Privacy Policy

One Button Studio is a content creation and studio facility by CARISCA, located at CARISCA, KNUST School of Business, Kumasi, Ghana.

• Operator responsible for your personal information: [PLACEHOLDER: Legal name of the studio operator]
• Privacy contact: [PLACEHOLDER: Privacy contact]
• Data protection supervisor: [PLACEHOLDER: Data protection supervisor]

Registration status with the Data Protection Commission of Ghana: [PLACEHOLDER: not yet confirmed by the studio].

Act 843 sets out principles for handling personal information. We apply them as follows.

• Accountability: the operator named above is responsible for how your information is handled.
• Lawfulness of processing: we only use information where there is a lawful ground, such as carrying out your booking, meeting a legal obligation or your consent.
• Specification of purpose: we collect information for the specific purposes listed in this policy.
• Compatibility of further processing: we do not go on to use information for an unrelated purpose.
• Quality of information: we aim to keep information accurate and up to date, and you can ask us to correct it.
• Openness: this policy tells you what we collect and why.
• Data security safeguards: we take reasonable technical and organisational measures to protect information.
• Data subject participation: you can exercise the rights described below.

We also keep to data minimisation: we collect what the service needs, not what might one day be useful.

Information you give us

• Full name, email address and phone number.
• Organisation, where you give one.
• Your customer category (for example student, researcher, creator or business).
• KNUST student status and, where the studio's verification method requires it, a KNUST student email address or a student ID reference.
• The purpose of a booking and any special requirements you choose to tell us.
• Messages you send us.

Information about your bookings

• The package, date, time and add-ons selected.
• Membership details, including hours purchased and used.
• Payment information: see "Payments" below.
• A record of the policy versions you accepted at checkout and when.

Technical information

• IP address.
• Browser and device information.
• Cookies: see "Cookies" below.
• Basic information about how the website is used, such as the pages requested.

We use personal information to:

• create and manage bookings;
• process payments and confirm bookings;
• manage memberships;
• verify eligibility for student pricing;
• communicate with you, including confirmations and reminders;
• provide customer support;
• manage access to the studio;
• prevent fraud and misuse, and maintain security;
• keep booking records and produce financial and operational reports;
• improve the studio service;
• meet legal or institutional obligations.

Online payments are processed by Paystack. When you pay, your card, bank or Mobile Money details are entered with Paystack and handled on Paystack's systems. The studio does not receive or store your full card number, card security code or Mobile Money PIN. Your use of Paystack is subject to Paystack's own terms and privacy practices.

We keep only what we need to match a payment to a booking:

• payment reference;
• transaction status;
• amount and currency;
• payment date;
• the payment channel reported by Paystack;
• the booking reference;
• the transaction record Paystack returns to us, which may include limited details such as the card type and the last four digits of a card.

Student pricing is available only to eligible KNUST students, so we need to confirm student status. Depending on the method the studio has chosen, we may ask for:

• a KNUST student email address;
• a student ID reference;
• your student status;
• other information reasonably needed to confirm eligibility.

We use this information only to decide whether student pricing applies and to prevent misuse of it.

We will never ask for your KNUST portal password or any other KNUST login details. No part of this website requires them. If anyone claiming to act for the studio asks for them, do not provide them, and tell us.

Your information may be seen by, or shared with:

• authorised One Button Studio staff;
• CARISCA and KNUST personnel, where there is a legitimate need;
• our payment provider, Paystack;
• our hosting, email and other technology service providers, who process information on our behalf;
• professional advisers, where necessary;
• law enforcement bodies or regulators, where the law requires it.

We do not sell personal information. We do not share it for unrelated marketing unless there is a lawful basis for doing so, including your consent where consent is required.

We take reasonable technical and organisational measures to protect personal information, with the aim of keeping it confidential, accurate and available to those who need it. These include:

• access controls and restricted administrative access;
• secure sign-in, with passwords stored in hashed form;
• encrypted connections (HTTPS);
• payment handled through Paystack's secure integration;
• checks on the server for information submitted through the website;
• logging of administrative actions;
• secure storage;
• limits on how long information is kept;
• procedures for responding to a security incident.

No system can be guaranteed to be completely secure. If you believe your information has been compromised, contact us using the privacy contact above.

We keep personal information only for as long as it is reasonably needed for:

• administering bookings;
• financial records;
• customer support;
• security;
• legal obligations;
• resolving disputes;
• institutional reporting.

Booking and financial records may be retained for: [PLACEHOLDER: Approved retention period].

When information is no longer needed for these purposes, it is deleted or made anonymous.

Under Ghanaian data protection law you have rights over your personal information. Where they apply, these include the right to:

• be informed about how your information is used;
• access the information we hold about you;
• have inaccurate information corrected;
• object to processing;
• prevent processing that is likely to cause you damage or distress;
• ask for information to be deleted where the law provides for it;
• withdraw consent, where we rely on your consent;
• prevent the use of your information for direct marketing;
• exercise any other right the law gives you.

To make a request, contact: [PLACEHOLDER: Privacy contact]. Tell us which right you want to exercise and give us enough detail to identify your records. We may need to confirm your identity before acting.

You may also raise a concern with the Data Protection Commission of Ghana.

The website uses cookies that are needed for it to work:

• Authentication: keeping you signed in to your account.
• Booking sessions: remembering a booking in progress.
• Security: protecting forms and sign-in from misuse.
• Preferences: remembering choices you make on the site, where this applies.

The website does not currently use advertising cookies. If analytics or other non-essential cookies are introduced, this policy will be updated first and you will be asked for your consent before they are set.

The rules on bookings and recordings involving people under 18 are in the Content and Recording Policy. Information about a minor is collected only with the involvement of a parent or guardian.

We may update this policy. The version, effective date and last updated date are shown at the top of this page.