YELLOUTS GHANA Data Protection Policy
Effective Date: March 1, 2026 | Last Updated: March 1, 2026
This Data Protection and GDPR Policy explains how Yellouts Ghana ("Yellouts", "we", "our", or "us") collects, processes, and protects personal data in accordance with the Ghana Data Protection Act, 2012 (Act 843) and, where applicable, the European Union General Data Protection Regulation (GDPR).
This policy applies to all users of our platform at www.yellouts.com, including visitors, registered users, and business owners. It should be read alongside our Privacy Policy and Cookie Policy for a full picture of how we handle your data.
1. Our Legal Basis
Yellouts is primarily governed by the Ghana Data Protection Act, 2012 (Act 843), which requires all organisations that collect and process personal data in Ghana to register with the Data Protection Commission and handle personal data responsibly.
Where Yellouts processes data of individuals located in the European Union or European Economic Area, the GDPR also applies. Under both frameworks, we are required to have a lawful basis for processing your personal data. The lawful bases we rely on are:
Consent Where you have given us clear, informed consent to process your data for a specific purpose — for example, signing up for our newsletter or accepting cookies on our platform. You have the right to withdraw your consent at any time.
Contractual Necessity Where processing your data is necessary to fulfil our obligations to you — for example, creating and managing your user account, processing your business listing, or delivering a service you have paid for.
Legitimate Interests Where we have a legitimate business interest in processing your data that does not override your rights and freedoms — for example, improving our platform, preventing fraud, or ensuring platform security.
Legal Obligation Where we are required to process your data to comply with a legal obligation under Ghanaian law or any other applicable law.
2. Data We Collect and Why
We only collect personal data that is necessary for the purposes described below. We do not collect data excessively or for purposes beyond what is stated in this policy.
Account Data Name, email address, and phone number collected when you register. Used to create and manage your account and communicate with you about the platform.
Business Listing Data Business name, address, phone number, website, description, and logo collected when you create or claim a business listing. Used to display your business on the Yellouts directory.
Review and Rating Data Reviews, star ratings, and comments submitted by users. Used to populate business profiles and help other users make informed decisions.
Usage Data IP address, browser type, device information, pages visited, and time spent on the platform. Collected automatically to improve platform performance and user experience.
Communication Data Messages, enquiries, and feedback submitted through our contact forms or support channels. Used to respond to your requests and improve our services.
Payment Data Where you purchase a premium listing or paid service, payment information is processed by our third-party payment processor. Yellouts does not store full payment card details.
3. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our specific retention periods are:
When data is no longer needed, we securely delete or anonymise it so it can no longer be linked to you.
4. Your Data Protection Rights
Under the Ghana Data Protection Act 2012 and the GDPR (where applicable), you have the following rights in relation to your personal data:
Right to Access You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days of receiving a valid request.
Right to Rectification You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and no other lawful basis applies. This is also known as the Right to be Forgotten.
Right to Restrict Processing You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
Right to Data Portability Where we process your data based on consent or contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer that data to another service provider.
Right to Object You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
Right to Withdraw Consent Where we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Lodge a Complaint If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Ghana Data Protection Commission at www.dataprotection.org.gh. If you are located in the EU, you may also lodge a complaint with your local supervisory authority.
To exercise any of the above rights, please contact us at legal@yellouts.com. We will respond to all requests within 30 days. In complex cases we may extend this by a further 60 days, in which case we will notify you.
5. International Data Transfers
Yellouts is based in Ghana and your data is primarily processed and stored in Ghana. However, some of our third-party service providers may process data in other countries, including countries outside of Ghana and the European Economic Area.
Where data is transferred internationally, we ensure appropriate safeguards are in place to protect your data, including relying on providers who are committed to data protection standards comparable to those required under Ghanaian and EU law.
6. Cookies and Consent
When you first visit Yellouts, we display a cookie consent banner that allows you to accept or decline non-essential cookies. Only strictly necessary cookies are placed before you give your consent.
You can manage or withdraw your cookie consent at any time through your browser settings. For full details on the cookies we use, please refer to our Cookie Policy at www.yellouts.com/cookies-policy.
7. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Ghana Data Protection Commission and affected individuals as required by law, within 72 hours of becoming aware of the breach where feasible.
8. Children's Data
Yellouts is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete that data immediately.
If you believe a child under 13 has provided us with personal data, please contact us at legal@yellouts.com.
9. Third-Party Data Processors
We work with trusted third-party service providers who process personal data on our behalf. These include hosting and infrastructure providers, email service providers, analytics tools, and payment processors. All third-party processors are required to handle your data securely and in accordance with our instructions and applicable data protection law.
We do not sell your personal data to third parties under any circumstances.
10. Data Protection Officer
While Yellouts is not currently required to appoint a formal Data Protection Officer under the Ghana Data Protection Act at this stage of our operations, we take data protection seriously and have designated a point of contact for all data-related enquiries.
For all data protection enquiries, requests, or complaints, please contact us at:
Data Protection Contact — Yellouts Ghana Email: legal@yellouts.com Website: www.yellouts.com Contact Page: www.yellouts.com/contact-us
11. Registration with the Data Protection Commission
Yellouts Ghana is committed to complying with the Ghana Data Protection Act, 2012 (Act 843). As required by the Act, organisations that process personal data in Ghana are required to register with the Data Protection Commission (DPC). We are in the process of completing our registration with the DPC and will update this policy upon confirmation.
For more information about the Ghana Data Protection Commission, visit www.dataprotection.org.gh.
12. Changes to This Policy
We may update this Data Protection and GDPR Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make significant changes, we will post the updated policy on this page with a new effective date and notify registered users via email where appropriate.
Your continued use of Yellouts after any changes constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this policy or our data protection practices, please contact us:
Yellouts Ghana Email: legal@yellouts.com Support: support@yellouts.com Website: www.yellouts.com Contact Page: www.yellouts.com/contact-us
Ghana Data Protection Commission: www.dataprotection.org.gh
© 2026 Yellouts Ghana. All rights reserved.
⚠️ One important action item from this document — Section 11 flags that you need to register Yellouts with the Ghana Data Protection Commission. This is a legal requirement under Act 843 for any business collecting personal data in Ghana. Visit www.dataprotection.org.gh to complete your registration.
Here's the full text — ready to copy and paste:
YELLOUTS GHANA Data Protection & GDPR Policy
Effective Date: March 1, 2026 | Last Updated: March 1, 2026
This Data Protection and GDPR Policy explains how Yellouts Ghana ("Yellouts", "we", "our", or "us") collects, processes, and protects personal data in accordance with the Ghana Data Protection Act, 2012 (Act 843) and, where applicable, the European Union General Data Protection Regulation (GDPR).
This policy applies to all users of our platform at www.yellouts.com, including visitors, registered users, and business owners. It should be read alongside our Privacy Policy and Cookie Policy for a full picture of how we handle your data.
Yellouts is primarily governed by the Ghana Data Protection Act, 2012 (Act 843), which requires all organisations that collect and process personal data in Ghana to register with the Data Protection Commission and handle personal data responsibly.
Where Yellouts processes data of individuals located in the European Union or European Economic Area, the GDPR also applies. Under both frameworks, we are required to have a lawful basis for processing your personal data. The lawful bases we rely on are:
Consent Where you have given us clear, informed consent to process your data for a specific purpose — for example, signing up for our newsletter or accepting cookies on our platform. You have the right to withdraw your consent at any time.
Contractual Necessity Where processing your data is necessary to fulfil our obligations to you — for example, creating and managing your user account, processing your business listing, or delivering a service you have paid for.
Legitimate Interests Where we have a legitimate business interest in processing your data that does not override your rights and freedoms — for example, improving our platform, preventing fraud, or ensuring platform security.
Legal Obligation Where we are required to process your data to comply with a legal obligation under Ghanaian law or any other applicable law.
We only collect personal data that is necessary for the purposes described below. We do not collect data excessively or for purposes beyond what is stated in this policy.
Account Data Name, email address, and phone number collected when you register. Used to create and manage your account and communicate with you about the platform.
Business Listing Data Business name, address, phone number, website, description, and logo collected when you create or claim a business listing. Used to display your business on the Yellouts directory.
Review and Rating Data Reviews, star ratings, and comments submitted by users. Used to populate business profiles and help other users make informed decisions.
Usage Data IP address, browser type, device information, pages visited, and time spent on the platform. Collected automatically to improve platform performance and user experience.
Communication Data Messages, enquiries, and feedback submitted through our contact forms or support channels. Used to respond to your requests and improve our services.
Payment Data Where you purchase a premium listing or paid service, payment information is processed by our third-party payment processor. Yellouts does not store full payment card details.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our specific retention periods are:
When data is no longer needed, we securely delete or anonymise it so it can no longer be linked to you.
Under the Ghana Data Protection Act 2012 and the GDPR (where applicable), you have the following rights in relation to your personal data:
Right to Access You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days of receiving a valid request.
Right to Rectification You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and no other lawful basis applies. This is also known as the Right to be Forgotten.
Right to Restrict Processing You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
Right to Data Portability Where we process your data based on consent or contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer that data to another service provider.
Right to Object You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
Right to Withdraw Consent Where we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Lodge a Complaint If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Ghana Data Protection Commission at www.dataprotection.org.gh. If you are located in the EU, you may also lodge a complaint with your local supervisory authority.
To exercise any of the above rights, please contact us at legal@yellouts.com. We will respond to all requests within 30 days. In complex cases we may extend this by a further 60 days, in which case we will notify you.
Yellouts is based in Ghana and your data is primarily processed and stored in Ghana. However, some of our third-party service providers may process data in other countries, including countries outside of Ghana and the European Economic Area.
Where data is transferred internationally, we ensure appropriate safeguards are in place to protect your data, including relying on providers who are committed to data protection standards comparable to those required under Ghanaian and EU law.
When you first visit Yellouts, we display a cookie consent banner that allows you to accept or decline non-essential cookies. Only strictly necessary cookies are placed before you give your consent.
You can manage or withdraw your cookie consent at any time through your browser settings. For full details on the cookies we use, please refer to our Cookie Policy at www.yellouts.com/cookies-policy.
We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Ghana Data Protection Commission and affected individuals as required by law, within 72 hours of becoming aware of the breach where feasible.
Yellouts is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete that data immediately.
If you believe a child under 13 has provided us with personal data, please contact us at legal@yellouts.com.
We work with trusted third-party service providers who process personal data on our behalf. These include hosting and infrastructure providers, email service providers, analytics tools, and payment processors. All third-party processors are required to handle your data securely and in accordance with our instructions and applicable data protection law.
We do not sell your personal data to third parties under any circumstances.
While Yellouts is not currently required to appoint a formal Data Protection Officer under the Ghana Data Protection Act at this stage of our operations, we take data protection seriously and have designated a point of contact for all data-related enquiries.
For all data protection enquiries, requests, or complaints, please contact us at:
Data Protection Contact — Yellouts Ghana Email: legal@yellouts.com Website: www.yellouts.com Contact Page: www.yellouts.com/contact-us
Yellouts Ghana is committed to complying with the Ghana Data Protection Act, 2012 (Act 843). As required by the Act, organisations that process personal data in Ghana are required to register with the Data Protection Commission (DPC). We are in the process of completing our registration with the DPC and will update this policy upon confirmation.
For more information about the Ghana Data Protection Commission, visit www.dataprotection.org.gh.
We may update this Data Protection and GDPR Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make significant changes, we will post the updated policy on this page with a new effective date and notify registered users via email where appropriate.
Your continued use of Yellouts after any changes constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this policy or our data protection practices, please contact us:
Yellouts Ghana Email: legal@yellouts.com Support: support@yellouts.com Website: www.yellouts.com Contact Page: www.yellouts.com/contact-us
Ghana Data Protection Commission: www.dataprotection.org.gh
© 2026 Yellouts Ghana. All rights reserved.
Here's the updated version — Ghana-focused only, no GDPR references:
YELLOUTS GHANA Data Protection Policy
Effective Date: March 1, 2026 | Last Updated: March 1, 2026
This Data Protection Policy explains how Yellouts Ghana ("Yellouts", "we", "our", or "us") collects, processes, and protects personal data in accordance with the Ghana Data Protection Act, 2012 (Act 843).
This policy applies to all users of our platform at www.yellouts.com, including visitors, registered users, and business owners. It should be read alongside our Privacy Policy and Cookie Policy for a full picture of how we handle your data.
Yellouts is governed by the Ghana Data Protection Act, 2012 (Act 843), which requires all organisations that collect and process personal data in Ghana to register with the Data Protection Commission and handle personal data responsibly.
We are required to have a lawful basis for processing your personal data. The lawful bases we rely on are:
Consent Where you have given us clear, informed consent to process your data for a specific purpose — for example, signing up for our newsletter or accepting cookies on our platform. You have the right to withdraw your consent at any time.
Contractual Necessity Where processing your data is necessary to fulfil our obligations to you — for example, creating and managing your user account, processing your business listing, or delivering a service you have paid for.
Legitimate Interests Where we have a legitimate business interest in processing your data that does not override your rights and freedoms — for example, improving our platform, preventing fraud, or ensuring platform security.
Legal Obligation Where we are required to process your data to comply with a legal obligation under Ghanaian law.
We only collect personal data that is necessary for the purposes described below. We do not collect data excessively or for purposes beyond what is stated in this policy.
Account Data Name, email address, and phone number collected when you register. Used to create and manage your account and communicate with you about the platform.
Business Listing Data Business name, address, phone number, website, description, and logo collected when you create or claim a business listing. Used to display your business on the Yellouts directory.
Review and Rating Data Reviews, star ratings, and comments submitted by users. Used to populate business profiles and help other users make informed decisions.
Usage Data IP address, browser type, device information, pages visited, and time spent on the platform. Collected automatically to improve platform performance and user experience.
Communication Data Messages, enquiries, and feedback submitted through our contact forms or support channels. Used to respond to your requests and improve our services.
Payment Data Where you purchase a premium listing or paid service, payment information is processed by our third-party payment processor. Yellouts does not store full payment card details.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our specific retention periods are:
When data is no longer needed, we securely delete or anonymise it so it can no longer be linked to you.
Under the Ghana Data Protection Act, 2012 (Act 843), you have the following rights in relation to your personal data:
Right to Access You have the right to request a copy of the personal data we hold about you. We will provide this within 30 days of receiving a valid request.
Right to Rectification You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and no other lawful basis applies.
Right to Restrict Processing You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
Right to Object You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
Right to Withdraw Consent Where we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Lodge a Complaint If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Ghana Data Protection Commission at www.dataprotection.org.gh.
To exercise any of the above rights, please contact us at legal@yellouts.com. We will respond to all requests within 30 days.
We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the Ghana Data Protection Commission and affected individuals as required by law.
When you first visit Yellouts, we display a cookie consent banner that allows you to accept or decline non-essential cookies. Only strictly necessary cookies are placed before you give your consent.
You can manage or withdraw your cookie consent at any time through your browser settings. For full details on the cookies we use, please refer to our Cookie Policy at www.yellouts.com/cookies-policy.
Yellouts is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete that data immediately.
If you believe a child under 13 has provided us with personal data, please contact us at legal@yellouts.com.
We work with trusted third-party service providers who process personal data on our behalf. These include hosting and infrastructure providers, email service providers, analytics tools, and payment processors. All third-party processors are required to handle your data securely and in accordance with our instructions and applicable Ghanaian data protection law.
We do not sell your personal data to third parties under any circumstances.
Yellouts Ghana is committed to complying with the Ghana Data Protection Act, 2012 (Act 843). As required by the Act, organisations that process personal data in Ghana are required to register with the Data Protection Commission (DPC). We are in the process of completing our registration with the DPC and will update this policy upon confirmation.
For more information about the Ghana Data Protection Commission, visit www.dataprotection.org.gh.
For all data protection enquiries, requests, or complaints, please contact us at:
Data Protection Contact — Yellouts Ghana Email: legal@yellouts.com Website: www.yellouts.com Contact Page: www.yellouts.com/contact-us
We may update this Data Protection Policy from time to time to reflect changes in our data practices or legal obligations. When we make significant changes, we will post the updated policy on this page with a new effective date and notify registered users via email where appropriate.
Your continued use of Yellouts after any changes constitutes your acceptance of the updated policy.
Yellouts Ghana Email: legal@yellouts.com Support: support@yellouts.com Website: www.yellouts.com Contact Page: www.yellouts.com/contact-us
Ghana Data Protection Commission: www.dataprotection.org.gh