Privacy Policy

Introduction

Utopia UGX Group Ltd ("Utopia Group," "we," "us," "our") is a digital product and design studio based in Accra, Ghana. This Privacy Policy applies to utopiagroup.io and its subdomains (collectively, the "website"). We act as a data controller for the personal data collected through this website.

We also own and operate several products and publications, including Sronu, myPathway.app, Asetena Pa, and Open Ordinal. Each has its own privacy policy. This policy does not apply to those products.

Personal data we collect

Information you provide. When you contact us — by email, phone, or through our website — you may provide your name, email address, phone number, and any other information you include in your message. We use this information solely to respond to your inquiry and to maintain a record of our correspondence.

Information collected automatically. When you visit our website, our self-hosted analytics system records anonymous page view data: the pages you visit, the referring website, your browser and operating system, your device type, and the country associated with your IP address. IP addresses are used only for country-level geolocation and are not stored. This data is aggregated and does not identify individual visitors. Details are in our Cookie Policy.

How we use your data

We use the personal data you provide to us to respond to your inquiries and to communicate with you about our services. The legal basis for this processing is our legitimate interest in operating our business and responding to prospective and current clients and partners.

We use anonymized analytics data to understand how visitors use our website and to improve our content. Because this data is aggregated and anonymous, it is not personal data and privacy rights do not attach to it.

We may also process personal data where necessary to comply with applicable laws, regulations, or legal proceedings.

How we share your data

We do not sell, rent, or trade your personal data. We do not share it with advertising networks or data brokers. We share personal data only in these circumstances:

Service providers. We work with a small number of third-party providers who help us operate our website and business — for example, our email provider and hosting infrastructure. These providers process data only on our instructions and under contract.

Legal requirements. We may disclose personal data if required by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers. If Utopia Group is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. You will be notified of any change in ownership or control of your personal data.

Third-party services

We use two external services that involve servers outside our control. Neither sets cookies. Full technical details are in our Cookie Policy.

Google Fonts. We use Google Fonts for website typography. When a page loads, your browser requests font files from Google's servers, which receive your IP address. Google does not set cookies through its fonts service. Google's handling of this data is governed by Google's Privacy Policy.

External links. Our website links to external websites, including our own products and client projects. When you follow a link to another website, that site's privacy policy applies. We encourage you to read the privacy policies of any website you visit.

Data retention

We retain correspondence records for the duration of our relationship with you and for a reasonable period afterward. Anonymized analytics data is retained indefinitely for trend analysis but cannot be linked to any individual.

Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and access controls. No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on your jurisdiction, you may have rights under Ghana's Data Protection Act 2012 (Act 843), the EU General Data Protection Regulation (GDPR), or similar legislation. These rights may include access to the personal data we hold about you, rectification of inaccurate data, erasure of your data (subject to legal retention obligations), restriction or objection to processing, data portability where processing is based on consent or contract, and withdrawal of consent where processing is consent-based.

To exercise any of these rights, contact us using the details in the Contact us section. We will respond within the timeframes required by applicable law and may need to verify your identity before processing your request. If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority — in Ghana, this is the Data Protection Commission.

Children's privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe a child has provided us with personal data, please contact us and we will delete it.

International data transfers

Our servers are located in Germany. If you visit from outside Germany, your data may be transferred across borders. We ensure such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology, or applicable law. When we do, we revise the date at the top of this page. Material changes will receive more prominent notice. Continued use of the website after an update constitutes acceptance of the revised policy.

Contact us

If you have questions about this Privacy Policy or wish to exercise any of your rights, contact us at: