Last updated: 19 September 2026

Privacy Policy

This policy explains what personal data Cauta Solutions Group Limited ("we", "us", "CSG") collects through this website (cautagroup.com), why, where it is processed, how long we keep it, and the choices and rights you have. It also sets out the privacy principles that apply across every Cauta product. We keep data collection to a minimum: the only cookie this site sets is the one that remembers your cookie choices, and we use no analytics or advertising trackers.

1. Who we are

Cauta Solutions Group Limited is a technology company incorporated in Ghana, with its registered office at 501W Continental Drive, Roman Ridge, Accra. We are registered with the Ghana Data Protection Commission as a data controller under the Data Protection Act, 2012 (Act 843).

For any question about this policy or your data, contact us at [email protected].

2. What this policy covers

This policy applies to cautagroup.com and is the umbrella privacy policy for the group. Each Cauta product has its own notice that explains, in detail, what that product collects and how. Where a product notice differs from this policy on a point specific to that product, the product notice applies.

• CautaReside (estate and facility management): cautareside.com/privacy-policy
• CautaManage (serviced apartments and property development): cautamanage.com/privacy-policy
• FloodCheckGH (flood-risk lookup): floodcheckgh.com/privacy
• Careers at Cauta (job applications): careers.cautagroup.com/privacy
• CautaCare (health records, in development): a patient privacy notice will be published before the product launches.

3. What we collect on this website

• Contact-form details you choose to give us: your name, email address, organisation, the topic you select, and your message. That is the only personal data this website asks you for.
• Basic technical logs: like any website, our hosting provider (Cloudflare) records standard request information such as IP address, browser type and time, to serve the site and keep it secure. We do not use this to build profiles.

The only cookie we set is cookie_consent, which remembers the cookie choices you make in the banner for six months. This site uses no analytics, advertising, social-media or other third-party tracking scripts; the optional "analytics" and "advertising" categories in the banner are switched off and currently unused. Fonts are served from our own domain, so no third party receives your details when you load a page. See our Cookie Policy for details and to change your choice at any time.

4. How we use it and on what legal basis

We use the details you submit through the contact form solely to respond to your enquiry and route it to the right team. We do not sell your data, and we do not share it with third parties for their own marketing.

Under Act 843 we rely on the following lawful bases:

• Your consent, given when you submit the form, for us to contact you about your enquiry.
• Our legitimate interest in responding to enquiries, operating a secure website and keeping business records, where that interest is not overridden by your rights.
• Legal obligation, where Ghanaian law requires us to keep or disclose a record.

Where the EU or UK GDPR applies to a visitor, the same bases apply under that law.

5. Where your data goes

When you submit the form, the information is sent over HTTPS to our own systems: it is received by our public API at api.cautagroup.com and stored in the group's enquiry system, which runs on the same infrastructure as our other platforms and is operated by us. A notification is emailed to our group inbox and a confirmation is emailed to you. If the submission fails, the site offers to open your email app so you can reach us directly.

The people and services that may receive your data are:

• The Cauta team members who handle enquiries.
• Cloudflare, which hosts this website and relays form submissions through its global edge network.
• Our email provider, which delivers the notification and confirmation emails.
• Public authorities, where the law requires disclosure.

6. International transfers

Our websites and the systems that store enquiries are hosted on cloud infrastructure that may be located outside Ghana, and Cloudflare processes requests on servers around the world. This means your data may be transferred to, stored in and processed in countries other than the one you live in. Wherever it is processed, we protect it to the standard described in this policy and take the steps required of us under Act 843, including contractual safeguards with the providers that process it on our behalf and limiting what is transferred to the minimum needed.

7. How long we keep it

We keep enquiry details for up to 24 months after our last contact with you, so that we can follow up and keep a record of the conversation, and then delete them. We keep them longer only if the law requires it or if the enquiry has become a customer relationship, in which case the relevant product notice applies.

8. Your rights

Subject to applicable law, you can ask us to:

• tell you whether we hold personal data about you, and give you a copy;
• correct data that is inaccurate or incomplete;
• delete your data;
• restrict or object to how we use it;
• withdraw consent at any time, without affecting what was done before you withdrew it.

To exercise any of these, email [email protected]. Exercising your rights is free, and we respond within 30 days. We may ask you to confirm your identity before acting on a request. Under Act 843 you also have a right to compensation for damage caused by unlawful processing of your data.

If you are not satisfied with our response, you have the right to complain to the Ghana Data Protection Commission (dataprotection.org.gh, [email protected]) or, if you live elsewhere, to your own data-protection authority.

9. Children

This website and the group's services are intended for adults and businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

10. Security

We collect as little as possible, transmit form submissions over encrypted connections, restrict access to enquiry data to the people who need it, and keep it in systems protected by access controls and audit logging. No method of transmission is perfectly secure, but we take reasonable measures to protect your information.

11. If something goes wrong

If a security breach affects your personal data, we will notify the Ghana Data Protection Commission and, where required, the people affected, in the manner and within the time Act 843 requires, and we will tell you what happened and what we are doing about it.

12. Our privacy principles across the group

Every Cauta product is built on the same commitments, which each product notice sets out in detail:

• We collect only what the service needs, and we say what that is.
• We name the lawful basis for every use of your data.
• We do not sell personal data and do not use it for third-party advertising.
• We tell you which service providers receive your data and where it is processed.
• We publish retention periods and delete data when they expire.
• We answer rights requests within 30 days and free of charge.
• Where we process data on behalf of a customer, we do so under a written data-processing agreement.

13. Links to other sites

This site links to our products and careers pages and to third-party sites. Once you leave cautagroup.com, this policy no longer applies. Please read the privacy notice of the site you visit.

14. Changes

We may update this policy from time to time. The "last updated" date above reflects the current version. If a change materially affects how we use your data, we will say so on this page.

15. Governing law and contact

This policy is governed by the laws of the Republic of Ghana.

Cauta Solutions Group Limited · 501W Continental Drive, Roman Ridge, Accra, Ghana · [email protected]