Privacy policy

AAG Cloud Connect is an information technology consultancy and Microsoft Cloud Solution Provider based at Suite 2134, Atlantic Towers, Liberation Road, Accra, Ghana. In this policy, “we”, “us”, and “our” refer to AAG Cloud Connect, and “you” refers to anyone who visits this website, submits one of our forms, or corresponds with us using the contact details published here.

This policy covers information collected through this website and through the enquiry and support channels advertised on it. It does not cover information we process inside a customer’s own systems when we deliver services under a contract. In that situation the customer normally determines the purpose of the processing and we act on their instructions, with the specific terms set out in the service agreement and any accompanying data processing terms rather than in this policy.

This site also links to third-party services — vendor documentation, social profiles, and messaging applications such as WhatsApp. Once you follow a link away from this site, the privacy policy of the destination applies rather than ours.

We collect information that you give us deliberately, and a limited amount of technical information generated automatically when you use the site. We do not buy personal data from third parties, and we do not attempt to build a profile of you from sources outside these channels.

Information from the contact form. When you send an enquiry we collect the enquiry type, your first and last name, job title, company, industry, company size, work email address, telephone number, city, preferred method of contact, the areas of our services you are interested in, your indicated timeline, how you heard about us, the message you write, and your confirmation that you agree to be contacted. Most of these fields are required because they determine who inside our team should answer you.

Information from the support form. When you raise a support request we collect your full name, company, account or tenant or contract reference, work email address, telephone number, the severity you have selected, the product and environment affected, a summary and description of the issue, and any preferred callback window. Please avoid pasting passwords, access keys, or personal data belonging to your own customers into a ticket description; if sensitive material is genuinely needed for diagnosis, ask us and we will arrange a secure route for it.

Correspondence and call records. If you email us, telephone us, or message us on WhatsApp, we retain the content of that correspondence and the contact details it was sent from, so that a colleague picking up the conversation later has the history.

Technical information. Our hosting provider and any analytics we operate process technical data generated by your browser, which may include your IP address, the pages you requested, the time of the request, referring page, and general device and browser characteristics. This is used in aggregate to keep the site available, diagnose faults, and understand which pages are useful.

We use the information you submit to respond to you, to deliver and support the services you have asked for, and to run our own business properly. In practice that means the following.

Responding to enquiries. Reading your message, routing it to the right specialist, contacting you by your preferred method, arranging a scoping conversation, and preparing a proposal or assessment scope. Your industry, company size, and stated timeline are used to decide who answers and what they need to prepare.

Delivering and supporting services. Where you are a customer, we use your details to raise and triage tickets, contact you about incidents and planned maintenance, manage subscriptions and renewals, escalate cases to vendors on your behalf, and produce service reporting.

Administration and record keeping. Invoicing, reconciliation of subscriptions against active seats, keeping records of what was agreed, and meeting the legal and accounting obligations that apply to us.

Service improvement. Understanding which pages of this site are actually read, which enquiries recur, and where our written material fails to answer an obvious question. This work uses aggregated information wherever it can.

We do not sell your personal information, we do not rent or share it for another organisation’s marketing, and we do not use it for automated decision-making that produces a legal or similarly significant effect on you. If we ever want to add you to a mailing list, we will ask first and every message will carry a working unsubscribe link.

Data protection law requires us to have a reason for processing your information. We rely on three, in plain language.

Your consent. When you tick the box on the contact form, you are agreeing that we may contact you about the enquiry you have raised. You can withdraw that consent at any time by telling us, and we will stop contacting you for that purpose. Withdrawing consent does not undo processing that was lawful before you withdrew it.

Performance of a contract, or steps taken before entering one. Where you are a customer, or are asking us to quote for work, we process your information because we cannot deliver the service or prepare the proposal without it.

Our legitimate interests. Keeping the website secure and available, maintaining business records, and improving what we publish are ordinary business activities that a person contacting a consultancy would reasonably expect. We only rely on this basis where our interest does not override your rights and freedoms.

Where we are required to keep information to meet a legal, tax, or accounting obligation, that obligation is the basis for retaining it.

We use a small number of third-party services to run this website and handle what you submit through it. Each of them processes information on our instructions, and each may store or process data outside Ghana.

Vercel hosts this website and serves it to your browser. In doing so it processes technical request data such as IP address, requested URL, and browser characteristics, and it generates operational logs used for availability and security.

Supabase stores the submissions made through our contact and support forms, so that enquiries and tickets are not held only in an inbox and can be retrieved by the colleague who needs them.

Resend delivers the email notifications generated by those forms, including the acknowledgement sent to you and the alert sent to our team. It processes the email addresses and message content required to deliver those messages.

Beyond these, we use ordinary business tools — email, collaboration, and accounting systems — and we may share information with professional advisers, or with a vendor such as Microsoft where an escalation on your behalf requires it. We share only what is necessary for the purpose. We will also disclose information where we are legally required to do so, and we will tell you if that happens unless we are prohibited from doing so.

We keep information for as long as it serves the purpose it was collected for, and then we dispose of it. Enquiries that do not lead to a relationship are kept for a limited period so that we have context if you come back to us, and are then deleted. Records relating to a customer relationship are kept for the duration of that relationship and for a period afterwards, because questions about what was agreed and delivered can arise well after a project closes.

Financial and contractual records are kept for the period required by the tax and company law that applies to us, which is longer than we would otherwise keep them. Technical logs are short-lived and are retained only for the period needed to investigate faults and security events.

If you ask us to delete information and there is no legal obligation or overriding business reason to keep it, we will delete it and confirm that we have done so.

This site is served over an encrypted connection, and form submissions are transmitted over that connection to the services described above. Access to enquiry and ticket data is limited to the people in our team who need it to do their work, and administrative access to our own systems requires multi-factor authentication.

We apply to ourselves the practices we recommend to clients: least privilege rather than shared administrative accounts, removal of access when someone changes role or leaves, patching on a schedule, and backup with recovery that is tested rather than assumed.

No system is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to affect your rights, we will act to contain it, tell you what happened and what we are doing about it, and notify any supervisory authority we are required to notify.

Depending on the law that applies to you, you may have the right to ask us for a copy of the personal information we hold about you; to have inaccurate information corrected; to have information deleted where there is no continuing reason for us to keep it; to restrict or object to certain processing; to receive information you gave us in a portable format; and to withdraw consent where consent is what we rely on.

To exercise any of these, email info@aagcloudconnect.com and tell us which right you want to exercise and what information the request concerns. We may need to verify your identity before we act, particularly for access and deletion requests, since acting on an unverified request would itself be a risk to you. We aim to respond within one month; if a request is complex we will tell you and explain the delay.

There is no charge for making a request. If you are not satisfied with how we have handled it, tell us first so we can put it right, and you retain the right to complain to the data protection authority in your jurisdiction.

Cookies are small files a website can store in your browser. This site is built to work without advertising or cross-site tracking cookies. Where cookies or similar storage are used, they are limited to what is needed for the site to function and, where applicable, to measure how the site is used in aggregate.

Any analytics we operate are configured to report on traffic patterns rather than to identify individuals, and we do not combine analytics data with the details you submit through a form in order to work out who read which page. Our hosting provider also records request logs for availability and security purposes, as described above.

You can block or delete cookies through your browser settings. Doing so will not prevent you from reading this site, though it may affect preferences that would otherwise be remembered between visits. If we introduce cookies that require your consent, we will ask for it before they are set and update this section accordingly.

We will update this policy when what we do changes — for example if we adopt a new processor, add a form, or introduce analytics that work differently. The date at the top of this page shows when it was last revised, and the current version is always the one published here.

Where a change materially affects how we handle information you have already given us, we will take reasonable steps to tell you rather than relying on you noticing a revised date.

Questions about this policy, or about how we handle your information, can be sent to us using any of the details below. Privacy questions are treated as correspondence rather than as a sales enquiry, and you do not need to complete a form to ask one.