Privacy Policy
CledgeDashboard (dhb.cledgesolutions.com) is Cledge Solutions' own control centre, used by our staff to set up, support and bill the organisations that use our products. This policy explains what personal information it holds, why, who can see it, how long it is kept and the rights you have.
Who is responsible for your information
Cledge Solutions is the controller of the information in CledgeDashboard. Contact: support@cledgesolutions.com, +233 203 222 172.
Information we handle
Account and sign-in information
- Name, email address, username, phone number, role and the permissions you work in.
- Your password, stored only as a one-way hash that cannot be turned back into the password.
- Two-step verification settings: an authenticator-app key stored encrypted and recovery codes stored only as hashes.
- Sign-in times, the IP address and browser used, and a record of important actions (audit log), used to keep accounts secure.
Customer and billing information
- customer organisation details: name, address, country, contact people, email addresses and phone numbers
- subscriptions, plans, invoices, payments and payment reminders
- the administrator accounts we set up for customers in our products
- support, maintenance and security records
CledgeDashboard does not hold our customers' patient, member or student records; those stay in each product.
Information we create to keep the service running
- Technical and security logs (for example errors, failed sign-in attempts and the IP address they came from).
- Emails and the system sends, such as sign-in details, verification codes and notifications.
How and why we use it
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Provide CledgeDashboard and its features | Performing our contract with our customers |
| Sign you in, send sign-in details and verification codes, and sign you out after 10 minutes without activity | Contract; legitimate interests in keeping accounts secure |
| Protect the service: detect and stop fraud, abuse and attacks; keep audit logs | Legitimate interests; legal obligations |
| Answer support requests and tell you about changes to the service | Contract; legitimate interests |
| Bill customers and keep accounting records | Contract; legal obligations (tax and accounting law) |
| Improve the service using aggregated information that does not identify anyone | Legitimate interests |
| Comply with the law and respond to lawful requests | Legal obligations |
We do not sell personal information, share it for cross-context behavioural advertising, use it to profile you for marketing, or make decisions about you by automated means that have legal or similarly significant effects.
Who we share it with
- Our staff who need it to support and bill customers, under confidentiality duties.
- Our hosting provider, which runs the servers and databases CledgeDashboard uses.
- Our email delivery provider, to send sign-in details, verification codes and notifications.
- Payment processors (such as Paystack, Flutterwave, Hubtel or Stripe, as configured) when an online payment is made. Card details are entered on the processor's own page and are never stored by us.
- Content delivery networks that serve parts of the app such as style sheets and fonts; they receive your IP address, as any website you load does, but no account information.
- Authorities or other parties when the law requires it, to protect people's safety, or to establish or defend legal claims.
- A successor business if Cledge Solutions is reorganised or sold, under the same protections as this policy.
Each provider may use the information only to provide its service to us, under a written contract that requires it to keep the information confidential and secure.
International transfers
Our servers, databases and backups are hosted in France, in the European Union. Cledge Solutions is based in Ghana, and our staff and some of our providers may also process information in other countries. When personal information from the UK, the European Economic Area or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the security measures described below. You can ask us for a copy of the safeguards that apply.
How long we keep it
- Account and billing records are kept while the account is open and then for as long as tax and accounting law requires.
- Remembered ("trusted") browsers: 14 days. Signed-in sessions end after 10 minutes without activity.
- Security logs and backups are kept for a limited period and then deleted or overwritten in the normal cycle.
How we protect it
- All connections are encrypted (HTTPS), with strict transport security.
- Two-step verification is required on every account (an authenticator app); passwords are hashed and authenticator keys encrypted.
- One active session per account, and automatic sign-out after 10 minutes without activity (with a 2-minute warning).
- Role-based access, so people see only what their role needs; administrators cannot see passwords.
- Audit logs of important actions, protection against common web attacks, and regular security reviews.
No system is perfectly secure. If a personal-data breach is likely to put you at risk, we (or the customer) will tell you and the regulators as the law requires.
Your rights (UK, EU and Ghana)
Subject to the law, you have the right to:
- access the personal information held about you and get a copy;
- correct it if it is inaccurate or incomplete;
- delete it, or restrict how it is used, in some circumstances;
- object to uses based on legitimate interests;
- receive information you gave in a portable format;
- withdraw consent where something is based on your consent (such as live location sharing), without affecting earlier use.
Send requests to the us or to support@cledgesolutions.com. We will verify who you are and reply within one month (extendable by two more months for complex requests). You can complain to a data-protection authority: in the UK the Information Commissioner's Office (ico.org.uk); in the EU your local supervisory authority; in Ghana the Data Protection Commission (dataprotection.org.gh).
Your rights in the United States
In the last 12 months the categories of personal information handled were: identifiers and contact details, account log-in credentials, internet activity in the service (sign-in and audit records), commercial information (subscriptions and payments). They come from the our customers and you, and are used only for the purposes above. We do not sell or "share" personal information, and we use sensitive personal information only to provide the service, so there is nothing to opt out of; we also honour Global Privacy Control signals.
Depending on your state (for example California, Colorado, Connecticut, Virginia and others), you may have the right to know, access, correct and delete your personal information, to appeal a decision about your request, and not to be treated differently for using these rights. Where we act as a service provider, we will pass your request to the customer and help it respond. You or an authorised agent can make a request at support@cledgesolutions.com; we will verify the request before acting on it.
Cookies
CledgeDashboard uses only the cookies and browser storage it needs to work and to remember choices you make. We use no advertising or analytics cookies. See our Cookie Policy.
Changes to this policy
We may update this policy as the service or the law changes. The effective date above shows when it last changed, and we will tell account holders about important changes.
Contact us
Cledge Solutions · support@cledgesolutions.com · +233 203 222 172