Privacy Policy

1. Who We Are

Medsa Prime Nexus (“we”, “us”, “our”) operates the website www.medsapn.com. We are a Ghana-based company specialised in agricultural sourcing, export logistics, bulk supply, and relocation services.

This Privacy Policy explains what personal data we collect when you use our website, why we collect it, how we use it, and what rights you have regarding your data.

2. What Data We Collect

We collect personal data only when you voluntarily provide it to us — specifically when you submit a contact or quote request form on our website. The data we collect includes:

• —Full name
• —Company or organisation name
• —Country of residence or business
• —Email address
• —Phone number (optional)
• —Product or service of interest
• —Estimated order quantity (optional)
• —How you heard about us (optional)
• —Message or requirements you provide

We do not collect any sensitive personal data such as financial account details, government identification numbers, or health information.

We also collect standard technical data automatically when you visit our website, including your IP address, browser type, device type, pages visited, and time of visit. This is collected through Vercel Analytics and is used solely for website performance monitoring.

3. Why We Collect Your Data

We use your personal data for the following purposes:

• —Responding to your inquiry: We use your name, email, and message to reply to your quote request or general inquiry.
• —Business communication: We may follow up regarding your inquiry, send quotations, or share product information relevant to your stated interest.
• —Improving our services: We use anonymised inquiry data to understand demand patterns and improve our product and service offering.
• —Legal compliance: We may retain records of business communications where required by Ghanaian law or international trade regulations.

We will never use your data for unsolicited marketing or sell your data to third parties for advertising purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• —Consent: By submitting our contact form, you consent to us processing your data to respond to your inquiry.
• —Legitimate interests: We have a legitimate business interest in maintaining records of commercial inquiries and communications.
• —Legal obligation: We may process data where required by applicable law.

5. How We Share Your Data

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• —Resend: Our email delivery provider (resend.com) processes your form submission data to deliver inquiry notifications to our team. Resend acts as a data processor on our behalf and is bound by their privacy policy.
• —Vercel: Our hosting provider (vercel.com) processes standard web traffic data. See Vercel's privacy policy for details.
• —Legal requirements: We may disclose your data if required to do so by law, court order, or governmental authority.

6. Data Retention

We retain inquiry and contact data for up to 24 months from the date of submission. This allows us to follow up on ongoing business discussions and maintain records of commercial correspondence.

After this period, data is securely deleted unless we are required by law to retain it for longer, or unless an active business relationship exists that necessitates continued record-keeping.

Website analytics data (IP addresses, page visits) is retained for up to 12 months in anonymised form.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include:

• —HTTPS encryption on all pages and form submissions
• —Server-side validation of all form data before processing
• —Rate limiting on our contact form API to prevent abuse
• —Access controls limiting who within our team can access inquiry data
• —Use of reputable third-party processors (Resend, Vercel) with their own security standards

No method of data transmission or storage is 100% secure. While we take data protection seriously, we cannot guarantee absolute security.

8. Cookies & Tracking

Our website does not use advertising cookies or third-party tracking technologies. We use minimal technical cookies necessary for the website to function correctly (session management).

We use Vercel Analytics for anonymous website performance monitoring. This does not track you across other websites and does not use cookies for advertising purposes.

9. International Data Transfers

Medsa Prime Nexus is based in Ghana. Our service providers (Resend, Vercel) may process data in data centres located in the United States and Europe. By submitting your data through our website, you acknowledge that your data may be transferred to and processed in countries outside your own.

We ensure that any such transfers are subject to appropriate safeguards through our providers' standard contractual terms and privacy policies.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• —Access: Request a copy of the personal data we hold about you.
• —Correction: Request that we correct inaccurate or incomplete data.
• —Deletion: Request that we delete your personal data, subject to legal retention requirements.
• —Objection: Object to our processing of your data for legitimate interest purposes.
• —Restriction: Request that we restrict processing of your data in certain circumstances.
• —Portability: Request your data in a portable, machine-readable format.
• —Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@medsapn.com. We will respond within 30 days.

11. Children's Privacy

Our website is intended for business use and is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

12. Links to External Websites

Our website may contain links to third-party websites such as WhatsApp. We are not responsible for the privacy practices of those websites. We recommend reviewing the privacy policy of any external site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after any changes constitutes your acceptance of the updated policy.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: