Background
Geocrest Group is an Engineering Consulting firm that provides services to clients in and across Africa. We are
committed to protecting the personal information you share with us during our business engagements. This Privacy
Notice provides clarity on how we collect, use, disclose, and protect your personal information. At Geocrest we process
data in line with the Data Protection Act, 2012 (Act 843) of Ghana and, where applicable, other jurisdictional data
protection laws.
We process personal information either as a data controller when we collect the data directly, or as a data processor on
behalf of our clients and other third party, acting only on their instructions.
Our Identity
Geocrest Company limited, and its affiliates i.e. Geocrest SLE, Geocrest CIV, Geocrest GE is the data controller for the
personal data we collect unless otherwise stated.
Registered Office Addresses:
Operational Headquarters
Geocrest Company Limited
11 Yoomo Naana Lane
East Legon, Accra, Ghana
Tel: +233 (0)169 3909
Email: info@geocrestgroup.com
Affiliate Offices:
Geocrest Cote D’Ivoire
11 BP 1556, Angré Oscars,
Cocody, Abidjan
Tel: (+225) 272 22207861
Geocrest Guinea
Miniere Cite, Dixinn,
Conakry
Tel: (+224) 625 070 639
Geocrest Sierra Leone
8 Bathurst Street
Freetown
Tel : (+232) 748 006 02
How do we obtain your personal data?
Geocrest collects personal data directly from individuals in various contexts, including:
• When you apply for employment or submit your CV
• When you engage our services
• When you submit an inquiry via our website or support channels
• When you provide feedback, lodge a complaint, or complete a survey
• When you communicate with us in writing, by phone, or electronically
• When you use our company-managed devices or platforms (e.g., Microsoft 365, Intune)
We may also receive your data indirectly from partners, vendors, or clients in the execution of services.
The information we collect and when
We only collect information relevant and necessary for the purposes outlined. The personal data we may collect includes:
• Full name
• Contact numbers
• Email address
• Residential or business address
• Employment or service history
• IP address and device identifiers
• CCTV or biometric access logs (e.g., fingerprint data at our offices)
• Microsoft 365 activity logs (if applicable to your engagement)
Purpose of processing
We process your personal data for the following purposes:
• To deliver services or respond to inquiries
• To fulfill contractual obligations with clients, partners, or employees
• For recruitment and Human Capital management
• For Information Technology (IT) administration and access control
• To secure company premises and IT systems
• To communicate important updates or respond to your requests
• To maintain records and ensure legal compliance
Lawfulness of Processing
We only process personal data where we have a legal basis. These include:
| Type of Processing Activity | Lawful Basis |
| Responding to inquiries, feedback, or complaints | Legitimate interest |
| Providing and managing contracted services | Performance of a contract |
| Employee onboarding and administration | Legal obligation & performance of a contract |
| Sending newsletters or marketing updates | Consent |
| Security monitoring (CCTV, biometrics) | Legitimate interest & legal obligation |
| Vendor and procurement communications | Legitimate interest |
Whom we might share your information with
Geocrest may share your data with third parties only under the following conditions:
• Where legally required (e.g., with regulatory bodies such as the Data Protection Commission)
• With service providers or contractors who help us fulfill a service
• With internal staff on a need-to-know basis
• If necessary to protect our legal rights or in connection with a legal claim
• With clients where services require joint processing under a binding agreement
All third-party processors are bound by strict confidentiality and data protection agreements.
Security Safeguards
Geocrest prioritizes data security and applies appropriate technical and organizational measures, including:
• Encrypted communications and cloud storage
• Access controls using Microsoft 365 and Intune
• Biometric access at some of our offices
• Regular data protection assessments
• Secure onboarding and offboarding procedures
We recommend that individuals also take necessary steps to protect their personal data when interacting with us.
Your Rights as a Data Subject
Under Ghana’s Data Protection Act (Act 843), you have the following rights:
• Right to be informed: Know how your data is being processed.
• Right of access: Request access to your data (Data Subject Access Request).
• Right to rectification and erasure: Request correction or deletion of inaccurate or outdated data.
• Right to prevent processing: Object to processing that may cause harm or distress.
• Right to withdraw consent: Withdraw your consent at any time.
• Right to object to direct marketing: Opt out of promotional communications.
• Right to complain and seek redress: File complaints and seek compensation where applicable.
• Other rights under applicable foreign jurisdictions, where services extend beyond Ghana.
Notice to Exercise Rights
You can exercise your rights by writing to us. We will respond within twenty-one (21) days of receipt, indicating whether
we have complied with your request or explaining why we cannot do so.
To exercise your rights, contact us at:
Email: info@geocrestgroup.com
Tel: +233 (0)20 169 3909
Changes to this Privacy Notice
This notice may be updated periodically to reflect changes in our practices or the law. The current version will always be
available on our website.
Regulatory Authority
The Data Protection Commission (DPC) in Ghana is responsible for overseeing data protection compliance. You can
learn more or file a complaint by visiting their website.