Privacy Policy

1. Who is responsible and how to contact us

Baffoe is the public-facing brand used on baffoes.com by Baffoe Consulting Management Company Limited. The registered operating entity identified for this website is Baffoe Consulting Management (Shanghai) Company Limited, Unified Social Credit Identifier / Registration Number 91310000MADYXLPLXY, registered in Lingang New Area Pilot Free Trade Zone, Shanghai, P.R. China.

Privacy enquiries and requests: [email protected], with “Privacy request” in the subject. You may also use the contact details on our Contact page. A separately identified branch, affiliate or contracting entity may be responsible for a particular engagement. We will identify that entity and any different processing arrangements when the engagement is agreed. Use of the shared brand does not make every affiliated entity responsible for every transaction.

2. Information you choose to provide

A business enquiry may include your name, business email, organisation, enquiry topic, message and subsequent correspondence. We use this information to understand your request, communicate with you, assess whether we can assist and prepare an appropriate scope. Please provide only information relevant to your request. The general enquiry form does not require a telephone number or accept document attachments.

Do not send passwords, payment-card details, identity documents, health information, trade secrets or other sensitive personal or client information through an initial enquiry. If a project requires confidential material, we will agree a suitable channel and responsibilities first. Provide another person’s information only when you are authorised to do so and have given any required notice.

3. Website, account and security information

Hosting, delivery and security systems can process IP addresses, browser and device information, timestamps, requested pages, referrers, errors and attempted access. These records help deliver the website, investigate faults, prevent abuse and protect accounts. Where an account or comment feature is available, it processes the information entered for that feature and associated access or moderation records. Account availability does not by itself mean that a consulting engagement has been accepted.

The website uses WordPress and supporting hosting, email, backup, security and website-management services. Installed services include Wordfence and Jetpack. Depending on the active feature, their providers may receive technical data needed to operate that service. This website is not an air-gapped or wholly offline environment.

4. Public calculator and downloaded reports

The current Global Trade & Logistics Planner performs its scenario calculations in your browser. Its calculation and report-generation code is designed not to submit the cargo values, quote inputs or optional report recipient details to Baffoe. That statement concerns those tool functions; the surrounding online website still loads scripts and datasets and generates normal hosting and security traffic.

Downloaded reports can contain the name, organisation, project reference and shipment information you entered. You control where you save or share them. Downloads are not automatically encrypted by the planner. Browser extensions, shared computers, backups and cloud-synchronised folders may affect their confidentiality. Use your device’s security controls and avoid inserting personal or sensitive data unless it is necessary.

Report choices and email: The planner offers summary and detailed outputs. Both retain material assumptions and limitations. Using the browser’s print/save function to create a PDF does not itself submit your calculation entries to Baffoe. The planner currently has no report-email delivery service. If you share a downloaded report using your own email or cloud service, that provider’s handling and your chosen recipients apply. The business contact form is a separate service: its protected submission sends an enquiry to [email protected] and an acknowledgement, including a copy of the enquiry, to the email address you supply. Use an address you control and check it for accuracy.

5. Purposes and legal grounds

We process information to respond to enquiries; take requested steps before an engagement; administer agreed services and accounts; maintain and secure the website; resolve complaints; and meet applicable legal obligations. Where consent is legally required, including for particular optional technologies or communications, it must be obtained for that purpose and may be withdrawn.

The legal ground depends on the activity and the law that applies. It may be your consent, steps you request before a contract, performance of a contract, a legal obligation, or—where the relevant law recognises it—a legitimate interest in proportionate business communication and security balanced against your rights. We do not treat visiting the website or accepting its terms as blanket consent to unrelated processing. A business enquiry is not a marketing subscription.

6. Service providers and disclosure

Information may be available to authorised Baffoe personnel and to providers supporting hosting, email delivery, security, spam prevention, backups and website functionality, to the extent required for those functions. Information may also be disclosed where required by law or a valid regulatory process, or where necessary and lawful to establish, exercise or defend legal rights. A project-specific disclosure to a supplier or other professional should be addressed in the engagement arrangements.

The public business enquiry form uses Cloudflare Turnstile for anti-bot checks. Where an anti-bot challenge such as Cloudflare Turnstile or Google reCAPTCHA is displayed or loaded in another website feature, the relevant provider processes technical signals to identify abuse under its own service documentation and privacy notice. External social links and embedded third-party features are subject to those providers’ practices. See Cloudflare’s privacy notice, Google’s privacy notice, Automattic’s privacy notice and Wordfence’s privacy notice where relevant.

7. Cookies and external features

WordPress and supporting services may use cookies or similar storage for sign-in, security, preferences and site operation. Translation, embedded content, analytics or other optional features may have additional data flows. You can manage cookies through your browser; blocking essential cookies can prevent account or security features from working. Deleting a cookie does not delete information already held by a service provider.

Where an optional feature requires consent under applicable law, that consent must be obtained before the relevant processing. This notice is information about processing; it is not itself a cookie-consent mechanism. When following a social-media link, the destination service applies its own privacy notice.

8. International handling

Baffoe serves international business enquiries. Depending on the relevant entity and service providers, information may be handled in China or other countries, whose laws may differ from those where you live. International availability of this website is not a waiver of your rights or blanket authorisation for a cross-border transfer. Any transfer requiring a specific legal mechanism, assessment, notice or separate consent must meet that requirement. Contact us before providing information subject to localisation, professional secrecy or other transfer restrictions.

9. Retention and deletion

We retain information for the period needed for the purpose for which it was collected, taking account of enquiry follow-up, an active engagement, applicable record-keeping duties, security investigation and the establishment or defence of legal claims. Different records therefore have different retention needs. We do not promise a single universal deletion period. You may ask which criteria apply to a particular record.

The revised general enquiry form is configured not to create an additional message copy in the Flamingo message-storage plugin. Email correspondence and records made by email delivery, hosting, security and backup systems can still exist; older form records may also remain. A deletion request must therefore consider those systems and any lawful retention requirement. Backup copies may remain until their normal replacement cycle and should not be restored for unrelated use.

10. Your rights and complaints

Depending on the law and circumstances, you may have rights to request access, correction, erasure, restriction, a copy or portability of your information, to object to certain processing, and to withdraw consent without affecting earlier lawful processing. These rights are subject to applicable conditions and exceptions. We may need proportionate verification before acting on a request, but please do not send identity documents unless we explain why they are necessary and arrange an appropriate method.

Write to [email protected] with enough detail to identify your request. We will handle it within the period required by the law that applies. You may also complain to the competent data-protection authority, including Ghana’s Data Protection Commission, a competent authority in China, or the authority in your jurisdiction where applicable. Contacting Baffoe first does not remove a right to approach an authority.

Regional application: Where applicable, this notice is interpreted alongside the EU GDPR, UK GDPR and Data Protection Act 2018 as amended, China’s Personal Information Protection Law, Ghana’s Data Protection Act 2012 (Act 843), and applicable United States federal and state privacy and consumer-protection laws. The applicable law, its scope and exemptions determine the rights and duties in a particular case; listing a law does not claim certification or make every law apply to every visitor. Where relevant law provides them, requests may include a copy of personal information, correction, deletion, portability, restriction or objection, withdrawal of consent, and an appeal or complaint. Applicable US state rights may also address sale, sharing or targeted advertising. Exercise of a protected right must not result in unlawful discrimination. No website term waives mandatory privacy rights.

Further information: European Commission · UK ICO · China PIPL · Ghana Data Protection Commission · US FTC · California privacy rights.

11. Safeguards, children and changes

We use access controls and technical and organisational safeguards appropriate to the systems we operate. No website, email system or device can be guaranteed completely secure. Please report suspected misuse or a security concern to [email protected] without sending credentials or attempting to access other people’s information.

This website is intended for business and professional audiences, not for children. Please contact us if you believe a child has supplied personal information inappropriately. We may update this notice as services or obligations change; the date above identifies this version. Material changes affecting processing will be communicated as required by applicable law.