Data Controller | Roy Company Ltd GH (Renalyx™ Ghana Distributor) |
Effective Date | 1 May 2026 |
Territory | Republic of Ghana |
Data Protection Law | Data Protection Act, 2012 (Act 843), Ghana |
Privacy Contact | privacy@roycompanygh.com |
Policy Version | v1.0 — 2026 |
This Privacy Policy explains how Roy Company Ltd GH collects, uses, stores, shares, and protects personal information obtained from customers and visitors in connection with the supply and delivery of Renalyx™ products in Ghana. We are committed to safeguarding your privacy in accordance with the Data Protection Act, 2012 (Act 843) of Ghana.
- Who We Are
Roy Company Ltd GH is the authorised distributor of Renalyx™ in Ghana. Renalyx™ is a premium renal wellness supplement manufactured in the United Kingdom by Supplement Factory UK for Roy Company Ltd, and is sold under the Renalyx brand.
For the purposes of this policy, “we”, “us”, and “our” refer to Roy Company Ltd GH. “You” and “your” refer to any individual whose personal data we process, including customers, website visitors, and enquirers.
As the data controller for customer information collected in Ghana, Roy Company Ltd GH is responsible for ensuring that personal data is handled lawfully, fairly, and transparently.
- What Personal Data We Collect
We collect only the personal information necessary to process your orders, deliver your products, manage returns, and provide customer support. This may include:
2.1 Identity & Contact Information
- Full name
- Phone number (including WhatsApp number)
- Email address
- Delivery address (street, area, city, region)
- Ghana Post GPS digital address (where provided)
2.2 Order & Transaction Information
- Products ordered, quantities, and pricing
- Order reference numbers
- Payment method (e.g., Mobile Money network, cash on delivery)
- Mobile Money transaction IDs (where applicable)
- Delivery preferences and special instructions
2.3 Health-Related Disclosures (Voluntary)
Renalyx™ is a food supplement. We do not require health information to process your order. However, customers who voluntarily disclose health conditions (e.g., when seeking product suitability advice) should be aware that such information is treated as sensitive personal data under Act 843. It will never be shared without your explicit consent.
2.4 Communications Data
- Records of calls, WhatsApp messages, emails, or social media messages between you and our team
- Feedback, reviews, and complaints submitted to us
2.5 Technical & Usage Data (Website & Digital Channels)
- IP address and browser type (when visiting renalyx.co.uk or our linked pages)
- QR code scan data (product verification activity, anonymised)
- Social media interaction data (likes, shares, messages via official channels)
- How We Collect Your Data
We collect personal data through the following means:
- Directly from you when you place an order by phone, WhatsApp, or online
- When you contact us for customer support, returns, or product enquiries
- Through our website and digital order forms
- Via our authorised retail partners when an order is placed on your behalf
- When you voluntarily submit a review, testimonial, or feedback
- Through product QR code verification (anonymised scan logs only)
- How We Use Your Personal Data
We use your personal data for the following purposes, each of which is grounded in a lawful basis under the Data Protection Act, 2012:
Purpose | Lawful Basis |
Processing and fulfilling your order | Performance of a contract |
Arranging delivery to your address | Performance of a contract |
Processing payments and issuing receipts | Performance of a contract |
Managing returns, exchanges, and refunds | Performance of a contract |
Sending order confirmation and delivery updates | Performance of a contract |
Responding to customer support enquiries | Legitimate interest |
Preventing fraud and verifying product authenticity | Legitimate interest |
Complying with legal and regulatory obligations | Legal obligation |
Sending product updates or promotional offers (with consent) | Consent |
Improving our services and products | Legitimate interest |
We will never use your personal data for purposes unrelated to the above without first obtaining your explicit consent.
- Marketing Communications
We may contact you with information about Renalyx™ products, promotions, or wellness content only where you have given us your consent to do so. You may withdraw this consent at any time by:
- Sending an opt-out message to privacy@roycompanygh.com
- Replying “STOP” to any SMS or WhatsApp marketing message
- Contacting our customer support team directly
We do not sell, rent, or trade your contact details to third-party marketers.
- Who We Share Your Data With
Roy Company Ltd GH does not sell personal data. We share your information only where necessary and with appropriate safeguards, specifically with:
6.1 Delivery & Logistics Partners
We share your name, phone number, and delivery address with our delivery agents and courier partners solely for the purpose of completing your order delivery. These partners are contractually obligated to protect your data and use it only for the delivery purpose.
6.2 Payment Processors
Where payments are made via Mobile Money (MTN, AirtelTigo, or Vodafone Cash), transaction details are processed through those respective platforms. We do not store full payment credentials on our systems.
6.3 Renalyx™ Brand Principal
Roy Company Ltd (UK), the brand principal of Renalyx™, may receive aggregated and anonymised sales data for the purpose of product development and market analysis. No identifiable personal data is shared without your explicit consent.
6.4 Legal & Regulatory Authorities
We may disclose personal data to the Ghana Data Protection Commission, law enforcement agencies, or regulatory bodies where required by law or where necessary to protect the rights, safety, or property of Roy Company Ltd GH, its customers, or the public.
- How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:
Data Type | Retention Period |
Order & transaction records | 6 years (statutory accounting requirement) |
Delivery records | 2 years from delivery date |
Customer support communications | 2 years from last interaction |
Returns & refund records | 6 years from transaction date |
Marketing consent records | Until consent is withdrawn, plus 1 year |
Anonymised analytics data | Indefinitely (no personal identifiers) |
At the end of the applicable retention period, personal data is securely deleted or anonymised.
- How We Protect Your Data
Roy Company Ltd GH implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Restricted access to personal data on a need-to-know basis for authorised staff only
- Password protection and two-factor authentication on systems holding customer data
- Encrypted digital communications where applicable
- Physical security controls for any paper-based records
- Regular review of data access logs and security practices
In the event of a data breach that is likely to affect your rights and freedoms, we will notify the Ghana Data Protection Commission and, where required, inform affected individuals without undue delay.
- Your Data Protection Rights
Under the Data Protection Act, 2012 (Act 843) of Ghana, you have the following rights in relation to your personal data:
Right of Access | You may request a copy of the personal data we hold about you. |
Right to Correction | You may ask us to correct any inaccurate or incomplete data. |
Right to Erasure | You may request deletion of your data where it is no longer needed. |
Right to Object | You may object to processing based on legitimate interests or for marketing. |
Right to Restrict Processing | You may request that we limit how we use your data in certain circumstances. |
Right to Data Portability | You may request your data in a structured, machine-readable format. |
Right to Withdraw Consent | Where processing is based on consent, you may withdraw it at any time. |
To exercise any of these rights, please contact us at privacy@roycompanygh.com. We will respond to all verified requests within 21 days. We may need to verify your identity before processing your request.
If you are dissatisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ghana (www.dataprotection.org.gh).
- Children’s Privacy
Renalyx™ is a food supplement intended for adults aged 18 and over, as stated on the product label. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.
If you believe a minor has submitted personal data to us, please contact us immediately at privacy@roycompanygh.com.
- Third-Party Websites & Links
Our communications and product packaging may contain links to third-party websites, including renalyx.co.uk (operated by Roy Company Ltd, UK) and mobile money platforms. This Privacy Policy applies only to data processed by Roy Company Ltd GH in Ghana.
We encourage you to read the privacy policies of any third-party sites you visit, as we are not responsible for their data practices.
- Cookies & Digital Tracking
Where Roy Company Ltd GH operates or links to a website or digital store, cookies or similar tracking technologies may be used to improve user experience and gather anonymised analytics. You will be informed of cookie use and given the opportunity to manage your preferences upon visiting any such platform.
QR code scans for product authentication at renalyx.co.uk generate anonymised log records only; they do not identify individual users without additional information.
- International Data Transfers
Roy Company Ltd GH is based in Ghana and processes customer data primarily within Ghana. In limited circumstances, aggregated or anonymised data may be shared with Roy Company Ltd (UK) as the brand principal. Any such transfer is conducted under appropriate safeguards consistent with Act 843 and applicable international data protection standards.
No individually identifiable personal data is transferred internationally without your explicit consent or a legal obligation to do so.
- Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. The current version will always be available through our official channels. We will notify existing customers of material changes via SMS, email, or WhatsApp where contact information is held.
Continued use of our services after an update constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.
- Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our Privacy Officer:
Organisation | Roy Company Ltd GH |
Role | Authorised Distributor — Renalyx™, Ghana |
Privacy Contact Email | privacy@roycompanygh.com |
Data Protection Authority | Data Protection Commission, Ghana |
DPC Website | www.dataprotection.org.gh |
Product Website | renalyx.co.uk |