Privacy Policy

This Privacy Policy explains how PAN I.T (“PAN I.T,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you visit panit.org, register as a customer or partner store, book a service, make a payment, use any PAN I.T product (including WorkMe, P’PN, EduPro Campus, and LMS), or otherwise interact with us, including through consulting engagements.

By using any PAN I.T service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use our services. This Policy should be read together with our Terms of Service.

PAN I.T is a technology company based in Adabraka, Accra, Ghana, operating an online marketplace that connects customers with independent partner stores and tradespeople across IT services and support, web and mobile development, device sales and repair, auto mechanic and repair services, barbering, hair and beauty, home services and repair, electronics repair, photography and videography, and event services. We also build and operate our own software products, including WorkMe (commute ride-hailing), P’PN, EduPro Campus, and our lab management system (LMS), and we provide direct IT consulting services.

For the purposes of Ghana’s Data Protection Act, 2012 (Act 843), PAN I.T is the data controller for personal data processed through panit.org and the products listed above, except where a partner store is separately identified as the controller for data you provide directly to them in the course of a booking.

Information you give us

• Account information: full name, email address, phone number, and password (stored only as a salted hash, never in plain text).
• Partner store information: business name, business location, services offered, Tax Identification Number (TIN), Form A document, Business Certificate, logo and other uploaded compliance documents, and the login credentials of the store owner.
• Booking and order details: the service requested, scheduling details, device information (for repair/device services), and any notes you provide.
• Communications: messages you send through our contact form, support chat, or booking/order request threads.
• Payment-related information: billing name, billing plan selection, and invoice/receipt details. See Section 7 for how card and mobile money details themselves are handled.

Information collected automatically

• Usage data: pages visited, features used, referring pages, and timestamps.
• Device and technical data: IP address, browser type and version, operating system, and device identifiers.
• Location data: where a service requires it (for example, matching a ride, a home-service call-out, or a pickup/drop-off address), we collect the location you provide or, with your device permission, your approximate or precise GPS location.
• Cookies and similar technologies: see Section 8.

Information from third parties

• Confirmation of payment status, transaction references, and card metadata (e.g. last four digits, card type) from Paystack, our payment processor.
• Delivery/communication status from our email and SMS service providers.

We use personal data to:

• Create and manage your account, and verify your identity.
• Operate the marketplace: match customers with partner stores, process bookings and order inquiries, and generate invoices and proformas.
• Review and approve (or deny) partner store applications, including verifying compliance documents, and to investigate suspected fraudulent registrations.
• Process payments and payouts, and maintain accurate financial and tax records.
• Send transactional communications: booking confirmations, order updates, OTP verification codes, receipts, and account security notices.
• Send service-related or promotional communications, where you have not opted out.
• Provide customer support and respond to enquiries.
• Monitor, maintain, and improve the security, performance, and reliability of our platform.
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with applicable legal, tax, and regulatory obligations.

Where the Data Protection Act, 2012 (Act 843) or another applicable law requires a specific legal basis, we rely on one or more of the following:

• Performance of a contract — to create your account, process a booking, or fulfil a partner store subscription.
• Consent — for example, to use precise location data, or to send marketing communications. You may withdraw consent at any time.
• Legitimate interests — to keep our platform secure, prevent fraud, and improve our services, balanced against your rights and interests.
• Legal obligation — to meet tax, accounting, and regulatory requirements, and to respond to lawful requests from public authorities.

We do not sell personal data. We share information only as follows:

• With partner stores you book with, limited to what they need to fulfil your request (name, contact details, booking details, and pickup/drop-off or service location).
• With service providers who process data on our behalf under contract, including cloud hosting, file storage, transactional email delivery, SMS/OTP delivery, and Paystack for payment processing.
• With professional advisers (lawyers, auditors, accountants) where reasonably necessary.
• With public authorities where required by law, court order, or to protect the rights, property, or safety of PAN I.T, our users, or the public.
• In a business transfer — if PAN I.T is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this Policy or a successor policy of equivalent protection.

Where a service is paid for in-app, payment card and mobile money details are collected and processed directly by Paystack, our licensed third-party payment processor, not stored by PAN I.T. We receive only confirmation of payment status, a transaction reference, and the last four digits of a card where applicable, for reconciliation and support purposes. Paystack’s own processing of your payment data is governed by its privacy policy, available at paystack.com/privacy.

Some services on our platform are paid directly between customer and partner store (cash or a personal mobile money transfer) and never pass through PAN I.T or a payment processor at all; in that case we only record that a payment was confirmed, and by which method, for dispute-resolution purposes.

We use strictly necessary cookies to keep you signed in and to protect your session (for example, CSRF protection). Where we use analytics or preference cookies, we will ask for your consent where required by law. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the site from working.

We retain personal data for as long as your account is active, and afterwards for as long as reasonably necessary to fulfil the purposes described in this Policy, including to comply with legal, tax, and accounting requirements, to resolve disputes, and to enforce our agreements. Compliance documents submitted by partner stores (Form A, Business Certificate) are retained for the duration of the partnership and for a reasonable period afterwards for regulatory and audit purposes.

Subject to applicable law, including the Data Protection Act, 2012 (Act 843), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to our legal and legitimate business retention needs.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent at any time where processing is based on consent.
• Data portability, where technically feasible.
• Lodge a complaint with Ghana’s Data Protection Commission, or your local data protection authority.

To exercise any of these rights, contact us using the details in Section 15. We may need to verify your identity before actioning a request.

We apply technical and organisational safeguards appropriate to the sensitivity of the data involved, including encryption of passwords, encrypted connections (HTTPS/TLS) for data in transit, access controls limiting staff access to personal data on a need-to-know basis, and restricted storage for sensitive compliance documents, accessible only to authenticated platform administrators. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our services are not directed at, and may not be used by, anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete it.

Some of our service providers (including cloud hosting, storage, email, and payment processing) may process data on servers located outside Ghana. Where this occurs, we take reasonable steps to ensure the recipient provides an adequate level of data protection, consistent with the requirements of the Data Protection Act, 2012 (Act 843), including through contractual safeguards with our service providers.

We may update this Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated Policy on this page with a new “Last updated” date, and where changes are material, we will provide additional notice (for example, by email or an in-app notice).

Questions, requests, or complaints about this Policy or how we handle your data can be sent to us using the details below. If you are not satisfied with our response, you have the right to lodge a complaint with Ghana’s Data Protection Commission.