Privacy

Who this applies to

DEQ CMMS is a maintenance-management system for health facilities. This page covers the people who register a facility, the team members they add, and the visitors who scan a device's QR sticker.

What we collect

• Account details – name, e-mail address, phone number, job title and role, and a password that we store only in a scrambled (hashed) form.
• Facility records – equipment, locations, stock, faults, work orders, service history, schedules, documents and notes that your team enters, plus photos, videos and files you attach.
• Activity records – who changed what and when, sign-in times and security events, so that the team can see accountability and we can protect accounts.
• QR page reports – when someone reports a fault from a sticker, the name and description they type.

How it is used

• To run the service for your facility: showing your records to your team, sending e-mails you ask for (reminders, due-maintenance digests, password resets).
• To keep the service safe: preventing misuse, investigating problems, and keeping an audit trail.
• We do not sell your data and do not use your facility records for advertising.

Who can see it

Only your facility's approved team members, according to the role each person has, plus the DEQ CMMS administrators who approve facilities and support them. The public QR page of a device shows only limited, non-sensitive details.

Where it is kept and who helps us run it

Records are stored in a managed PostgreSQL database; files in object storage; the site is hosted on a cloud platform; e-mail is sent through an e-mail delivery provider; live updates use a messaging service that carries only a change signal, not your records. These providers process data only to provide those services.

Keeping and removing data

Facility records stay for as long as the facility has an account. The owner can export the data at any time (Data management) and can ask us to delete the facility. Deleted items may remain in backups for a limited time.

Your choices

You can ask to see, correct or delete the personal information we hold about you. We aim to handle personal information in line with Ghana's Data Protection Act, 2012 (Act 843) and similar laws that apply to the facilities we serve. Contact us using the address below.

Changes

If this page changes in a way that matters, we will update the date above and tell facility owners.