Colonial IT Services ("we", "us", "our") operates citsvc.com and C.I.T. ERP. This policy explains what personal data we collect, why, and what rights you have over it.
What we collect
When you sign up for a free trial: your name, company name, email address, phone number, a username and password, your chosen subdomain, and the IP address you signed up from (used only to prevent abuse of the signup form).
When you use the contact form: your name, company, email, phone number, and the message you send us.
When you browse the marketing site: we log which pages are viewed, the referring page, and any campaign parameters in the URL, so we can see how much traffic the site gets and where it comes from. This does not use cookies and does not identify you personally.
When you pay for a subscription: card and Mobile Money payments are processed directly by our payment partners (Paystack, Hubtel, or PaySwitch). We never see or store your card number.
Cookies
citsvc.com sets two functional cookies: a session cookie (keeps you logged in) and a CSRF cookie (a security measure required for any form submission). Neither is used for advertising or cross-site tracking, and we don't run any third-party analytics or advertising scripts on the marketing site.
Why we collect it
- To create and run your free trial or paid account
- To respond to enquiries submitted through the contact form
- To send service-related messages: welcome emails, payment receipts, trial and renewal reminders
- To prevent abuse of the signup form and keep the platform secure
- To understand how the marketing site is used, in aggregate
If you sign up for C.I.T. ERP
Once you're running a business on C.I.T. ERP, the customer, staff, financial, and other business records you enter belong to you. We act as your data processor for that information — we store and secure it, but we don't use it for our own purposes, and it is not covered by this policy in the same way your own signup details are. How you handle your own customers' or employees' data is between you and them.
Backups and retention
Your account data is backed up daily. Backups are retained for 30 days by default. Signup and enquiry records are kept for as long as your account is active, or as long as needed to respond to your enquiry.
Who we share data with
We share the minimum necessary data with:
- Payment gateways (Paystack, Hubtel, PaySwitch) — to process a payment you initiate
- Arkesel — to deliver SMS notifications you or your account trigger
- Meta (WhatsApp Business Platform) — to deliver WhatsApp notifications you or your account trigger
We do not sell your data to anyone.
Security
The site is served over HTTPS with HSTS enabled. Passwords are hashed, never stored in plain text. Access to production systems is restricted, and login attempts are rate-limited to prevent brute-force attacks.
Your rights
You can ask us to access, correct, or delete the personal data we hold about you by emailing [email protected]. If you're in Ghana, you also have rights under the Data Protection Act, 2012 (Act 843).
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page.
Contact
Questions about this policy: [email protected], or WhatsApp +233 26 234 6523. We're based in Accra, Ghana.