Skip to content
NSAB LTDPRINT · PRODUCE · DELIVER · SOFTWARE

NSAB Limited

Privacy notice

Version 1, in force from 28 October 2026.

This notice explains what personal information NSAB Limited collects, why, who sees it, how long we keep it, and your rights under the Data Protection Act, 2012 (Act 843).

NSAB Limited (“NSAB”, “we”) of Accra, Ghana, decides how your information is used for the services described here. We are the “data controller”.

For anything about your information, contact info@nsabltd.com or +233 24 953 3557.

Publishers are different. When you send an enquiry to, or buy from, a publisher on devego (nsabltd.com/pub/…), that publisher decides how your information is used and is its controller. NSAB processes it on the publisher’s behalf. Section 5 explains this.

  • the website nsabltd.com and its contact and quote forms;
  • NSAB’s customers: quotes, orders, invoices and the client portal;
  • devego studio accounts (nsabltd.com/studio);
  • publications read on nsabltd.com/pub/, and the enquiries and orders sent from them;
  • protected e-books read at nsabltd.com/read/.

We count visits ourselves; we do not use Google Analytics or advertising trackers. For each page view we keep:

  • the page;
  • how long it was on screen and how far you scrolled;
  • how you arrived (for example, a search engine or a campaign link);
  • your device type and browser family;
  • your approximate location (country, region, city), looked up at the moment of the visit.

We do not keep your IP address or your full browser details. To count people rather than page views, we keep a code computed from the day, your IP address and your browser. It changes every day and cannot be turned back into who you are. Your browser keeps one small “been here before” flag. We use this to see how the website is used and to improve it, which is our legitimate interest.

When you write to us, we collect what you type: your name, email, phone, company, message, and any project details or file you attach. We use it to answer you and, if you go ahead, to prepare a quote. Your name and a way to reply are needed; the rest is optional. Without a way to reply, we cannot answer you.

To quote for, deliver and invoice our work, we keep your name and contact details, your business details and tax number where you give them, what you ordered, and what you paid. We need these to fulfil our contract with you, and the law requires us to keep accounting records.

To give you an account, we keep:

  • your name, email and phone number;
  • your publisher’s name, address on devego, country, website and description;
  • your password (only as a one-way hash, never in a readable form);
  • your two-step sign-in secret (encrypted);
  • records of each sign-in (time, IP address and browser), to protect your account.

We also keep a record of important actions in the studio, such as publishing, changing settings and approving refunds. Your Paystack secret key is stored encrypted, and is never shown again in full.

We use this to provide the studio under our Terms, to keep it secure, and to contact you about your account. NSAB staff look at sign-up details when deciding an application.

When you read a publication, the reader counts:

  • the pages viewed and for how long;
  • searches;
  • where you arrived from.

It does this under a random code made for that visit. It does not record your name or keep your IP address with these statistics. Publishers see the totals, not individuals.

For a password-protected publication, your browser keeps an “unlocked” cookie for 12 hours. A basket you fill is kept only in your browser for that visit.

If you send an enquiry, the publisher receives:

  • your name and email;
  • the other details the form asks for (phone, company, message or quantity);
  • the exact words of the agreement you ticked, and when.

If you buy, the publisher receives:

  • your name, email and phone;
  • your delivery note;
  • the order, and the refund policy you agreed to.

Payment is made on Paystack’s own page into the publisher’s Paystack account. Your card or mobile-money details never reach NSAB or the publisher.

To protect an e-book from being shared, we keep:

  • your email address;
  • a cookie that identifies each device you read on, with a description of the device such as “Chrome on Android”;
  • the codes we email you to add a device.

Copies you download carry your name, email address and a licence code on the pages.

We never sell personal information. We share it only with:

  • Service providers who work for us, under obligations to protect it and use it only for us:
    • Hetzner Online GmbH: our servers, in Germany;
    • Cloudflare: domain name service, and the “are you a person” check on some forms when it is switched on;
    • Resend: delivering our emails;
    • Google: our email inbox;
    • Paystack: payments.
  • The publisher concerned, for enquiries and orders you send from a publication.
  • Authorities, when the law requires it, such as the Ghana Revenue Authority for tax records.

For enquiries and orders sent from a publication, the publisher is the controller and NSAB is its processor. We store and process that information only to run devego for the publisher, under written terms that bind us to:

  • keep it confidential and secure;
  • use only the providers listed above;
  • help the publisher answer your requests;
  • tell the publisher about any breach.

To see, correct or delete it, contact the publisher; their details are on your receipt or in their reply. If you cannot reach them, write to us and we will help.

Our servers are in Germany, and some of our providers are in the United States. The information therefore leaves Ghana. We protect it on the way, and where it is stored:

  • every connection to our services is encrypted;
  • secrets such as two-step codes and payment keys are encrypted where they are stored;
  • access is limited to the people and systems that need it.
  • Website statistics: kept as statistics. The daily code cannot be used to identify you.
  • Messages from contact forms: for as long as needed to deal with your enquiry and any work that follows.
  • Customer, order and invoice records: for at least six years after the end of the year they relate to, as the Revenue Administration Act, 2016 (Act 915) requires.
  • devego studio accounts: while the account is open. Afterwards, only what we need for our records, for security, or by law.
  • Enquiries and orders sent to a publisher: as long as the publisher keeps them, until the publisher is closed. After that, only what the law requires.
  • E-book access records: while you can read the e-book.

Our protections include:

  • encrypted connections;
  • passwords stored only as strong one-way hashes;
  • two-step sign-in;
  • secrets and payment keys encrypted where they are stored;
  • every request checked against who is signed in and what they may see;
  • limits on repeated attempts;
  • records of important actions.

If a breach affects your information, we will tell the Data Protection Commission and you as soon as we reasonably can, as the law requires.

Under the Data Protection Act, 2012 you may:

  • ask what information we hold about you, why, and who receives it;
  • ask us to correct or delete information that is wrong, out of date, incomplete or held without a right to keep it;
  • object to processing that is causing you unwarranted damage or distress;
  • stop direct marketing at any time. We send marketing only if you agreed to it first, and every marketing message lets you unsubscribe;
  • ask not to be subject to a decision made solely by automated means that significantly affects you. We do not make such decisions.

To use these rights, email info@nsabltd.com. We may need to confirm who you are before acting. We answer within the time the law allows, and within 40 days at the latest.

If you are unhappy with how we handle your information, please tell us. You also have the right to complain to the Data Protection Commission of Ghana (dataprotection.org.gh).

We use no advertising or tracking cookies.

What we keep in your browser:

  • On the website: a “been here before” flag and your light or dark theme choice, both kept by your browser.
  • When reading publications: an “unlocked” cookie for password-protected publications (12 hours), and your basket, kept only for the visit.
  • For e-books: a cookie that recognises your device.
  • In devego studio: two sign-in cookies that page scripts cannot read, sent only to nsabltd.com/studio.

When the “are you a person” check is switched on, Cloudflare may use its own storage to run it.

Our services are for businesses and adults. We do not knowingly collect information from anyone under 18. If you think a child has given us information, tell us and we will delete it.

Each version of this notice has a number and a date it takes effect, shown at the top. We may update it. When a change matters to devego studio publishers, we email their owners before it takes effect. Every version we have published stays on record.