Privacy Policy

Notice & Regulatory Review

This policy is designed to uphold the Republic of Ghana Data Protection Act, 2012 (Act 843), the General Data Protection Regulation (EU GDPR), UK GDPR, and ECOWAS / international privacy principles. While actively enforced by our team, formal legal counsel reviews are conducted periodically.

1. Data Controller & Publishing Entity

Osagyefo Magazine Ltd. is the designated data controller for this digital publication. Technical systems, security engineering, and edge distribution are architected in partnership with independent developer KronTech Innovations.

Official Domain: https://osagyefo.link
Privacy Office: privacy@osagyfo.link
Security Desk: security@osagyfo.link

2. Information We Collect

We collect only the minimum data strictly necessary to operate our magazine and deliver subscription benefits:

• Newsletter Subscriptions: Email addresses provided via double opt-in verification. Stored securely with confirmation timestamps and single-use unsubscribe tokens.
• Member Accounts: Email, optional name, membership tier, and entitlements for patrons accessing premium investigative stories.
• Partnership & Editorial Inquiries: Name, business email, and campaign brief submitted via our Media Kit.
• Operational Aggregates: Edge page views, story reads, and daily counters aggregated anonymously in D1 without logging personal IP addresses.

3. Legal Bases for Processing (GDPR Article 6)

• Consent (Art. 6(1)(a)): For newsletter delivery and non-essential analytics preferences. You may revoke consent at any time via one-click unsubscribe links.
• Contract Performance (Art. 6(1)(b)): For delivering paid membership privileges, generating magic link tokens, and managing active subscriber entitlements.
• Legitimate Interests (Art. 6(1)(f)): For preventing brute-force login attempts, mitigating DDoS attacks, verifying Turnstile challenges, and securing the platform.

4. Sub-Processors & Infrastructure

Our stack runs on hardened global infrastructure with zero third-party behavioural ad pixels:

• Cloudflare, Inc.: Global edge execution (Workers), serverless relational storage (D1), and object storage (R2).
• Cloudflare Email Gateway / Resend: Transactional magic link dispatches and editorial digest broadcasts.

5. Your Privacy Rights

Under European Union and international data protection laws, you retain full rights regarding your data:

• Right of Access & Portability: Request an export of any personal records linked to your email address.
• Right to Erasure ("Right to Be Forgotten"): Request permanent deletion of subscriber and membership records.
• Right to Rectification: Correct any inaccurate subscriber or membership data.
• Right to Lodge a Complaint: File an inquiry with the Data Protection Commission (DPC) of Ghana or your national European / international Data Protection Supervisory Authority.

To exercise any statutory right, email our privacy desk at privacy@osagyfo.link. We respond to all verified requests within 30 calendar days.

6. Cookies & Local Storage

We use browser storage strictly for reader comfort and security:

• kron-reading: Saves your preferred palette, font size, and typeface locally.
• member_sid: Secure, HttpOnly cookie managing your authenticated member session.
• vibe_consent_v1: Records your consent preferences via our privacy banner.