Privacy Policy

This Privacy Policy explains how NutaSolutions (“NutaSolutions,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when you visit our websites, create an account, or use NutaPOS and related services (together, the “Services”).

We process personal data in line with the Data Protection Act, 2012 (Act 843) of Ghana and other applicable laws. By using the Services, you acknowledge the practices described here.

1. Who we are

NutaSolutions provides NutaPOS, a cloud point-of-sale and business management platform for inventory, sales, bookkeeping, staff access, audits, and related operations, primarily for businesses in Ghana and across Africa. Related sites (including NutaWEB roadmap pages) are covered by this policy unless a separate notice says otherwise.

Privacy requests and questions: email ops@nutasolutions.com or call 054 129 8861.

2. Scope

This policy applies to:

• Visitors to our marketing and product websites
• People who sign up, sign in, or request sales information
• Authorized users of a customer’s NutaPOS account (owners, managers, and staff)

It does not replace privacy notices that our merchant customers must give to their own end customers or employees when they use NutaPOS in their stores.

3. Roles: controller and processor

Account and site data. For information you provide to create an account, contact sales, or browse our sites (such as your name, email, phone, and business profile), NutaSolutions is typically the data controller: we decide why and how that data is processed.

Customer Content. Data that customers and their staff enter into NutaPOS—such as sales and receipts, inventory and stock movements, bookkeeping records, staff profiles and roles, audit logs, and any end-customer details captured at checkout—is “Customer Content.” For Customer Content, the merchant customer is the data controller. NutaSolutions acts as a data processor: we process that data on the customer’s instructions to provide the Services.

4. Information we collect

4.1 Information you provide

• Account signup: full name, email address, password, phone number, business name, business type, business location, number of branches, and how you heard about us.
• Sign-in: email and password (and related authentication tokens managed by our systems).
• Communications: messages you send by email, phone, or other channels, including sales inquiries.

4.2 Customer Content

When you use NutaPOS, we process the business and operational data you and your team upload or generate in the product, including transaction, inventory, staff, and bookkeeping data as configured for your account.

4.3 Technical and usage data

We may collect limited technical information needed to operate and secure the Services, such as IP address, device/browser type, timestamps, and diagnostic or security logs related to authentication and API use.

4.4 What we do not do

We do not sell personal data. Our marketing website does not currently use third-party advertising or analytics cookies. If that changes, we will update this policy.

5. Purposes of processing

We use personal information to:

• Create and manage accounts, authenticate users, and provide NutaPOS
• Host and process Customer Content on behalf of our customers
• Respond to support and sales requests
• Secure the Services, prevent abuse, and troubleshoot incidents
• Improve product reliability and features (using aggregated or de-identified insights where practical)
• Send service-related notices (for example, security or account messages)
• Comply with law, enforce our Terms of Service, and protect our rights

We apply Act 843 principles including lawful processing, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

6. Cookies and similar technologies

Our marketing site is primarily static and does not rely on advertising trackers. The application and API may use essential cookies or local storage for sessions, authentication, and security. You can control cookies through your browser; blocking essential cookies may prevent sign-in or core features from working.

7. How we share information

We may share personal information with:

• Service providers / subprocessors who host infrastructure, email, or other operational services under contractual confidentiality and security obligations
• Professional advisers (legal, accounting) where needed
• Authorities when required by law or to protect rights, safety, or security
• Business transfers in connection with a merger, acquisition, or restructuring, subject to appropriate safeguards

Customer Content is accessible to the customer’s authorized users according to roles configured in NutaPOS. We do not disclose Customer Content to unrelated third parties except as needed to provide the Services or as required by law.

8. International transfers

The Services use cloud infrastructure. Personal data and Customer Content may be stored or processed on servers located outside Ghana. Where we transfer personal data internationally, we take steps consistent with Act 843 to protect it, including contractual and technical safeguards with our providers.

9. Retention

• Account and contact data: kept while your account is active and for a reasonable period afterward for security, dispute resolution, and legal compliance.
• Customer Content: retained for the life of the subscription and deleted or returned according to our Terms and the customer’s instructions, subject to backup and legal hold cycles.
• Logs: typically retained for shorter operational periods unless needed longer for security or legal reasons.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include encryption-minded architecture, access controls, role-based permissions in NutaPOS, and resilient hosting practices. No method of transmission or storage is completely secure; we work continuously to reduce risk. Where a security compromise involving personal data occurs, we will take steps consistent with applicable law, including notifying affected controllers and, where required, the Data Protection Commission.

11. Your rights

Subject to Act 843 and other applicable law, individuals may have rights to access personal data we hold about them, request correction of inaccurate data, object to certain processing, and request deletion or restriction where appropriate. To exercise these rights for data we control, contact ops@nutasolutions.com.

For Customer Content processed on behalf of a merchant, please contact that merchant first; we will assist customers in responding to valid requests as required.

You may also lodge a complaint with the Data Protection Commission of Ghana if you believe your rights have been infringed.

12. Children

The Services are designed for businesses and adult users. They are not directed at children, and we do not knowingly collect personal data from children for marketing or account creation.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. For material changes, we may provide additional notice (for example, by email or in-product message). Continued use of the Services after an update constitutes acceptance of the revised policy where permitted by law.

14. Contact

NutaSolutions
Email: ops@nutasolutions.com
Phone: 054 129 8861