Privacy Policy

Who we are

Whyt CXP Limited ("Whyt CXP", "we", "us") is an engineering and construction firm at No. 1 Cotton Street, Lizzy Complex, East Legon, Accra, Ghana. This policy explains what information we collect through whytcxp.com, why we collect it, and how long we keep it. We are the data controller for that information.

What we collect

When you use the contact form. We collect the name, email address, message, and where you choose to provide them the phone number, project type and budget range you enter. These are sent to us by email. They are not written to our database.

When you browse the site. Our server records the page you requested, the address of the page that referred you, your browser's user-agent string, and a one-way fingerprint of your IP address. The fingerprint is a SHA-256 hash of the address combined with a secret value and the current date, so it changes every day and cannot be reversed into an address or followed from one day to the next. We do not store your IP address itself.

We do not use analytics scripts, advertising tags, tracking pixels, or social media embeds. There are none on this site.

Cookies

This site sets one cookie:

• whytcxp_sid: keeps your browsing session together so the contact form can be protected against cross-site request forgery, so a message can be shown after you submit the form, and so the form cannot be submitted repeatedly by automated scripts. It is a first-party cookie, is marked HttpOnly and SameSite=Strict, and is deleted when you close your browser.

That cookie is strictly necessary for the site to work, so we do not ask for consent to set it. We set no analytics, advertising, or profiling cookies, and no third party sets a cookie through this site.

If you dismiss the cookie notice, we record that in your browser's local storage so we do not show it again. That value stays on your device and is never sent to us.

Why we use it, and on what basis

• To answer enquiries you send us. We rely on your consent, given by choosing to send the message.
• To understand which pages are useful, in aggregate. We rely on our legitimate interest in maintaining a site that works.
• To keep the site secure and to block spam and abuse of the contact form. We rely on our legitimate interest in protecting the site.

How long we keep it

• Enquiries stay in our email system for as long as we need them to deal with your enquiry and any work that follows from it.
• Page records are deleted automatically after 90 days.
• Security logs record the time and type of blocked or failed form submissions, together with the same daily one-way fingerprint described above. They contain no names, email addresses, or IP addresses.

Who we share it with

We do not sell, rent, or trade personal information.

Enquiries sent through the contact form are delivered through Microsoft 365, which acts as our email provider. Fonts and all other files used by this site are served from our own server, so loading a page does not send your details to any third party.

This site embeds nothing from Google or any other third party. The "Office Location" link in our footer opens Google Maps in a new tab if you choose to follow it; from that point Google's own terms and privacy policy apply, as with any link that leaves this site.

Sending information outside Ghana

Microsoft 365 stores and processes email on servers that may be outside Ghana. We use it because it is a widely used business email service with its own contractual data protection commitments.

Keeping it safe

The site is served over HTTPS. The contact form is protected against cross-site request forgery and rate-limited against automated submission. Administrative access requires a password, locks after repeated failed attempts, and times out when idle. Access to the site's administration area is limited to Whyt CXP staff who need it.

Your rights

Under the Data Protection Act, 2012 (Act 843) you may ask us what personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we are using it. Write to us using the details on our Contact page and we will respond.

If you are not satisfied with our response, you can complain to Ghana's Data Protection Commission, which supervises compliance with the Act.

Changes to this policy

If we change how we handle information, we will update this page and change the date at the top.

Contact

Questions about this policy can be sent to info@whytcxp.com or through the contact form.