Last Updated 8th July 2026- Rev 00 

    INTRODUCTION

    OceanLift Subsea Ghana LTD (“OceanLift”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of all individuals, including visitors, clients, suppliers, sub-contractors, job applicants, employees, and business partners who interact with us on our website (www.oceanliftsubsea.com). 

    This Privacy Policy describes how we process your Personal Data, the legal grounds on which we do so, your rights in relation to that Personal Data, and our commitment to processing your Personal Data fairly, lawfully, transparently, and securely, in accordance with the Data Protection Act, 2012 (Act 843) (“the Act”) and any other applicable data protection law.

    By accessing our website, you acknowledge that you have read and understood this Privacy Policy.

    DEFINITIONS

    The following terms have the meanings set out below wherever they are used in this Policy:

    Act

    Ghana’s Data Protection Act, 2012 (Act 843) 

    Data Subject

    Means an identified or identifiable natural person Who is the subject of Personal Data

    Personal Data

    Means data about an individual who can be identified, from the data, or from the data or other information in the possession of, or likely to come into the possession of the data controller;

    Processing

    Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, including collection, receipt, recording, organisation, structuring, collation, storage; adaptation or alteration, updating, retrieval, consultation, use, dissemination, disclosure by means of transmission; or otherwise making available, alignment or combination, merging, restriction, erasure, destruction, and/or degradation.

    Data Controller

    A person who either alone, jointly with other persons or in common with other persons or as a statutory duty determines the purposes for and the manner in which personal data is processed or is to be processed. 

    Data Processor

    Any person other than an employee of the data controller who processes the data on behalf of the data controller.

    Consent

    Any freely given, specific, and informed indication by a Data Subject agreeing to the Processing of their Personal Data, which may be withdrawn at any time.

    WHO WE ARE 

    OceanLift Subsea Ghana LTD is a company incorporated in Ghana, with its registered address at:

    Ground Floor, Atlantic Tower
    Airport City, Accra, Ghana
    GL-126-4836

    We are Africa’s emerging Engineering & Subsea Services company, established in 2018, operating across the Western Belt of Africa. For privacy-related matters, you may contact us at info@oceanliftsubsea.com  or +233 (0) 302 799 059.

    HOW DO WE OBTAIN YOUR PERSONAL DATA?

    We collect personal information in the following categories depending on your relationship with us. Where we collect your personal information indirectly from you, we will inform you, when we contact you, of where we obtained it. We collect Personal Data:

    • When you visit our website
    • When you contact us via our website contact form, email, or phone.
    • When you register or apply to become a supplier or contractor.
    • Through any other interaction you may have with us.

    COOKIES AND TRACKING TECHNOLOGIES 

    Our website (www.oceanliftsubsea.com) uses cookies and similar technologies to enhance your browsing experience, analyse website traffic, and support our digital operations.

    You may adjust your browser settings to refuse or delete cookies at any time. Please note that disabling certain cookies may affect the functionality of our website. 

    THE INFORMATION WE COLLECT 

    We only collect Personal Data that is necessary, relevant, and not excessive for the purpose of Processing. Depending on how you interact with our website, we may collect the following categories of Personal Data:

    • Identity and contact information, such as your name and email address 
    • Technical information, such as your IP address, device and browser information, and website usage data collected through cookies
    • Company registration details, and other supplier due diligence information, when you complete our supplier registration as a prospective corporate client, supplier, or contractor

    PURPOSE OF PROCESSING 

    The purposes for which we process your Personal Data include one or more of the following:

    • To provide you with information that you have requested or that we consider to be relevant to a service in which you have shown interest.
    • To assess prospective suppliers and take steps prior to entering into or performing a contract with you or the organisation you represent.
    • To ensure the security of our websites and underlying business infrastructure.
    • To analyse website usage and improve performance and functionality of our website.
    • To manage communications between you and us.

    LEGAL BASIS FOR PROCESSING 

    Where applicable data protection laws require us to have a legal basis for processing your personal data, we rely on the following grounds:

    • Contract performance — processing is necessary to enter into or fulfil a contract with you or your organisation.
    • Legal obligation — processing is required to comply with a legal requirement applicable to us.
    • Legitimate interests — processing is necessary for our legitimate business interests, such as improving our services, ensuring safety, and preventing fraud, provided these interests are not overridden by your rights.
    • Legitimate interests of the Data Subject- processing is necessary to purse a legitimate interest of yours, provided this is not overridden by your other rights and freedoms. 
    • Consent — where we rely on your consent (e.g., for marketing communications), you may withdraw that consent at any time.

    SHARING YOUR INFORMATION 

    We disclose Personal Data only where necessary, and only to the following categories of recipients:

    • Trusted third-party vendors and service providers who process Personal Data on our behalf, under contractual confidentiality and data protection obligations.
    • Our internal team members who need the information in the course of their roles to respond to a query or administer a contract or service we are providing to you.
    • Our subsidiaries and affiliated companies operating in Africa, where such disclosure is necessary for business administration, service delivery, contract management or other legitimate business purposes subject to the safeguard set out in section 10.
    • Government bodies, regulators, licensing authorities, or law enforcement agencies in Ghana and in the countries where we operate where required by law or in response to official requests made by such bodies in accordance with applicable law

    We do not sell Personal Data, and we do not share Personal Data with any other Third Party beyond the categories listed above.

    INTERNATIONAL DATA TRANSFERS 

    OceanLift operates across multiple African jurisdictions and, where necessary for its business operations, may transfer personal data between those countries. We shall take appropriate steps to ensure that any international transfer of personal data is subject to adequate safeguards, including contractual protections, to protect your rights.

    DATA RETENTION 

    We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, contractual obligations. Specific retention periods are determined by:

    • The nature and sensitivity of the data.
    • The legal and regulatory requirements of applicable jurisdictions.
    • The duration of our contractual relationship with you or your organisation.
    • Applicable limitation periods for legal claims.

    DATA SECURITY

    OceanLift implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

    • Access controls and authentication requirements for our IT systems.
    • Encryption of sensitive data in transit and at rest where applicable.
    • Confidentiality obligations in contracts with employees and third-party processors.
    • Periodic review of our data security policies and practices.
    • Data protection impact assessments for higher-risk processing activities.
    • Regular awareness on data protection obligations.

    While OceanLift takes reasonable steps to safeguard Personal Data, no method of data transmission over the internet is completely secure. Accordingly, we cannot guarantee absolute security of Personal Data. 

    Users are encouraged to access the website using secure connections and to take reasonable precautions to protect any information they choose to submit through the website.

    In the event of a data breach that is likely to result in significant harm, we will notify the Data Protection Commission of Ghana and affected Data Subjects in accordance with the Act and our obligations under applicable law. 

    DATA BREACH NOTIFICATION 

    In the event of a Personal Data breach involving unauthorised access to or acquisition of Personal Data, OceanLift shall respond promptly and in accordance with the Act. We will:

    • Notify affected Data Subjects 
    • Take immediate steps to contain, investigate, and remediate the breach.
    • Notify the Data Protection Commission of Ghana as soon as reasonably practicable.
    • Take appropriate measures to restore the integrity and security of our systems

    If you become aware of or reasonably suspect a data breach involving your Personal Data, please notify us promptly using the contact details in Section 18 (Contact Us).

    YOUR RIGHTS AS A DATA SUBJECT 

    Depending on the applicable data protection law in your jurisdiction, you may have the following rights in relation to your personal data:

    Right of access 

    You have the right to access the personal information that we hold about you. This is sometimes termed a ‘Data Subject Access Request’. We will ask for proof of identity and sufficient information about your interactions with us so that we can locate your personal information when you make such a request. If you want to exercise this right, please contact us at info@oceanliftsubsea.com. 

    Right to rectification and erasure

    Where information we hold about you is inaccurate, incomplete, or out of date, you may ask us to correct or update it at any time. You also have the right to object to further processing of your personal data where we do not have any legitimate or legal basis for processing your personal data. In certain circumstances, you may also ask us to delete your personal data. The right to erasure or destruction is not absolute and only applies in certain cases. If you would like to exercise this right, please contact us at info@oceanliftsubsea.com.

    Right to Data Portability

    You have the right to receive a copy of personal data you have provided to us in a structured, commonly used, machine-readable format, and to request that we transmit it to another data controller where technically feasible.

    Right to restriction

    In certain circumstances, you have the right to request that we restrict the Processing of your Personal Data — for example, where you contest the accuracy of the data, or where we no longer need the data but you require it for the establishment, exercise, or defence of legal claims. Where Processing is restricted, we will continue to store your data but will not otherwise process it without your consent, except as permitted by law.

    Right to object

    You have the right to object to our Processing of your Personal Data on grounds relating to your particular situation, including receiving direct marketing from us. For example, you may object to where we are Processing your Personal Data on the basis that it is necessary for our or a Third Party’s legitimate interest, or you may object if you believe there is no legal basis for us to continue Processing your Personal Data.

    Right to withdraw consent 

    Where we rely on your Consent, you have the right to withdraw it at any time, and we will cease Processing your Personal Data on that basis unless there is an alternative legal basis to continue. We will advise you if we intend to continue Processing your Personal Data in these circumstances.

    To exercise any of these rights, please contact us at info@oceanliftsubsea.com. We will respond to your request within the timeframe required by applicable law. We may request information reasonably necessary to verify your identity before processing your request. Please note that these rights are subject to applicable legal requirements, limitations and exceptions, including any applicable fees and costs permitted by law.

    CHILDREN’S PRIVACY

    Our website and services are directed at businesses and professionals operating in the energy and subsea industry. We do not knowingly collect or process Personal Data from individuals under the age of 18. If you believe we have inadvertently collected Personal Data relating to a minor, please contact us immediately using the details in the Contact Us section and we will take prompt steps to delete such data.

    THIRD-PARTY LINKS

    Our website may contain links to third-party websites, including our supplier registration form hosted on Asana and our LinkedIn company page. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal data. OceanLift is not responsible for the privacy practices, security or content of such external sites and does not endorse any information, services or products available through them.

    CHANGES TO THIS PRIVACY POLICY 

    We may update this Privacy Policy from time to time to reflect changes in our operations, legal obligations, or applicable data protection laws. When we make material changes, we will update the “Last Updated” date at the top of this document and, where appropriate, notify you by email or through a prominent notice on our website.

    We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

    CONTACT US 

    If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:

    OceanLift Subsea Ghana LTD

    Ground Floor, Atlantic Tower

    Airport City, Accra, Ghana |  GL-126-4836

    Email: info@oceanliftsubsea.com 

    Tel: +233 (0) 302 799 059

    Website: www.oceanliftsubsea.com