Ordift Studios Enterprise Legal Series (OSELS)

Privacy Policy

OS-LGL-001 · Version 1.2 · Effective 5 August 2026

Document Control

Status
Approved
Classification
Public
Last Updated
4 August 2026
Review Cycle
Every 12 Months or Earlier if Required
Document Owner
Ordift Studios
Prepared By
Ordift Studios
Approved By
Management
Related Documents
  • OS-LGL-000 Master Definitions Register
  • OS-LGL-002 Cookie Policy
  • OS-LGL-003 Website Terms of Use
  • OS-LGL-004 Master Booking Terms & Conditions
  • Future Intellectual Property Policy
  • Future AI & Digital Workflow Policy

Change Log

VersionDateDescriptionAuthor
1.05 August 2026Initial approved publication.Ordift Studios
1.14 August 2026Added standing Appendices (Interpretation & Severability, Accessibility Commitment, Contact Escalation Procedure, Cross-Document Hierarchy); linked defined terms to the Definitions section throughout; reframed Section 2 to reference the Master Definitions Register (OS-LGL-000); introduced a running change log in place of a single revision row. No changes to the substantive privacy-practice wording approved in Version 1.0.Ordift Studios
1.24 August 2026Refactored Appendices A–D into shared Enterprise Legal Series boilerplate (applied automatically to every document, not duplicated per document); added Appendix E (Jurisdiction-Specific Data Protection Addendum), Appendix F (Government and Law Enforcement Requests), and Appendix G (Data Breach Response Summary), drafted using deliberately conservative, non-specific language — no certifications, registrations, or internal procedures are asserted. No changes to the substantive privacy-practice wording approved in Version 1.0.Ordift Studios

This document forms part of the Ordift Studios Enterprise Legal Series. Only the latest approved version published by Ordift Studios shall be regarded as the official version. Printed or downloaded copies are considered uncontrolled copies unless otherwise marked.

1. Introduction

Welcome to Ordift Studios.

Ordift Studios (“Ordift Studios”, “we”, “our”, or “us”) is a multidisciplinary creative studio providing photography, videography, creative production, creative direction, digital media, workshops, consultancy, educational programmes, branding, content production, and related creative services to individuals, businesses, organisations, and institutions in Ghana, Qatar, and internationally.

This Privacy Policy explains how Ordift Studios collects, uses, stores, protects, processes, transfers, and otherwise handles personal information whenever you:

Our objective is not only to comply with applicable privacy requirements but also to maintain the trust placed in us by every client, collaborator, student, supplier, employee, volunteer, contractor, and visitor.

By accessing our website or using our services, you acknowledge that you have read, understood, and accepted this Privacy Policy.

2. Definitions

For the purposes of this Privacy Policy:

Terms defined below are specific to this document. Ordift Studios maintains a Master Definitions Register (OS-LGL-000) across the Enterprise Legal Series; where a term used in this Privacy Policy is not defined below, its meaning in the Master Definitions Register applies.

“Personal Information”
means any information relating to an identified or identifiable individual.
“Client”
means any individual, organization, company, institution, or representative who enquires about or receives services from Ordift Studios.
“Creative Works”
means photographs, videos, audio recordings, graphics, designs, edited media, production files, digital assets, documents, and other materials created during the provision of services.
“Services”
refers to all services provided by Ordift Studios, including photography, videography, creative direction, editing, consultancy, education, workshops, digital products, branding, and any future services offered by the business.
“Website”
means the official Ordift Studios website and any authorized subdomains, client portals, booking systems, educational platforms, mobile applications, or digital services operated by Ordift Studios.
“Third-Party Provider”
means any trusted external organization engaged to assist Ordift Studios in providing its services, including cloud hosting providers, payment processors, communication platforms, analytics providers, scheduling systems, and similar service providers.
“Applicable Law”
means the laws, regulations, and legal requirements that govern the processing of personal information in the jurisdictions relevant to the services provided by Ordift Studios.

3. Who We Are

Ordift Studios (“Ordift Studios”, “we”, “our”, or “us”) is a creative media and digital services company providing professional photography, videography, creative direction, branding, digital production, consultancy, education, media training, and related creative solutions.

Our services are offered to private individuals, businesses, organizations, educational institutions, government entities, churches, non-profit organizations, and commercial clients within Ghana, Qatar, and other jurisdictions where our services may lawfully be provided.

As our business evolves, we may introduce additional services, platforms, technologies, or business divisions. Unless expressly stated otherwise, this Privacy Policy applies to all such services.

Our official contact details are provided in the Contact Information section of this document.

4. Scope of this Privacy Policy

This Privacy Policy governs the collection, use, storage, disclosure, transfer, retention, and protection of personal information obtained through our business operations.

It applies whenever you:

This Privacy Policy also applies to information collected through both online and offline interactions, including information obtained during consultations, production meetings, events, commercial assignments, educational programmes, exhibitions, networking engagements, and other legitimate business activities.

Unless expressly stated, this Privacy Policy does not apply to third-party websites, applications, platforms, or services that are not owned or controlled by Ordift Studios, even where links to such services are provided through our website.

5. Information We Collect

To provide our services effectively, we may collect various categories of personal and business information depending on the nature of your interaction with us.

5.1. Personal Identification Information

This may include:

5.2. Contact Information

This may include:

5.3. Booking and Client Information

When engaging our services, we may collect information relating to:

5.4. Payment Information

Where applicable, we may collect information necessary to process payments, including:

Ordift Studios does not store complete payment card information on its own systems. Payments are processed through trusted third-party payment providers operating under their own privacy and security standards.

5.5. Media and Creative Content

Depending on the services requested, we may collect or create:

Such materials may include identifiable individuals and therefore may constitute personal information under applicable privacy laws.

5.6. Technical Information

When you use our website or digital platforms, certain technical information may be collected automatically, including:

5.7. Cookies and Similar Technologies

We use cookies and similar technologies to:

Further details are provided in our Cookie Policy (OS-LGL-002).

5.8. Communications

We retain records of communications exchanged with Ordift Studios, including:

5.9. Information Provided Voluntarily

You may voluntarily provide additional information to us during enquiries, consultations, interviews, applications, workshops, collaborative projects, competitions, educational programmes, surveys, or testimonials.

Providing such information is entirely voluntary unless required to fulfill a contractual or legal obligation.

6. How We Collect Information

Ordift Studios collects personal information through lawful, transparent, and fair means.

Information may be collected:

Directly from you

Including when you:

Automatically

Through cookies, analytics technologies, server logs, website functionality, and similar digital technologies used to operate and improve our online services.

Through Third Parties

Where legally permitted, we may receive information from trusted third-party providers, including:

Where personal information is received from third parties, we will process it in accordance with this Privacy Policy and applicable laws.

7. How We Use Your Information

Ordift Studios processes personal information only for legitimate business purposes and in accordance with applicable laws. The information we collect enables us to deliver high-quality creative services, maintain effective communication, improve our operations, and fulfil our legal and contractual obligations.

Depending on your interaction with us, we may use your information for one or more of the following purposes.

7.1. Service Delivery

We use personal information to:

7.2. Communication

We use your information to communicate with you regarding:

Communication may occur through email, telephone, SMS, WhatsApp, client portals, video conferencing platforms, or other authorised communication channels.

7.3. Business Administration

Personal information may also be processed to:

7.4. Website Improvement

Information collected through our website may be used to:

7.5. Marketing and Business Development

Where permitted by law or with your consent where required, we may use your information to:

You may unsubscribe from marketing communications at any time without affecting communications necessary for service delivery.

7.6. Security and Risk Management

We process personal information to:

7.7. Research, Analytics, and Service Development

We may analyze information to:

Where reasonably possible, information used for analytics will be aggregated or anonymized.

8.1. Contractual Necessity

Processing is necessary to:

8.4. Legitimate Interests

Ordift Studios may process information where necessary for legitimate business interests, provided those interests do not override your fundamental rights and freedoms.

Legitimate interests may include:

9. Sharing Your Information

Ordift Studios values the confidentiality of personal information.

We do not sell personal information to third parties.

We only disclose information where necessary to provide our services, comply with legal obligations, protect legitimate interests, or where you have authorised us to do so.

Information may be shared with the following categories of recipients.

9.1. Service Providers

Trusted third-party providers may receive limited information where necessary to support our operations, including providers of:

All such providers are expected to process information only for authorised purposes and maintain appropriate security measures.

9.2. Professional Advisers

Information may be disclosed where necessary to our:

provided such disclosure is required for legitimate business purposes and is subject to appropriate confidentiality obligations.

9.4. Business Transactions

If Ordift Studios undergoes a merger, acquisition, restructuring, investment, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction, subject to applicable legal safeguards.

10. International Data Transfers

Ordift Studios operates internationally and may work with clients, suppliers, contractors, service providers, and technology platforms located in different countries.

As a result, personal information may be transferred to or processed in jurisdictions outside your country of residence.

Where international transfers occur, we take reasonable steps to ensure that appropriate safeguards are implemented, including:

While we strive to protect personal information regardless of where it is processed, data protection laws may differ between jurisdictions. Ordift Studios will take reasonable measures to ensure that your information continues to receive an appropriate level of protection consistent with this Privacy Policy.

11. Data Security

Ordift Studios is committed to protecting the confidentiality, integrity, and availability of the personal information entrusted to us. We implement appropriate technical, administrative, and organizational measures designed to safeguard personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

Our security measures may include, where appropriate:

While we strive to maintain industry-appropriate safeguards, no method of transmitting information over the internet or storing electronic data can be guaranteed to be completely secure. Accordingly, Ordift Studios cannot guarantee absolute security but will continue to take reasonable steps to minimize risk and respond promptly to any identified vulnerabilities.

Where required by applicable law, we will notify affected individuals and relevant authorities of reportable personal data breaches within the prescribed legal timeframes.

12. Data Retention

Ordift Studios retains personal information only for as long as it is reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with contractual obligations, satisfy legal or regulatory requirements, resolve disputes, enforce our agreements, or protect our legitimate business interests.

The retention period for different categories of information may vary depending on the nature of the services provided and applicable legal requirements.

Examples include:

Information CategoryTypical Retention Purpose
Client enquiriesCustomer service and follow-up
Booking recordsContract administration and accounting
Invoices and financial recordsTaxation and financial reporting
Contracts and agreementsLegal compliance and dispute resolution
Creative project filesClient delivery, revisions, archival, and portfolio management (subject to applicable agreements)
Website analyticsWebsite performance analysis and service improvement
Marketing preferencesUntil consent is withdrawn or communications are no longer relevant

Where information is no longer required, Ordift Studios will securely delete, anonymise, or otherwise dispose of it using reasonable methods appropriate to the nature of the information.

Certain records may be retained for longer periods where required by law, regulatory obligations, insurance requirements, litigation, or legitimate business purposes.

13. Your Privacy Rights

Subject to applicable law and any lawful limitations, you may have one or more of the following rights regarding your personal information.

These rights may include the right to:

Ordift Studios will consider and respond to privacy requests within a reasonable period and in accordance with applicable legal requirements.

To protect your privacy, we may request additional information to verify your identity before fulfilling certain requests.

Some requests may be limited where continued processing is required to comply with legal obligations, fulfil contractual commitments, establish or defend legal claims, or protect the rights and legitimate interests of Ordift Studios or others.

14. Marketing Communications

Ordift Studios may periodically communicate with clients, subscribers, and interested individuals regarding:

Where required by law, such communications will only be sent with your consent or another lawful basis for processing.

You may opt out of receiving marketing communications at any time by:

Please note that opting out of marketing communications does not prevent us from sending service-related communications necessary to fulfil contractual obligations, respond to enquiries, administer bookings, or comply with legal requirements.

15. Photography, Videography & Creative Content

As a creative media company, Ordift Studios regularly creates, processes, stores, and delivers photographs, videos, audio recordings, digital artwork, and other creative works that may contain personal information or identifiable individuals.

We recognise the unique privacy considerations associated with creative productions and are committed to handling such materials responsibly.

15.1. Service Delivery

Creative content is collected and processed primarily for the purpose of delivering the services requested by our clients.

This may include planning, production, editing, post-production, delivery, archiving, quality assurance, and future client-requested revisions.

15.2. Portfolio and Promotional Use

Unless otherwise agreed in writing or restricted by contract, applicable law, or the nature of the assignment, Ordift Studios may request permission to use selected completed works for:

Where consent is required, we will seek it before using identifiable client content for these purposes. Clients may decline such requests without affecting the quality or availability of our services.

15.3. Sensitive Assignments

Ordift Studios recognizes that certain assignments involve heightened privacy expectations, including but not limited to:

Additional confidentiality measures may be agreed upon for such projects through separate contractual terms or non-disclosure agreements where appropriate.

15.4. Intellectual Property

Ownership, licensing, usage rights, and copyright relating to creative works are governed by the applicable service agreement, licensing terms, or other contractual documents entered into with the client. Nothing in this Privacy Policy alters those contractual rights or obligations.

16. Artificial Intelligence & Digital Workflow

Ordift Studios may utilize artificial intelligence (“AI”) and other advanced digital technologies to enhance the efficiency, quality, and consistency of certain business and creative processes.

Examples may include:

AI technologies are used as assistive tools under human oversight and are not intended to replace professional creative judgement.

Where third-party AI or cloud-based services are used, Ordift Studios will make reasonable efforts to use reputable providers that maintain appropriate privacy and security standards.

We do not intentionally use client materials to train publicly available AI models unless:

Where appropriate, clients may request additional information regarding the use of AI-assisted workflows in connection with their projects.

17. Children’s Privacy

Ordift Studios recognizes the importance of protecting the privacy of children and young people.

Our website and general services are not directed specifically at children, and we do not knowingly collect personal information directly from children except where such collection is necessary for the provision of a requested service and is authorised by a parent, legal guardian, school, organisation, or other person with lawful authority.

Where our services involve children—including family portraits, school photography, youth programme, competitions, workshops, performances, sporting events, or similar assignments—we expect the client or organizing party to ensure that all necessary permissions and consents have been obtained before the collection or creation of personal information or creative content.

Where required by applicable law or by the nature of the assignment, Ordift Studios may request written consent from a parent or legal guardian before processing or using identifiable images or information relating to a child.

If we become aware that personal information relating to a child has been collected in a manner inconsistent with applicable legal requirements, we will take reasonable steps to investigate the matter and, where appropriate, delete the information or restrict its processing.

Parents and legal guardians who have questions regarding the processing of a child’s personal information may contact us using the details provided in this Privacy Policy.

18. Changes to this Privacy Policy

Ordift Studios may update this Privacy Policy from time to time to reflect:

When material changes are made, we will take reasonable steps to notify users where appropriate. Notification methods may include updates published on our website, client portals, email communications, or other suitable channels.

The “Last Updated” date shown in the Document Control section will indicate the most recent revision.

We encourage users to review this Privacy Policy periodically to remain informed about how Ordift Studios protects personal information.

Continued use of our website or services after an updated version becomes effective constitutes acceptance of the revised Privacy Policy to the extent permitted by applicable law.

19. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws applicable to the jurisdiction identified in the relevant client agreement, service contract, or applicable terms governing the relationship between Ordift Studios and the client.

Where services are provided across multiple jurisdictions, Ordift Studios will endeavor to comply with applicable privacy and data protection laws relevant to the particular engagement, taking into account the location of the client, the nature of the services provided, and any contractual obligations agreed between the parties.

Nothing in this Privacy Policy limits any rights or protections that may be available to individuals under mandatory provisions of applicable law.

20. Contact Information

Questions, requests, or concerns relating to this Privacy Policy or the processing of personal information may be directed to:

Ordift Studios

Privacy & Data Protection Contact

Email: matetey@ordiftghana.com

Website: www.ordiftstudios.com

Telephone:

Business enquiries submitted through our official website or authorized communication channels will be directed to the appropriate member of our team for review and response.

Where applicable, requests relating to access, correction, deletion, restriction, objection, or other privacy rights should include sufficient information to enable us to verify the identity of the requester and process the request appropriately.

22. Controlled Document Notice

This document forms part of the Ordift Studios Enterprise Legal Series and is issued as a controlled corporate publication.

The current approved version is identified by the Document Code, Version Number, and Effective Date shown in the Document Control section.

Printed, downloaded, or locally stored copies are considered uncontrolled copies unless expressly identified otherwise by Ordift Studios.

Ordift Studios reserves the right to amend, replace, or withdraw this document at any time in accordance with its document governance procedures.

The latest approved version will always be made available through the official Ordift Studios website or other authorized publication channels.

Appendix — Appendices

The following appendices apply as standing provisions across the Ordift Studios Enterprise Legal Series and are incorporated into this document.

Appendix A — Interpretation and Severability

If any provision of this document is found to be invalid, unlawful, or unenforceable, the remaining provisions will continue in full force and effect to the fullest extent permitted by law.

Appendix B — Accessibility Commitment

Ordift Studios will make reasonable efforts to provide key legal documents in accessible formats upon request, where practicable.

Appendix C — Contact Escalation Procedure

Privacy and legal enquiries should follow a documented escalation process to ensure timely handling, identity verification where appropriate, and consistent record-keeping.

Enquiries may be directed to Ordift Studios using the contact details provided in this document.

Appendix D — Cross-Document Hierarchy

Each Ordift Studios publication will clearly state its relationship with other Ordift Studios legal documents. Where a conflict exists, the more specific agreement governing a particular service or engagement will prevail to the extent of the inconsistency.

Appendix E — Jurisdiction-Specific Data Protection Addendum

Ordift Studios provides services to clients in multiple jurisdictions, including Ghana and Qatar, and may process personal information subject to the data protection laws of those and other jurisdictions in which it operates or provides services.

Where applicable, Ordift Studios aims to process personal information in a manner consistent with relevant data protection legislation, which may include Ghana's Data Protection Act, Qatar's Personal Data Privacy Protection Law, and, where applicable to a particular client or engagement, the General Data Protection Regulation (GDPR) of the European Union.

This Appendix is a general statement of approach and does not constitute a representation of certification, accreditation, or registration under any specific law, and does not limit or expand any rights individuals may have under mandatory provisions of applicable law. Whether, and to what extent, a particular law applies depends on the nature of the personal information processed, the parties involved, and the jurisdiction in which processing occurs, and is assessed on a case-by-case basis.

Appendix F — Government and Law Enforcement Requests

Ordift Studios responds only to lawful requests for information from courts, regulators, or other competent public authorities, and limits any resulting disclosure to what is legally required.

Where legally permitted, Ordift Studios will take reasonable steps to verify that a request is valid before responding to it.

Appendix G — Data Breach Response Summary

In the event of a suspected or confirmed personal data breach, Ordift Studios is committed to investigating the matter, taking reasonable steps to contain and remediate the breach, and notifying affected individuals and/or the relevant regulatory authorities where required by applicable law.

This Appendix is a summary of Ordift Studios' commitment in principle. It does not describe specific internal procedures, which may be adopted and updated by Ordift Studios from time to time.