Privacy Policy
Version 2026-07-01 · Compliant with the Ghana Data Protection Act, 2012 (Act 843).
Who we are
Nkyea operates an accommodation marketplace and property-management platform serving hosts and guests in Ghana. We are the data controller for the personal data described here.
What we collect
For tenants: your name, email, phone, rental history, and — for identity verification — a government ID type and number (e.g. Ghana Card) and, if you choose to upload one, a photo of that ID. For hosts: your business details, representative name and ID, and payout account information needed to verify you and send you money.
Why we process it
To take and manage bookings, process payments and payouts, meet tax and accounting obligations, verify host identity to prevent fraud, and — only with your consent — to send you marketing. We rely on your consent, the performance of your booking contract, and our legal obligations as the lawful bases for processing.
How we protect it
Government ID numbers are encrypted at rest and shown to staff only in masked form (last four digits). Access to tenant data is isolated per host at the database level, and sensitive actions are recorded in an append-only audit log.
Identity documents (ID photos) get extra protection: they are encrypted at rest, never stored at a public address, and can only be opened through a short-lived, signed link by our review team — who see them behind a confidential watermark. As soon as a verification decision is recorded, the ID photo is permanently deleted; we keep only the masked ID number and the decision. We never download, reuse, or share your ID document.
Your rights
Under Act 843 you may access a copy of your data, correct it, withdraw marketing consent at any time, and request erasure. You can exercise these yourself from your data & privacy page — download a full export or erase your account. On erasure we remove your personal details and disable sign-in; booking and payment records are kept in anonymised form only for as long as tax and accounting law requires.
Retention
We keep personal data only as long as needed for the purposes above. Identity document photos are deleted immediately once your verification is decided — we don't retain the scan. Financial records are retained per Ghana Revenue Authority requirements even after an account is erased, in a form that no longer identifies you.
Contact
For any privacy request or to reach our data protection contact, email privacy@nkyea.example. You also have the right to lodge a complaint with the Data Protection Commission of Ghana.