Privacy policy
This policy explains what personal data InsightLab collects, why, and your rights. We handle personal data in line with Ghana's Data Protection Act, 2012 (Act 843).
What we collect
- Account details: your name, email, phone number, organization or university, and password (stored only in scrambled, hashed form).
- Profile details you choose to add: photo, short bio, location, headline and, for consultants, skills and experience.
- Project information: your requests, messages, uploaded files, quotes, payments and ratings.
- Consultant applications: the details and CV you submit when you apply.
- Payment information: payments are processed by Paystack. We receive confirmation of payment and a reference, but never your full card or mobile money PIN details.
- Usage information: basic, aggregated visitor statistics to understand how the site is used.
How we use it
- To run your account and deliver the work you request.
- To match you with a suitable consultant and share the project details they need.
- To send you emails about your account and projects, such as confirmations, updates and password resets.
- To handle payments, keep business records and meet legal obligations.
- To improve our services.
We do not sell your personal data.
Who can see your information
- InsightLab staff who manage projects.
- The consultant assigned to your project can see your name, request details, messages and files for that project.
- Clients you work with can see a consultant's name, photo, headline, bio, location and skills.
- Service providers who help us run the site, such as hosting, database, file storage, email and payment providers. Some of these store data outside Ghana, with appropriate safeguards.
Cookies and outside services
- One essential cookie (insightlab_session) keeps you signed in and protects our forms from misuse. It lasts up to 14 days. We don't use advertising or tracking cookies.
- Google Fonts: pages load their typefaces from Google, which receives your device's IP address when it delivers them.
- Email: account and project emails are sent through our email provider (Resend).
How long we keep it
We keep account and project records for as long as your account is active and for up to six years afterwards for accounting and legal purposes. You can ask us to delete project files sooner.
Your rights
You can ask to see the personal data we hold about you, correct it, or delete it, and you can object to how we use it. Most details can be updated yourself on your profile page. For anything else, email info@insightlabconsult.com. You can also complain to Ghana's Data Protection Commission.
Security
We use encrypted connections (HTTPS), hashed passwords and access controls so that only the people involved in a project can see its files and messages.
Contact
Questions about this policy: info@insightlabconsult.com.