Privacy Policy

 

Data Controller

Roy Company Ltd GH (Renalyx™ Ghana Distributor)

Effective Date

1 May 2026

Territory

Republic of Ghana

Data Protection Law

Data Protection Act, 2012 (Act 843), Ghana

Privacy Contact

privacy@roycompanygh.com

Policy Version

v1.0 — 2026

This Privacy Policy explains how Roy Company Ltd GH collects, uses, stores, shares, and protects personal information obtained from customers and visitors in connection with the supply and delivery of Renalyx™ products in Ghana. We are committed to safeguarding your privacy in accordance with the Data Protection Act, 2012 (Act 843) of Ghana.

  1. Who We Are

Roy Company Ltd GH is the authorised distributor of Renalyx™ in Ghana. Renalyx™ is a premium renal wellness supplement manufactured in the United Kingdom by Supplement Factory UK for Roy Company Ltd, and is sold under the Renalyx brand.

For the purposes of this policy, “we”, “us”, and “our” refer to Roy Company Ltd GH. “You” and “your” refer to any individual whose personal data we process, including customers, website visitors, and enquirers.

As the data controller for customer information collected in Ghana, Roy Company Ltd GH is responsible for ensuring that personal data is handled lawfully, fairly, and transparently.

  1. What Personal Data We Collect

We collect only the personal information necessary to process your orders, deliver your products, manage returns, and provide customer support. This may include:

2.1  Identity & Contact Information

  • Full name
  • Phone number (including WhatsApp number)
  • Email address
  • Delivery address (street, area, city, region)
  • Ghana Post GPS digital address (where provided)

2.2  Order & Transaction Information

  • Products ordered, quantities, and pricing
  • Order reference numbers
  • Payment method (e.g., Mobile Money network, cash on delivery)
  • Mobile Money transaction IDs (where applicable)
  • Delivery preferences and special instructions

2.3  Health-Related Disclosures (Voluntary)

Renalyx™ is a food supplement. We do not require health information to process your order. However, customers who voluntarily disclose health conditions (e.g., when seeking product suitability advice) should be aware that such information is treated as sensitive personal data under Act 843. It will never be shared without your explicit consent.

2.4  Communications Data

  • Records of calls, WhatsApp messages, emails, or social media messages between you and our team
  • Feedback, reviews, and complaints submitted to us

2.5  Technical & Usage Data (Website & Digital Channels)

  • IP address and browser type (when visiting renalyx.co.uk or our linked pages)
  • QR code scan data (product verification activity, anonymised)
  • Social media interaction data (likes, shares, messages via official channels)
  1. How We Collect Your Data

We collect personal data through the following means:

  • Directly from you when you place an order by phone, WhatsApp, or online
  • When you contact us for customer support, returns, or product enquiries
  • Through our website and digital order forms
  • Via our authorised retail partners when an order is placed on your behalf
  • When you voluntarily submit a review, testimonial, or feedback
  • Through product QR code verification (anonymised scan logs only)
  1. How We Use Your Personal Data

We use your personal data for the following purposes, each of which is grounded in a lawful basis under the Data Protection Act, 2012:

Purpose

Lawful Basis

Processing and fulfilling your order

Performance of a contract

Arranging delivery to your address

Performance of a contract

Processing payments and issuing receipts

Performance of a contract

Managing returns, exchanges, and refunds

Performance of a contract

Sending order confirmation and delivery updates

Performance of a contract

Responding to customer support enquiries

Legitimate interest

Preventing fraud and verifying product authenticity

Legitimate interest

Complying with legal and regulatory obligations

Legal obligation

Sending product updates or promotional offers (with consent)

Consent

Improving our services and products

Legitimate interest

We will never use your personal data for purposes unrelated to the above without first obtaining your explicit consent.

  1. Marketing Communications

We may contact you with information about Renalyx™ products, promotions, or wellness content only where you have given us your consent to do so. You may withdraw this consent at any time by:

  • Sending an opt-out message to privacy@roycompanygh.com
  • Replying “STOP” to any SMS or WhatsApp marketing message
  • Contacting our customer support team directly

We do not sell, rent, or trade your contact details to third-party marketers.

  1. Who We Share Your Data With

Roy Company Ltd GH does not sell personal data. We share your information only where necessary and with appropriate safeguards, specifically with:

6.1  Delivery & Logistics Partners

We share your name, phone number, and delivery address with our delivery agents and courier partners solely for the purpose of completing your order delivery. These partners are contractually obligated to protect your data and use it only for the delivery purpose.

6.2  Payment Processors

Where payments are made via Mobile Money (MTN, AirtelTigo, or Vodafone Cash), transaction details are processed through those respective platforms. We do not store full payment credentials on our systems.

6.3  Renalyx™ Brand Principal

Roy Company Ltd (UK), the brand principal of Renalyx™, may receive aggregated and anonymised sales data for the purpose of product development and market analysis. No identifiable personal data is shared without your explicit consent.

6.4  Legal & Regulatory Authorities

We may disclose personal data to the Ghana Data Protection Commission, law enforcement agencies, or regulatory bodies where required by law or where necessary to protect the rights, safety, or property of Roy Company Ltd GH, its customers, or the public.

  1. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

Data Type

Retention Period

Order & transaction records

6 years (statutory accounting requirement)

Delivery records

2 years from delivery date

Customer support communications

2 years from last interaction

Returns & refund records

6 years from transaction date

Marketing consent records

Until consent is withdrawn, plus 1 year

Anonymised analytics data

Indefinitely (no personal identifiers)

At the end of the applicable retention period, personal data is securely deleted or anonymised.

  1. How We Protect Your Data

Roy Company Ltd GH implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

  • Restricted access to personal data on a need-to-know basis for authorised staff only
  • Password protection and two-factor authentication on systems holding customer data
  • Encrypted digital communications where applicable
  • Physical security controls for any paper-based records
  • Regular review of data access logs and security practices

In the event of a data breach that is likely to affect your rights and freedoms, we will notify the Ghana Data Protection Commission and, where required, inform affected individuals without undue delay.

  1. Your Data Protection Rights

Under the Data Protection Act, 2012 (Act 843) of Ghana, you have the following rights in relation to your personal data:

Right of Access

You may request a copy of the personal data we hold about you.

Right to Correction

You may ask us to correct any inaccurate or incomplete data.

Right to Erasure

You may request deletion of your data where it is no longer needed.

Right to Object

You may object to processing based on legitimate interests or for marketing.

Right to Restrict Processing

You may request that we limit how we use your data in certain circumstances.

Right to Data Portability

You may request your data in a structured, machine-readable format.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at privacy@roycompanygh.com. We will respond to all verified requests within 21 days. We may need to verify your identity before processing your request.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ghana (www.dataprotection.org.gh).

  1. Children’s Privacy

Renalyx™ is a food supplement intended for adults aged 18 and over, as stated on the product label. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

If you believe a minor has submitted personal data to us, please contact us immediately at privacy@roycompanygh.com.

  1. Third-Party Websites & Links

Our communications and product packaging may contain links to third-party websites, including renalyx.co.uk (operated by Roy Company Ltd, UK) and mobile money platforms. This Privacy Policy applies only to data processed by Roy Company Ltd GH in Ghana.

We encourage you to read the privacy policies of any third-party sites you visit, as we are not responsible for their data practices.

  1. Cookies & Digital Tracking

Where Roy Company Ltd GH operates or links to a website or digital store, cookies or similar tracking technologies may be used to improve user experience and gather anonymised analytics. You will be informed of cookie use and given the opportunity to manage your preferences upon visiting any such platform.

QR code scans for product authentication at renalyx.co.uk generate anonymised log records only; they do not identify individual users without additional information.

  1. International Data Transfers

Roy Company Ltd GH is based in Ghana and processes customer data primarily within Ghana. In limited circumstances, aggregated or anonymised data may be shared with Roy Company Ltd (UK) as the brand principal. Any such transfer is conducted under appropriate safeguards consistent with Act 843 and applicable international data protection standards.

No individually identifiable personal data is transferred internationally without your explicit consent or a legal obligation to do so.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. The current version will always be available through our official channels. We will notify existing customers of material changes via SMS, email, or WhatsApp where contact information is held.

Continued use of our services after an update constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

  1. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our Privacy Officer:

Organisation

Roy Company Ltd GH

Role

Authorised Distributor — Renalyx™, Ghana

Privacy Contact Email

privacy@roycompanygh.com

Data Protection Authority

Data Protection Commission, Ghana

DPC Website

www.dataprotection.org.gh

Product Website

renalyx.co.uk