Privacy Notice

01Who is responsible for your data

Bespa Services of Accra, Ghana, trading as BESPA Expert Systems, is the data controller for the personal data described here. That means we decide what data is collected and why. Contact us at info@bespa.online with any privacy question or request.

02What we collect and why

We collect only what we need to run the service:

• •Account data — name, email address and login credentials, to create and secure your account. Legal basis: performance of our contract with you.
• •Subscription and entitlement data — your plan, status, trial and renewal dates and payment outcome, to give you access to the applications and support your billing queries. Legal basis: contract.
• •Project data you enter — geometry, loads, terrain, rates and similar engineering inputs, and the documents generated from them, to provide the service to you. Legal basis: contract.
• •Support messages — the content of emails and contact form messages, to answer you. Legal basis: contract and our legitimate interest in supporting customers.
• •Usage and technical data — pages visited, actions in the applications, device and browser type, approximate location and IP address, to keep the service secure, diagnose faults and improve the product. Legal basis: legitimate interests.
• •Marketing preferences — where you have asked to hear from us about new applications. Legal basis: consent, withdrawable at any time.

03Payments

We do not collect or store your card details. Payments are handled by Paddle.com, our reseller and Merchant of Record. Paddle collects the billing information it needs to take payment, calculate tax and issue receipts, and handles that data under its own privacy notice at https://www.paddle.com/legal/privacy.

04Who we share data with

We share personal data only with the following categories of recipient:

• •Service providers and subprocessors — hosting, database, authentication, email delivery and error-monitoring providers that operate the platform on our instructions.
• •Paddle.com, as our reseller and Merchant of Record — for subscription sales, subscription management, payments, tax compliance and receipts.
• •Professional advisers — legal, accounting and audit advisers, where necessary.
• •Authorities and regulators, where we are required to disclose by law or to protect legal rights.

05International transfers

Our hosting and payment providers operate internationally, so your data may be processed outside Ghana, including in the European Economic Area, the United Kingdom and the United States. Where data leaves the EEA or the UK we rely on recognised safeguards such as standard contractual clauses or an adequacy decision.

06How long we keep data

Account, subscription and project data is kept while your account is open. After closure we keep it for up to 12 months so you can reactivate or export, then delete or anonymise it. Billing and tax records are kept for as long as accounting law requires, usually six years. Support messages are kept for up to three years, and technical logs for up to 12 months.

07Your rights

Subject to the law that applies to you, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, provide it in a portable form, or withdraw consent you previously gave. If you are in the EEA or the UK you also have the right to complain to your data protection supervisory authority.

Email info@bespa.online to exercise a right. We will respond within one month, and will tell you if we need longer because the request is complex.

08Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption of stored data, role-based access controls, per-account data isolation in the database and restricted administrative access. No system is completely secure, so please use a strong, unique password and tell us at once if you suspect a problem.

09Cookies and similar technologies

We use essential cookies and local storage to keep you signed in, remember your cart and secure your session; the service cannot work without these. We use limited analytics to understand which applications are used and where errors occur. We do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser, but essential cookies are required to sign in.

10Children

The service is intended for engineering professionals and is not directed at children. We do not knowingly collect data from children.

11Changes to this notice

We will post any update on this page with a new date, and will notify account holders by email where the change is material.