate with me
  • Contract / pre-contract steps — where processing is necessary to respond to a request before or during a professional engagement
  • Legitimate interest — in operating a secure professional website, preventing abuse, and managing business communications, balanced against your rights and interests
  • Legal obligation — where retention or disclosure is required by applicable law

I process personal data only for purposes compatible with those for which it was collected, and I take reasonable steps to keep it accurate and relevant.

6. How I share personal data

I do not sell, rent, or trade personal data. I may share personal data only with trusted service providers acting on my instructions, and only as needed to operate the Site or respond to you. These may include:

  • Website hosting / deployment providers (for example Vercel or equivalent infrastructure)
  • Email delivery providers (for example Resend or equivalent transactional email services used to deliver contact form messages)
  • Inbox / productivity providers used to receive and manage correspondence
  • Professional advisers (legal, accounting, or similar) where reasonably necessary
  • Public authorities where disclosure is required by law or valid legal process

External project links open separate systems controlled by their owners. Access to those systems is not implied by this Site, and those systems are outside the scope of this Policy.

7. International transfers

Some providers used to host the Site or send email may process data on servers outside Ghana. Where personal data is transferred internationally, I take reasonable steps to ensure that recipients provide an appropriate level of protection consistent with Act 843 and any other applicable law, including contractual and organisational safeguards offered by those providers.

8. Retention

I retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including:

  • Contact enquiries: typically for the period needed to respond and manage any resulting conversation or engagement, and thereafter for a limited period for record-keeping, continuity, and legal protection
  • Technical logs: for short operational periods determined by security and hosting needs, unless a longer period is required to investigate an incident

When data is no longer needed, I take reasonable steps to delete it or irreversibly anonymise it, subject to any legal retention requirement.

9. Security safeguards

Consistent with Act 843's requirement for data security safeguards, I use reasonable technical and organisational measures appropriate to the nature of the data and the risks involved. These may include:

  • HTTPS encryption in transit for the Site
  • Access controls for systems used to receive and manage enquiries
  • Use of reputable hosting and email providers with security controls
  • Limiting the personal data requested through the public contact form
  • Avoiding publication of credentials, private dashboards, or confidential client data on the Site

No method of transmission or storage is completely secure. If I become aware of a personal data breach that is likely to affect your rights, I will take appropriate steps to contain it and, where required by law, notify affected persons and/or the relevant authority.

10. Your rights under Act 843

Subject to the conditions and exceptions in the Data Protection Act, 2012 (Act 843), you may have rights to:

  • Be informed about how your personal data is processed
  • Request access to personal data I hold about you
  • Request correction of inaccurate or incomplete personal data
  • Object to or request restriction of certain processing, where applicable
  • Request deletion of personal data where retention is no longer necessary or lawful
  • Withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal

To exercise these rights, email romeofredson3@gmail.com with enough detail for me to verify your identity and locate the relevant records. I will respond within a reasonable time and in accordance with applicable law.

11. Children

The Site is intended for professional and organisational audiences. It is not directed at children, and I do not knowingly collect personal data from children through the Site. If you believe a child has provided personal data, contact me so it can be deleted.

12. Complaints

If you have a concern about how your personal data is handled, please contact me first at romeofredson3@gmail.com so I can try to resolve it.

You may also have the right to lodge a complaint with the Data Protection Commission of Ghana, which oversees compliance with Act 843. Contact details and procedures are published by the Commission.

13. Changes to this Policy

I may update this Privacy Policy from time to time to reflect changes in the Site, providers, or legal requirements. The “Last updated” date at the top of this page will be revised when changes are made. Continued use of the Site after an update constitutes notice of the revised Policy, except where applicable law requires a different form of notice or consent.

14. Contact

For privacy questions, data-subject requests, or concerns about this Policy:

This Privacy Policy is provided for transparency about how this Site handles personal data. It is not a substitute for legal advice on a specific matter.