Privacy policy

This matters for knowing who to ask about what.

For this website — the pages you are reading and the demo request form — L'AINE Services Limited decides what is collected and why. We are the data controller.

Inside the platform, the employee, payroll and candidate records belong to the customer organisation that entered them. They decide what is held and for how long; we process it on their instructions. If you are an employee of one of our customers and want your record changed, ask your employer first — they control it, and they can change it themselves.

From website visitors: the details you type into the demo request form — company name, your name, work email, phone number if you give one, country, employee numbers, what you use today and anything you write in the message field.

From platform users: the email address and name attached to your login, your role, and a record of the organisation you belong to.

Held on behalf of customers: employee and candidate records — names, contact details, job and pay information, statutory identifiers such as SSNIT and TIN numbers, leave, training and document records. This is entered by the customer, not by us.

We do not sell personal data, and we do not share it for advertising.

Demo request details are used to respond to that request and to set up a workspace if you become a customer. Login details are used to authenticate you and to decide what you can reach. Customer records exist to deliver the service the customer is paying for — running payroll, meeting statutory obligations, and producing the compliance evidence their own clients and regulators ask for.

The database is Supabase (PostgreSQL), West EU region — Ireland. The application runs on Vercel. This means personal data collected in Ghana is stored outside Ghana, on infrastructure in the European Union, which applies its own data protection standards.

Every record carries the organisation it belongs to, and that separation is enforced by the database through row-level security rather than by application code. One customer cannot read another's rows, even if the application were asked to.

Access inside an organisation is limited by role — payroll staff, HR staff and general staff each reach only what their role requires. Traffic between your browser and the platform is encrypted. Passwords are never stored in readable form, and are never sent to you: invited users set their own.

Demo requests are kept while we are in conversation and for a reasonable period after, so we can pick a discussion back up.

Customer records are kept for as long as the organisation's account is open. After an account closes they are deleted or returned to the customer on request. Some payroll and tax records must be retained for longer where Ghanaian law requires it.

You are entitled to:

• ask whether we hold personal data about you, and get a copy of it;
• have inaccurate data corrected;
• ask for data to be deleted, where we are not required to keep it;
• object to particular uses of it;
• withdraw consent where our use of it rests on consent.

Ask through the contact page. If the data is held on behalf of your employer, we will pass the request to them, since it is theirs to act on.

If you are not satisfied with how we have handled a request, you may complain to the Data Protection Commission of Ghana, which supervises compliance with Act 843.

If this policy changes materially we will update the date at the top of this page and, for changes that affect customers, tell them directly.