Last updated: 28 September 2026
This policy covers nyansastudio.com and codewave.nyansastudio.com. It explains what personal data Nyansa Studio collects through this website, why, how long it is kept, and what you can ask us to do with it.
It is written to be read rather than skimmed past. If something here is unclear, ask.
Two things this site does not do. It sets no cookies, and it runs no third-party analytics, advertising or tracking scripts. There is no consent banner because there is nothing to consent to.
1. Who is responsible for your data
NYSA TECHNOLOGIES, trading as Nyansa Studio Gomoa Buduburam, Ghana Registration number BN184350926
Email: hello@nyansastudio.com
NYSA TECHNOLOGIES is the data controller for the personal data described in this policy — that is, we decide what is collected and why.
Where we build or operate software for a client, that client is normally the controller of the data inside their system and we act as their processor under the written agreement for that engagement. This policy does not cover that data. See section 9.
2. What we collect
2.1 The enquiry form
The contact form collects exactly four things, because that is what is needed to reply usefully:
- Name — so a reply can be addressed to a person
- Email address — so a reply can be sent
- What you are trying to do — so we can judge whether we are the right studio for it
- Rough budget range — so neither of us spends time on a mismatch
When you send it, the enquiry is delivered to our inbox by email and recorded as a lead in WyllFlow, the client-management product we build and run ourselves. Nothing is stored on this website.
The form also contains a hidden field that a human visitor never sees or fills in. If it arrives filled in, the submission is treated as automated and discarded. It collects nothing about you.
2.2 Booking a call
The "Book a scoping call" link takes you to Cal.com, a scheduling service. What you enter there — your name, email, the time you choose and any notes — is collected by Cal.com under its own privacy policy, and a copy of the booking is sent to us and recorded as a lead in WyllFlow, the same as an enquiry.
2.3 Email you send us directly
If you email us, we hold that correspondence and whatever you chose to put in it, for as long as section 5 allows.
2.4 Server logs
Our hosting provider records standard technical information for every request: IP address, the page requested, the time, and the browser's user-agent string. These logs exist to keep the site running and to identify abuse. They are not used to build a profile of you and are not combined with enquiry data.
2.5 What we do not collect
Nothing else on this site collects personal data. There is no account, no login, no newsletter and no comment system.
We do not collect payment card details, government identity documents, health information, location data, or any of the special categories of data listed in Article 9 of the UK/EU GDPR. Please do not send them through this website. If your project involves data of that kind, we will agree how to handle it in the engagement contract, not through a web form.
3. Why we are allowed to process it — legal bases
Under the UK/EU GDPR, we rely on:
- Steps taken at your request before entering a contract (Art. 6(1)(b)) — reading and replying to your enquiry or booking.
- Legitimate interests (Art. 6(1)(f)) — keeping the site secure and available, and keeping a record of enquiries so we can recognise a returning conversation. We have weighed this against your interests; the data is minimal, you volunteered it, and it is never sold or used for advertising.
- Legal obligation (Art. 6(1)(c)) — where tax, accounting or other law requires us to retain a record.
We do not rely on consent for anything on this website, because nothing here is optional-but-tracked. Where you later opt in to something specific, we will say so at that point and you can withdraw it at any time.
Under Ghana's Data Protection Act, 2012 (Act 843), the equivalent grounds are performance of a contract or steps preparatory to one, compliance with a legal obligation, and our legitimate interest as data controller.
4. Who else sees it
We do not sell personal data, and we do not share it for anyone else's marketing.
To run this website and answer you, we use a small number of service providers. They handle personal data only on our instructions, under contract, and only for the job they do for us:
- Website hosting — serves this site and keeps the request logs described in §2.4.
- Email delivery and our email inbox — carry an enquiry to us and hold our correspondence with you.
- Scheduling — Cal.com, if you book a call (§2.2).
WyllFlow, where enquiries are recorded, is our own product rather than a third party's.
We do not name every provider here because they change, and a list that has quietly gone out of date is worse than none. If you want the current list, email us and we will send it.
Typefaces are served from this site itself, so loading a page makes no request to Google Fonts or any other font service.
We may also disclose personal data where we are legally required to — a court order, a lawful request from a regulator, or to establish or defend a legal claim. We will not do so on an informal request.
If the studio is ever sold or merged, enquiry records may transfer to the acquirer, who would be bound by this policy until they give you notice of a different one.
5. How long we keep it
- An enquiry or booking that does not become a project — 24 months from your last contact with us, then deleted.
- An enquiry that becomes a project — kept for the life of the engagement, then per the engagement contract.
- Invoices and other financial records — 6 years, where tax and accounting law requires it.
- Email correspondence — 24 months after the conversation ends, unless it forms part of a contract record.
- Server logs — kept by our hosting provider for a short period under its own retention schedule, then discarded. We do not export or archive them.
- Backups — our providers' backups cycle out on their own rolling schedules, so a deleted record may remain in a backup for a short time before it is overwritten.
Where a deletion request arrives before one of these periods expires, we act on it — except for records we are legally required to keep, which we isolate rather than delete.
6. International transfers
We are based in Ghana. Our service providers process data in other countries, including the European Union and the United States, so your data will usually leave the country you send it from.
Where it does, we use providers that commit, in their contracts with us, to protecting it to the standard the law requires — for data from the UK or EEA, that means Standard Contractual Clauses or another recognised transfer mechanism. Ask us if you want to know which applies to a particular provider.
7. Your rights
Wherever you are, you can ask us to:
- Tell you what we hold about you, and give you a copy
- Correct anything inaccurate
- Delete it
- Restrict or object to how we use it
- Provide it in a portable format you can take elsewhere
- Withdraw consent, where any processing ever rests on consent
Email hello@nyansastudio.com. We will respond within 30 days. There is no charge, and you do not need to give a reason.
If you are in Ghana, you may complain to the Data Protection Commission.
If you are in the EEA, the UK or Switzerland, you may complain to your national data protection authority.
We would rather hear from you before you go to a regulator, but the right is yours either way.
8. Security
Traffic to and from this site is encrypted in transit (HTTPS). Enquiries are held in our email inbox and in WyllFlow, both behind individual logins, and access is limited to the people who need it to reply to you.
No system is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to affect your rights, we will notify the relevant authority within the time the law requires — 72 hours, where the GDPR applies — and tell affected people without undue delay: what happened, what data was involved, and what we are doing about it.
9. Client projects
When we build or run software for a client, personal data inside that system belongs to the client, not to us. We process it under their instructions, for the term of the engagement, and the engagement contract sets out confidentiality, security obligations, sub-processing and what happens on termination.
Case studies on this site describe our own work. Client names appear with permission. Any screenshots are redacted so that no individual — a customer, an agent, a member of staff — can be identified from them, and no real financial figures are shown.
10. Children
This site is aimed at businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If we learn that we have, we delete it.
11. Changes
If this policy changes, the revised version appears on this page with a new "last updated" date. Where a change materially affects data we already hold about you, we will contact you directly rather than rely on you noticing.
12. Contact
Questions, requests, or corrections:
NYSA TECHNOLOGIES, trading as Nyansa Studio Gomoa Buduburam, Ghana
Back to home