EPSSP Legal
Privacy Policy
Effective date: 2026-11-30
Last updated: 2026-11-04
This policy explains how EPSSP collects, uses, protects, retains and discloses personal information across its website and services.
1. Introduction
EPSSP — Electronic Payroll & Staff Self-Service Portal — respects the privacy of individuals and is committed to handling personal information responsibly.
This Privacy Policy explains how EPSSP collects, uses, stores, protects and discloses personal information when individuals visit https://epssp.com, submit enquiries or demonstration requests, communicate with EPSSP, represent an organisation that purchases or uses EPSSP, or access an organisation's EPSSP employee self-service portal.
EPSSP is developed and operated by Softview Ghana, referred to as “EPSSP”, “we”, “us” or “our”.
2. Our role in processing personal information
EPSSP acts as a data controller when it determines the purposes and means of processing information for website enquiries, demonstration requests, customer communications, billing, account administration, security and service improvement.
When we act as a data processor
- The customer organisation acts as the data controller for its employee, payroll and workforce information.
- EPSSP processes information only in accordance with the customer's instructions and applicable agreements.
- The customer organisation remains responsible for its lawful collection basis and employee privacy notices.
- EPSSP does not use customer employee records for unrelated purposes.
3. Personal information we collect
Website visitors and enquiries
- Name, email address and telephone number.
- Organisation, business and industry details.
- Enquiry details, communications and technical information such as IP address, browser type or device information.
Customer organisation information
- Organisation and business contact details, authorised user details and deployment information.
- Licensing, maintenance, invoice, payment reference and technical support records.
Employee and payroll information
- Names, identification, contact and employment details.
- Salary, allowances, deductions, statutory contributions, PAYE, SSNIT and payroll history.
- Bank or salary payment information, payslips, portal credentials and access records where entered by the customer.
- Other employment-related information relevant to the customer's lawful EPSSP configuration.
Customers should only enter information that is relevant and lawfully required for their operations.
4. How we use personal information
- Responding to enquiries and demonstration requests.
- Establishing and administering customer relationships.
- Providing software licensing, maintenance and support services.
- Operating, maintaining and securing EPSSP.
- Managing authorised users and access.
- Processing contracted licence, maintenance, service or subscription payments.
- Maintaining operational, financial and legal records.
- Meeting applicable legal and regulatory obligations.
Employee information processed for a customer is used according to the customer's authorised instructions and service agreement.
5. Lawful basis for processing
Depending on the circumstances, processing may be based on consent, contract performance, compliance with legal obligations, legitimate interests that are appropriately balanced against individual rights, or another lawful basis recognised under Ghanaian law.
Customers are responsible for identifying and documenting the appropriate lawful basis for employee information submitted to EPSSP.
6. Employee self-service access
EPSSP may allow employees to access their own employment-related information through an individual account. Access is intended to be restricted to information the employee is authorised to view.
Employees should keep credentials confidential, avoid sharing access and notify their organisation about suspected unauthorised access. Employment or payroll inaccuracies should be raised with the employer.
The employer remains responsible for the accuracy and authorisation of employee records entered into the platform.
7. Disclosure and sharing of information
We do not sell personal information. We may share information where necessary with:
- Hosting and infrastructure providers.
- Payment service providers.
- SMS, telecommunications and email delivery providers.
- Technical providers supporting EPSSP.
- Professional advisers.
- Courts, regulators or law enforcement agencies where legally required.
Service providers are expected to maintain appropriate confidentiality and contractual safeguards. They are not authorised to use customer employee information for unrelated purposes.
8. International processing and transfers
Some infrastructure or third-party services may process or store information outside Ghana.
Where personal information is transferred or made accessible outside Ghana, EPSSP will take the steps required by applicable law and use appropriate contractual, organisational or other safeguards.
9. Data security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, loss, alteration and misuse.
Depending on the deployment, safeguards may include role-based access, authentication controls, secure communications, backups, monitoring and operational controls.
No electronic system can be guaranteed completely secure. Customers remain responsible for access management, credentials and appropriate use.
10. Data retention
We retain personal information only for as long as reasonably necessary for the purposes collected, subject to applicable legal, contractual and operational requirements.
Website enquiries are retained as needed to manage the enquiry and associated records. Customer employee and payroll records are retained according to the customer relationship, agreement, customer instructions and relevant law.
Ending managed hosting does not automatically trigger deletion. Customer data retention, export, backup and deletion arrangements are addressed through the applicable service agreement.
11. Your privacy rights
Subject to applicable law, individuals may request access, correction, deletion, objection to certain processing, or withdrawal of consent where consent is the lawful basis.
Requests concerning employer-controlled employment and payroll records should generally be directed to the employer first. EPSSP will assist the customer organisation with relevant requests in accordance with contractual and legal responsibilities.
12. Cookies and similar technologies
The website may use essential technologies required for functionality, security and user preferences.
Non-essential analytics, advertising or tracking technologies will be introduced only with appropriate information and consent where required. Browser settings may be used to manage cookies, although disabling some cookies may affect functionality.
13. Children's information
EPSSP is primarily designed for organisations and employees. EPSSP does not intend to collect children's information through its public marketing website.
Customers must ensure that any information about children or vulnerable individuals is collected only where legally permitted and with appropriate safeguards.
14. Personal data incidents
If we become aware of a security incident involving personal information, we will investigate and take reasonable steps to contain and address it.
Where required, we will notify the customer organisation, the Data Protection Commission and affected individuals in accordance with applicable obligations.
15. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our services, operational practices or legal obligations. The latest version will be published with an updated revision date.
16. Contact and complaints
For privacy-related questions, requests or complaints: EPSSP, Operator: Softview Ghana, Privacy contact: 233 543 093 942, Email: hello@epssp.com, Website: https://epssp.com.
Individuals may also contact Ghana's Data Protection Commission through https://dpc.gov.gh/.
We are committed to handling personal information responsibly and respecting the rights of individuals whose information is processed through EPSSP.