Effective : May 17, 2021
Last Updated: 25 August 2026
1. Purpose
Dronehub Ghana Limited recognises information as an important business asset.
This Data Protection Policy establishes the principles used by Dronehub to manage personal information responsibly throughout its operations.
It complements our Privacy Policy. The Privacy Policy explains to individuals how their information may be collected and used; this policy describes the broader standards Dronehub applies internally and operationally when handling personal information.
2. Scope
This policy applies to personal information handled by Dronehub in connection with customers, prospective customers, employees, contractors, trainees, suppliers, partners, website users and other individuals.
It applies to information held electronically, in physical documents, through business applications, CRM systems, email, technical systems, training records and operational records.
3. Data Protection Principles
Dronehub seeks to ensure that personal information is handled lawfully, fairly and transparently; collected for legitimate and specified purposes; limited to information reasonably required; maintained accurately where appropriate; retained only for legitimate periods; and protected through appropriate technical and organisational safeguards.
4. Accountability
Dronehub is responsible for implementing reasonable controls to protect personal information handled through its operations.
Employees, contractors and authorised personnel who handle personal information are expected to do so only for legitimate business purposes and in accordance with Dronehub policies and applicable confidentiality requirements.
5. Access Control
Access to personal information should be restricted according to operational need and authorised responsibilities.
Where appropriate, systems containing personal information should use access controls, authentication measures and administrative restrictions.
6. Information Security
Dronehub seeks to protect personal information from unauthorised access, accidental disclosure, alteration, loss and destruction.
Security measures may include account-access controls, secure cloud platforms, endpoint protection, controlled physical access, system backups, staff awareness and appropriate technical safeguards.
7. Suppliers and Processors
Where Dronehub appoints an external service provider to process information on its behalf, consideration should be given to the provider’s role, security practices and contractual responsibilities.
Information should only be shared to the extent reasonably necessary for the service concerned.
8. Data Minimisation
Dronehub should avoid collecting unnecessary personal information.
Website forms, customer records and other processes should request only information reasonably required for the relevant enquiry, transaction, service, support request or legal obligation.
9. Accuracy
Reasonable steps should be taken to ensure important customer, operational and contractual records remain accurate and current.
Individuals may request correction of materially inaccurate personal information.
10. Retention and Disposal
Personal information should not be retained indefinitely without a legitimate reason.
Records may be retained where necessary for legal, accounting, regulatory, warranty, operational, customer-service, dispute-resolution or contractual purposes.
Once information is no longer reasonably required, it should be securely deleted, anonymised or otherwise disposed of where appropriate.
11. Data Incidents
Suspected loss, unauthorised disclosure, compromise or misuse of personal information should be reported internally without unreasonable delay.
Dronehub will assess relevant incidents and take appropriate containment, investigation, remediation and notification measures according to the circumstances and applicable requirements.
12. Individual Rights
Dronehub recognises applicable rights individuals may have regarding their personal information, including access, correction and other lawful requests.
Requests should be submitted to connect@dronehubgh.com.
13. Training and Awareness
Personnel who regularly handle customer, employee or other personal information should receive appropriate guidance regarding confidentiality, secure handling and data-protection responsibilities.
14. Review
This policy should be periodically reviewed to reflect changes in Dronehub’s operations, systems, regulatory obligations and information-security environment.