Legal
Privacy notice
Last updated 30 July 2026
This notice explains what we do with personal data collected through this website. It is deliberately short, because the site collects very little: there are no cookies, no analytics and no tracking of any kind.
Who this notice is from
Fortunum & Bay Co. Ltd is the data controller for personal data collected through this website. We are a diversified consulting and investment company based in Accra, Ghana.
To be confirmed. Registered office address and Data Protection Commission registration number to be confirmed before publication.
What we collect
We collect two things, and nothing else.
- Information you send us through the enquiry form: your name, your email address, and your message. Your organisation and the division you are interested in are optional.
- Standard technical information created when any browser requests any web page: your IP address, your browser type and the time of the request. This is generated by our hosting provider for security and delivery, not by us for analysis.
This site sets no cookies. It runs no analytics, no advertising technology, no tracking pixels and no third-party scripts, and it stores nothing on your device. There is no consent banner because there is nothing to consent to.
Why we process it, and on what basis
- Enquiries: to read your message and reply to it. The basis is your consent, given when you choose to submit the form. You may withdraw it at any time by writing to us.
- Technical logs: to keep the site available and to detect abuse. The basis is our legitimate interest in operating a secure website.
We do not use your information to build a profile of you, we do not make automated decisions about you, and we do not sell, rent or trade it to anyone.
How long we keep it
Enquiries are kept for as long as needed to deal with your request and to maintain a record of the correspondence, and are then deleted. Technical logs are held for a short period by our hosting provider and expire automatically.
To be confirmed. A specific retention period for enquiries is to be confirmed by the client. Twenty-four months is proposed.
Who else handles it
We use a small number of service providers to run the site. They process data on our instructions only:
- Cloudflare, Inc. — website hosting and network security. Handles the technical request data described above.
- Our email provider — delivers enquiries from the form to our inbox and stores the resulting correspondence.
These providers operate infrastructure outside Ghana, so your information may be processed abroad. We use providers that commit to recognised data protection standards, and we transfer no more than is needed to deliver the service.
Your rights
Under Ghana's Data Protection Act, 2012 (Act 843) you have the right to ask us what personal data we hold about you, to have it corrected if it is wrong, to ask us to delete it, and to object to how we are using it. You can exercise any of these by writing to us using the contact details below, and we will respond as soon as we reasonably can.
If you are not satisfied with our response, you may complain to the Data Protection Commission of Ghana.
Security
The site is served over an encrypted connection, and enquiries are transmitted over that same encrypted connection. No method of transmission over the internet is completely secure, so please do not send confidential or sensitive information through the enquiry form. If a matter is sensitive, call us instead and we will arrange a secure route.
Children
This site is intended for businesses, institutions and investors. It is not directed at children, and we do not knowingly collect information from them.
Changes
If we change how we handle personal data we will update this notice and change the date shown at the top of the page.