Legal & trust

Privacy notice

Last reviewed· Reviewed when the practice it describes changes.

What does this website collect?

Nothing it can avoid. This site sets no cookies, uses no tracking scripts, and runs no analytics that identify you. Browsing it leaves at most standard server logs (IP address, user agent, requested URL) held briefly by the hosting provider for operations and abuse prevention. Nothing on any page loads from a third-party domain.

What is processed when you use the contact form?

Only what you type: your name, your email address, and your message, plus the organisation and obligation fields if you fill them. The form posts to this site's own domain, and the submission is turned into an email to the desk by Resend, listed below. It is not stored in a database, a CRM or a mailing list — there is none of any of those — and once the email is delivered the only copy is that email.

The form carries one hidden field that real people never see or reach. If it is filled in, the submission is discarded. It exists to absorb automated spam and is the reason this site needs no captcha, no challenge-page, and no third-party script.

What is processed when you email the desk?

Whatever you choose to send: your email address, your message, and any attachments. It is used to answer you and, if an engagement follows, to perform it. The lawful basis is legitimate interest in answering correspondence, and performance of a contract once one exists.

How long is correspondence kept?

Enquiries that do not lead to an engagement: deleted within 24 months. Engagement records (contracts, invoices, evidence packs): retained for as long as tax and company law require of Sophura LLC, and no longer.

Who are the subprocessors?

RoleProviderData involved
Web hosting (static files)Cloudflare, Inc. or Hostinger International Ltd. — as deployedStandard server logs (IP address, user agent) held by the host
EmailThe mailbox provider for hello@sophura.com — named here at go-liveCorrespondence you choose to send
Contact form deliveryResend (Plus Five Five, Inc.) — turns a form submission into an email to the deskThe name, email address, organisation, chosen obligation and message you type into the form

No other party receives personal data from this site or this desk.

Where is data processed, and what about transfers?

The desk operates from Ghana; correspondence is read there. Client engagements are deliberately structured to work in place: changes happen in your systems under your access controls, and personal data is not exported from your environment. Where an engagement would involve processing EU personal data outside your systems, a data processing agreement and an appropriate transfer mechanism are agreed with you in writing before processing begins — not after.

Your rights, and how to use them

Ask hello@sophura.com to access, correct or delete correspondence you have sent; deletion requests are honoured within 30 days except where retention is legally required. You can also complain to your local data protection authority.

Who is responsible?

Sophura LLC, a Wyoming (US) limited liability company, operated by David Kumi, Accra, Ghana. Contact: hello@sophura.com.