Privacy Policy

The Base Movement ("we", "us", "The Base") is a Ghanaian political movement registered in Ghana. We act as the data controller for all personal data collected through this website and our membership platform.

Contact for data protection matters:
The Base Movement, Data Protection Desk
Email: privacy@thebasemovement.org.gh
Postal: Accra, Ghana

We are committed to complying with Ghana's Data Protection Act, 2012 (Act 843) and the regulations of the Data Protection Commission (DPC).

We collect the following categories of personal data:

Political affiliation is sensitive data under Act 843 s.16. We process it only with your explicit consent and only for the core purposes of movement membership and coordination.

We share your data with the following processors, each bound by their own privacy and security commitments:

• Vercel Inc. (USA), Hosting & content delivery. Data may transit US servers. Standard Contractual Clauses apply.
• Supabase Inc. (EU/USA), Database, authentication, and file storage. Member data is stored in their managed Postgres cluster.
• Hubtel Ghana Ltd., Payment processing for donations and dues. Hubtel handles card/mobile-money data under their own PCI-DSS compliance.
• Vercel Analytics, Privacy-first, cookie-free web analytics. Only anonymised page-view data is captured.
• Sentry (sentry.io), Error monitoring. Stack traces and browser metadata may be captured. No deliberate PII is sent.
• Mapbox Inc., Interactive maps, map tiles and geolocation visualisation. Requests may disclose IP address, device information and approximate location to Mapbox.
• Resend / Mail provider, Transactional and newsletter email delivery.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

• Active member profiles, retained for the duration of membership.
• Donation records, retained for 7 years for financial audit compliance.
• Error logs (Sentry), auto-deleted after 90 days.
• Analytics data (Vercel Analytics), anonymised, retained indefinitely in aggregate.
• Deactivated accounts, soft-deleted; a 90-day retention window applies before permanent erasure.
• Newsletter subscriptions, removed within 7 days of unsubscribe request.

You may request deletion of your account at any time by contacting privacy@thebasemovement.org.gh. Financial records required by law will be retained for their statutory period.

Under Ghana's Data Protection Act 843 you have the following rights:

• Right of access, Request a copy of the personal data we hold about you.
• Right to correction, Request correction of inaccurate or incomplete data.
• Right to deletion, Request erasure of your data (subject to legal retention obligations).
• Right to object, Object to processing based on legitimate interest.
• Right to withdraw consent, Withdraw consent at any time without affecting prior processing.
• Right to lodge a complaint, File a complaint with the Data Protection Commission of Ghana (dataprotection.org.gh).

To exercise any right, email privacy@thebasemovement.org.gh. We will respond within 21 days as required by Act 843.

This site uses minimal cookies. Here is what we set:

No third-party advertising cookies are set. Supabase session tokens are stored in sessionStorage (not a persistent cookie) and are cleared when you close the browser tab.

We use Vercel Analytics to understand how visitors use this site and monitor performance. It does not use cookies and does not collect personally identifiable information, all data is aggregated and anonymous.

Our data processors (Vercel, Supabase) may store data outside Ghana, including in the United States and European Union. Where applicable, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Processors' own adequacy and security certifications (SOC 2, ISO 27001)

Note: This policy has been drafted for review by a qualified Ghanaian data-protection lawyer before final publication. It reflects our current understanding and practices as of the date below.