Privacy Policy

There are two kinds of personal information here, and the responsibility differs.

• Account information, meaning the people who sign in: name, email, phone, role and activity. For this, Bold Redhok Technology is the data controller.
• Shop content, meaning what a business records in the course of trading: its customers, suppliers, employees, sales and debts. For this, the shop is the controller and we are its processor. We act on the shop’s instructions and do not use that content for our own purposes.

If you are a customer or an employee of a shop that uses Bold Bolt and you want your record changed or removed, ask that shop. If they do not respond, write to us and we will help them.

The full inventory, category by category, with retention periods, is published separately in Data We Collect. In summary:

• To create and secure accounts: name, email, phone, password hash, sign-in times and the device that holds a checkout counter.
• To run the business features you asked for: everything you enter about products, customers, suppliers, staff and money.
• To bill and support you: shop details, plan, payment references and the messages you send us.
• To keep the service honest and safe: an audit trail of who did what, and failed sign-in counts used to slow down attacks.

We do not run advertising trackers, we do not profile users, and we do not take payment card numbers: subscriptions are settled by bank transfer or mobile money, and we record only the reference.

We process account and billing information to perform our contract with you, and to meet legal obligations such as keeping accounting records. We process security and audit information because we have a legitimate interest in protecting shops from theft and fraud, and because our customers need that trail to run their own controls. Where we need consent, for example for optional messages, we ask for it and you may withdraw it.

Nobody buys it. A small number of suppliers process data on our behalf, under contract, and only to make the service work. They are listed in Data We Collect, and today they are our hosting and database provider, our application platform, our email sender and our image store.

Inside your shop, who sees what is your decision: rights are granted action by action, and sensitive actions can be made to require a second signature.

We disclose data to an authority only when a valid legal request obliges us, and we tell you unless the law forbids it.

The database and application run in the European Union, in the Republic of Ireland region of our providers. Data may be accessed by our team in Ghana to operate and support the service.

We keep shop content for as long as the shop is a customer. After an account ends we keep it for ninety days so a returning customer loses nothing, then delete it, except records we must keep longer for accounting or legal reasons. Detailed periods per category are in Data We Collect.

• Isolation in the database. Every table filters on the shop of the signed-in user, so a request for another shop’s rows is refused by the database, not merely by our code.
• Encryption. Traffic is encrypted in transit; storage and backups are encrypted at rest by our providers.
• Rights and second signatures. Employees hold only what the owner granted, and the most damaging actions can require approval.
• Records that cannot be altered. Accounting entries, stock movements and the audit trail refuse modification and deletion.
• Attempt limiting. Repeated failed sign-ins are throttled.

No system is perfect. If a breach affects your personal information and is likely to put you at risk, we notify you and the competent authority without undue delay, and tell you what to do.

Under the Data Protection Act, 2012 (Act 843) of Ghana, and under comparable laws in the other countries we serve, you may ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything inaccurate;
• erase your personal information, within the limits of records we must keep;
• stop or restrict a particular use, including any optional messaging;
• hand your data over in a portable format.

Write to support@boldredhok.tech. We reply within thirty days. If you are not satisfied, you may complain to the Data Protection Commission of Ghana, or to the equivalent authority where you live.

Bold Bolt is a tool for businesses and is not intended for anyone under eighteen. We do not knowingly create accounts for children.

When this policy changes in a way that affects you, we raise its version, publish it here, and ask you to accept it the next time you sign in. We record which version you accepted and when.

Bold Redhok Technology, Accra, OAK Villa Estate, Ghana.
Privacy and data requests: support@boldredhok.tech.
Anything else: support@boldredhok.tech.