Privacy Policy

Draft for local review · 12 October 2026

1. Who operates Make We Build

Make We Build (MWB) is operated by Merimei Studio, a Ghanaian sole proprietorship.

Merimei Studio
P.O. Box 15480
Accra, Greater Accra
Ghana

Privacy contact: info@makewebuild.com (provided as the planned official MWB address; mailbox activation and publication require operator confirmation). The operator details and postal address are provided by the owner and remain subject to final confirmation.

2. What MWB does

MWB is a platform for ideas, skills, opportunities and practical projects. Members can submit ideas, respond to community initiatives, request project participation and save opportunities. Businesses and potential partners can send private enquiries.

3. Information collected

Member registration and profiles

Registration currently asks for full name, email address, password, region, mobile phone number, WhatsApp availability and participation intent. New members must also confirm: I confirm that I am at least 18 years old. MWB records the date and time when a new member confirms that they are at least 18 years old. This record documents the member's declaration of eligibility; it does not independently verify age. Skills are optional at registration. Members may later add a biography, skills, availability, mobile number and WhatsApp availability to their profile.

MWB does not routinely collect dates of birth, identity documents or copies of identification documents for this age declaration. Existing member records may have no age-confirmation timestamp because the requirement applies to new registrations.

Passwords are stored as password hashes, not as readable passwords. Profile and contact information is used for account operation, administration and relevant coordination.

Ideas and participation

MWB may process idea titles, categories, regions, problem descriptions, requested support, community responses, participation records, dates, moderation status and the internal relationship between an idea and its original creator.

Projects and opportunities

MWB may process project requests, optional messages, project participation records, project updates, moderation decisions and saved opportunities.

Business and partner enquiries

Business and partner forms may collect organisation name, contact name, email, region, interests, needs, messages, project information and optional budget information. These submissions are intended for private review and are not published automatically.

Technical and security information

The application uses a first-party session cookie and limited security identifiers for abuse prevention, including login and public-form rate limiting. Hosting infrastructure may also process connection information and server logs. Final hosting, logging and processing details remain pending review.

4. How information is used

MWB uses information to create and protect accounts, authenticate members, review and moderate ideas, enable community participation, coordinate projects, respond to business and partner enquiries, administer the platform, prevent misuse and meet applicable legal obligations.

The specific lawful justification, required/optional status, recipients and retention period for each processing activity remain subject to final legal and operational review. No additional consent functionality is implied by this draft.

5. What is public

Visitors may view published ideas, opportunities, projects and approved project updates. Published idea pages use the public creator label MWB Builder. Full creator names are not displayed automatically on public idea pages.

Public idea content may include the title, category, region, problem or need description, publication status/date and aggregated community interest. Members should not put private contact details or unnecessary personal information into content intended for publication.

Email addresses, mobile numbers, WhatsApp availability, passwords, private profile details, project requests and internal administrative notes are not intended for public display merely because a person registers.

6. Mobile numbers and WhatsApp

Mobile numbers may help MWB coordinate relevant participation. WhatsApp availability only indicates a possible communication channel. It does not automatically authorise addition to a WhatsApp group. Any group invitation or participation requires a separate decision and appropriate information. Other WhatsApp participants may be able to see a member's telephone number.

7. Administrative access and exports

Authorised MWB administrators may access information needed for administration, moderation and project coordination. Certain admin tools can export member information in CSV, XLSX or printable formats. These exports are not public and should be accessed, shared and retained only for legitimate purposes and only as long as necessary.

8. Cookies and sessions

MWB currently uses the first-party mwb_session cookie for authentication and session management. Sessions expire after inactivity, with a shorter timeout for administrators. The audited application does not currently contain third-party advertising trackers or marketing analytics scripts. Any future tracking technology will require a renewed privacy and consent review.

9. Hosting and service providers

MWB is planned for the ALL-INKL PrivatPlus hosting plan at makewebuild.com, using PHP 8.3 or newer and the planned webspace directory /makewebuild.com/. The operator must confirm the hosting contract, actual runtime, database location, backup locations, processors, international data processing, contractual safeguards and server-log arrangements before publication.

MWB may share information with authorised technical service providers where necessary to operate the platform and subject to applicable data-protection requirements. MWB does not sell members' personal information.

10. Security

Implemented application measures include password hashing, authenticated access, session security controls, session invalidation after password changes or resets, request validation, rate limiting and moderation controls. Password-reset tokens are designed to be single-use, hashed at rest and valid for no more than 30 minutes. Reset email delivery remains disabled until the production mailbox and authenticated TLS SMTP settings are securely configured.

No online service can guarantee absolute security. Members should protect their credentials and report suspected unauthorised access through the contact route available after launch.

11. Retention

MWB intends to retain information only for as long as reasonably necessary for the relevant purpose, platform operation, project administration or applicable legal obligations. Different categories, exports and backups may require different arrangements. Final category-specific purposes, lawful bases, recipients, retention periods and operational procedures remain subject to final legal review.

Member accounts and published ideas are assessed separately when a deletion request is made. An individual may request deletion of an account and personal information, but MWB must assess the request under applicable legal requirements. Published ideas, existing projects and contributions from other participants require separate consideration, including the original creator's rights. Account deletion does not transfer intellectual-property rights to MWB or Merimei Studio, and retaining an idea does not automatically justify retaining all related personal data. Where continued publication is not legally justified, appropriate removal or other measures may be required.

Business briefs without resulting cooperation are intended to be retained for 12 months after documented closure. Partner enquiries without resulting cooperation are intended to be retained for 12 months after documented closure. Exceptions may apply for ongoing cooperation, applicable legal obligations, legitimate continuing administrative purposes or properly justified retention holds.

The current application does not reliably record a dedicated closure date for every enquiry or whether cooperation resulted. Business briefs may show when a record was last updated, but neither business briefs nor partner enquiries has a dedicated closure date recorded for this purpose. A reliable operational closure register must be established before public launch. MWB does not currently claim automatic deletion or automated retention enforcement.

Regular future production database backups are planned to have a 30-day retention period. Backups are intended to be encrypted, access restricted, securely stored, retained according to defined schedules, subject to controlled expiration and tested periodically for recoverability. ALL-INKL's published hosting information describes automatic account backups and database backup points from the previous day and approximately 5–8 and 9–12 days earlier; it does not establish a contractual 30-day retention guarantee. An independent protected backup routine is therefore still required unless the operator confirms a different service that meets the target. Personal information may remain in protected backups until the applicable retention period expires. Any restore procedure must account for personal-data deletions already completed.

12. Privacy rights

Subject to applicable law, individuals may request information about personal data held by MWB, access, correction, deletion where justified, consideration of an objection and withdrawal of consent where processing relies on consent. MWB may request proportionate identity verification. Requests are intended to be processed manually by Merimei Studio: receive the request, record its date and scope, verify identity proportionately, locate relevant information, review applicable rights and obligations, determine the appropriate action, perform approved measures, communicate the outcome and maintain a protected operational record.

MWB's internal service targets are to acknowledge requests within 3 business days and aim to resolve straightforward requests within 14 days. These are internal targets, not automatically the applicable statutory deadlines; legal deadlines take precedence. The manual register and complete operational request process are not yet established, and the application has no automated deletion or anonymisation workflow. MWB cannot promise that every request will always be completed within 14 days or that every published idea can be retained after account deletion.

Information about Ghanaian data-protection rights is available from the Ghana Data Protection Commission.

13. Complaints

This local draft is prepared with Ghana's Data Protection Act, 2012 (Act 843) in mind, but it is not a compliance certification and remains subject to final legal review. Privacy concerns should first be sent to MWB through the confirmed privacy contact. Individuals may also contact the Ghana Data Protection Commission. MWB's DPC registration status and the scope applicable to MWB remain subject to final confirmation.

14. Updates

This Privacy Policy will be updated if MWB changes its processing, introduces new functionality or needs to address legal requirements. The final published version will include a confirmed effective date.