Privacy Policy

1. Introduction

KIMS (Kusung Integrated Management Services) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

This policy complies with GDPR (EU), CCPA (California), and POPIA (South Africa) privacy regulations, as applicable.

2. Information We Collect

Personal Information

When you contact us via the contact form, we collect:

• Full Name – to address you personally
• Email Address – to respond to your inquiry
• Service Category – to route your request appropriately
• Message Content – the substance of your inquiry

Automatically Collected Data

• IP Address – for rate limiting and abuse prevention
• Timestamp – when your request was submitted
• Browser/Device Info – user-agent headers for analytics
• Cookies – session tokens for website functionality

Account Information (If Registered)

• Email (verified)
• Full Name
• Account role (admin/user)
• Login history

3. How We Use Your Information

• Contact Form Requests – to respond to your inquiry and provide services
• Email Communication – to send you responses, updates, and service notices
• Abuse Prevention – IP-based rate limiting to prevent spam and bot attacks
• Service Improvement – aggregate analytics (non-personal) to improve our website
• Legal Compliance – to comply with applicable laws and regulations
• Security – to detect and prevent fraudulent activity and unauthorized access

4. Data Retention

• Contact Form Data – retained for 90 days unless user requests deletion
• Email Addresses – deleted upon user request; retained otherwise per GDPR requirement
• IP Logs – retained for 30 days for abuse prevention; then deleted
• Account Data – retained until account deletion (30-day recovery window)
• Legal Holds – data may be retained longer if required by law enforcement

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

• Email Service Provider – to send transactional emails (Base44 integration)
• Analytics Platform – aggregate, non-personal data only (Google Analytics)
• Law Enforcement – only when required by court order or legal obligation
• Service Providers – hosting, backups, and security (Base44 platform)

6. Your Rights (GDPR/CCPA/POPIA)

You have the right to:

• Access – request a copy of your personal data
• Correction – update inaccurate or incomplete data
• Deletion – request removal of your data (right to be forgotten)
• Portability – export your data in a machine-readable format
• Opt-Out – withdraw consent for marketing communications
• Withdraw Consent – stop processing of your data at any time
• File a Complaint – with data protection authorities if violated

To exercise any of these rights, contact us at privacy@kimsgh.com

7. Security Measures

• Encryption – all data transmitted over HTTPS (TLS 1.2+)
• Authentication – passwords hashed with PBKDF2 (100,000 iterations)
• Rate Limiting – protects against brute-force attacks
• Input Validation – sanitization prevents XSS and injection attacks
• Access Control – only authorized staff can access personal data
• Regular Audits – annual security assessments and penetration testing

8. Cookies & Tracking

We use cookies for:

• Session Management – to keep you logged in (HTTP-only, secure cookies)
• Analytics – to understand user behavior and improve the site (Google Analytics)
• Security – CSRF tokens to prevent cross-site attacks

You can disable cookies in your browser settings, but some features may not work properly.

9. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If we become aware of such collection, we will immediately delete the data and notify parents/guardians.

10. International Data Transfers

Your data may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

11. Updates to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Effective Date." Your continued use of the Service constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, or wish to exercise your privacy rights, contact:

KIMS (Kusung Integrated Management Services)
42 Lark St. Social Welfare, Madina
P. O. Box WY1111, Kwabenya, Accra, Ghana

Email: privacy@kimsgh.com
Phone: 0244 090 761 | 0545 459 548

Data Protection Officer: privacy@kimsgh.com
Response Time: 30 days for privacy requests (or as required by law)