Background
Geocrest Group is an Engineering Consulting firm that provides services to clients in and across Africa. We arecommitted to protecting the personal information you share with us during our business engagements. This PrivacyNotice provides clarity on how we collect, use, disclose, and protect your personal information. At Geocrest we processdata in line with the Data Protection Act, 2012 (Act 843) of Ghana and, where applicable, other jurisdictional dataprotection laws.We process personal information either as a data controller when we collect the data directly, or as a data processor onbehalf of our clients and other third party, acting only on their instructions.
Our Identity
Geocrest Company limited, and its affiliates i.e. Geocrest SLE, Geocrest CIV, Geocrest GE is the data controller for the
personal data we collect unless otherwise stated.
Registered Office Addresses:
Operational Headquarters
Geocrest Company Limited
11 Yoomo Naana Lane
East Legon, Accra, Ghana
Tel: +233 (0)169 3909
Email: info@geocrestgroup.com
Affiliate Offices:
Geocrest Cote D’Ivoire
11 BP 1556, Angré Oscars,
Cocody, Abidjan
Tel: (+225) 272 22207861
Geocrest Guinea
Miniere Cite, Dixinn,
Conakry
Tel: (+224) 625 070 639
Geocrest Sierra Leone
8 Bathurst Street
Freetown
Tel : (+232) 748 006 02
How do we obtain your personal data?
Geocrest collects personal data directly from individuals in various contexts, including:
When you apply for employment or submit your CV
When you engage our services
When you submit an inquiry via our website or support channels
When you provide feedback, lodge a complaint, or complete a survey
When you communicate with us in writing, by phone, or electronically
When you use our company-managed devices or platforms (e.g., Microsoft 365, Intune)
We may also receive your data indirectly from partners, vendors, or clients in the execution of services.
The information we collect and when
We only collect information relevant and necessary for the purposes outlined. The personal data we may collect includes:
Full name
Contact numbers
Email address
Residential or business address
Employment or service history
IP address and device identifiers
CCTV or biometric access logs (e.g., fingerprint data at our offices)
Microsoft 365 activity logs (if applicable to your engagement)
Purpose of processing
We process your personal data for the following purposes:
To deliver services or respond to inquiries
To fulfill contractual obligations with clients, partners, or employees
For recruitment and Human Capital management
For Information Technology (IT) administration and access control
To secure company premises and IT systems
To communicate important updates or respond to your requests
To maintain records and ensure legal compliance
Lawfulness of Processing
We only process personal data where we have a legal basis. These include:
Type of Processing Activity
Responding to inquiries, feedback, or complaints
Providing and managing contracted services
Employee onboarding and administration
Sending newsletters or marketing updates
Security monitoring (CCTV, biometrics)
Vendor and procurement communications
Lawful Basis
Responding to inquiries, feedback, or complaints
Performance of a contract
Legal obligation & performance of a contract
Consent
Legitimate interest & legal obligation
Legitimate interest
Whom we might share your information with
Geocrest may share your data with third parties only under the following conditions:
Where legally required (e.g., with regulatory bodies such as the Data Protection Commission)
With service providers or contractors who help us fulfill a service
With internal staff on a need-to-know basis
If necessary to protect our legal rights or in connection with a legal claim
With clients where services require joint processing under a binding agreement
All third-party processors are bound by strict confidentiality and data protection agreements.
Security Safeguards
Geocrest may share your data with third parties only under the following conditions:
Encrypted communications and cloud storage
Access controls using Microsoft 365 and Intune
Biometric access at some of our offices
Regular data protection assessments
Secure onboarding and offboarding procedures
We recommend that individuals also take necessary steps to protect their personal data when interacting with us.
Your Rights as a Data Subject
Under Ghana’s Data Protection Act (Act 843), you have the following rights:
Right to be informed: Know how your data is being processed.
Right of access: Request access to your data (Data Subject Access Request).
Right to rectification and erasure: Request correction or deletion of inaccurate or outdated data.
Right to prevent processing: Object to processing that may cause harm or distress.
Right to withdraw consent: Withdraw your consent at any time.
Right to object to direct marketing: Opt out of promotional communications.
Right to complain and seek redress: File complaints and seek compensation where applicable.
Other rights under applicable foreign jurisdictions, where services extend beyond Ghana.
Notice to Exercise Rights
You can exercise your rights by writing to us. We will respond within twenty-one (21) days of receipt, indicating whetherwe have complied with your request or explaining why we cannot do so.
To exercise your rights, contact us at:
Email: info@geocrestgroup.com
Tel: +233 (0)20 169 3909
Changes to this Privacy Notice
This notice may be updated periodically to reflect changes in our practices or the law. The current version will always beavailable on our website.
Regulatory Authority
The Data Protection Commission (DPC) in Ghana is responsible for overseeing data protection compliance. You can
learn more or file a complaint by visiting their website.
