Privacy Policy

Regeesta is an events services company based in Accra, Ghana. This policy explains how we collect, use, store and protect personal data when you visit regeesta.com, become our client, or register for, buy a ticket to, or attend an event that uses Regeesta.

We process personal data in line with Ghana's Data Protection Act, 2012 (Act 843).

• Website visitors: details you send us through our forms (name, email, phone or WhatsApp number, organisation, event details and your message), and basic technical data such as your IP address, used to protect our forms from abuse.
• Clients: business contact details, billing details and the information you give us to set up your events.
• Attendees and visitors: the details an event organiser asks for on their registration form, such as name, email, phone, organisation and job title, plus registration codes, ticket and payment records, and check-in times. For visitor logs: visitor name, company, contact details, the person visited, and sign-in and sign-out times.

• To provide our services: registration pages, ticketing, check-in, badge printing, visitor logs, and event apps and websites.
• To communicate with you, for example confirmations, tickets, reminders and replies to your enquiries.
• To process payments.
• To improve our website and services.
• To meet our legal obligations.

We only send marketing emails to people who have agreed to receive them, and every such email lets you unsubscribe.

For attendee and visitor data, the event organiser or the organisation running the reception decides why and how the data is used. They are the data controller, and Regeesta is their data processor: we handle the data on their behalf and on their instructions.

For our own website visitors, enquiries and client accounts, Regeesta is the data controller.

Attendees give consent when they register, after reading the organiser's privacy notice. Marketing consent is a separate, optional choice. We also process data where it is needed to perform a contract (for example, delivering a ticket you bought), to meet a legal obligation, or for our legitimate interests in running and securing our services.

We share personal data only with service providers that help us deliver our services, and only as much as they need:

• Payment processing: Paystack, for card and Mobile Money payments. We never see or store full card details.
• Messaging: our email and SMS providers, to deliver confirmations, tickets and updates.
• Hosting: the providers that host our website, platform and database.

Attendee data is shared with the organiser of the event you registered for. We may disclose data where the law requires it. We do not sell personal data.

We use strict access controls: each person on the platform sees only the events they are assigned to, and sensitive settings are restricted to administrators. Data is sent over encrypted connections, passwords are stored hashed, stored provider keys are encrypted, and important actions are recorded in an audit log.

Each event has a retention period agreed with the organiser. When it ends, attendees' personal details are anonymised automatically, while non-identifying totals (such as how many people attended) are kept for reporting. Unpaid registrations expire after 24 hours. Visitor log retention periods are agreed with each client and applied consistently. Website enquiries are kept for as long as needed to respond and follow up.

You can ask to access the personal data held about you, to correct it, to delete it, or to object to how it is used. Attendees can make a request from the privacy link on any Regeesta event page, or by emailing hello@regeesta.com. Where we process your data for an event organiser, we will pass your request to them and help them respond.

You may also complain to Ghana's Data Protection Commission.

Our website uses only essential cookies, such as the one that keeps signed-in clients and staff signed in. We do not currently use advertising or analytics cookies. If that changes, we will ask for your consent first and update this policy.

Some of our service providers may store or process data outside Ghana. Where they do, we take steps to make sure your data stays protected to the standard required by Act 843.

Our services are designed for adults and organisations. Where an event involves people under 18, the organiser is responsible for obtaining appropriate consent from a parent or guardian.

We may update this policy from time to time. The date at the top shows when it last changed.

Questions about this policy or your data: hello@regeesta.com, or call (+233) 546 266 884.