TAMALE TECHNICAL UNIVERSITY PRIVACY STATEMENT
Introduction
Tamale Technical University (hereinafter referred to as “TaTU” or “the University”) is committed to protecting the privacy and security of personal information belonging to students, staff, applicants, visitors, and all other individuals who interact with the University and its digital platforms.
This Privacy Statement explains how TaTU collects, uses, stores, discloses, and protects personal data. It applies to all University websites, online portals, mobile applications, and any offline processes through which the University handles personal information.
TaTU operates in compliance with the Data Protection Act, 2012 (Act 843) of Ghana, and is guided by international best practices in data governance.
Scope of This Statement
This Privacy Statement applies to:
- Prospective and current students
- Alumni
- Academic, administrative, and support staff
- Contractors, vendors, and partner institutions
- Website visitors and online service users
- Research participants
Personal Data We Collect
Information You Provide Directly: We collect personal data that you voluntarily provide when you apply for admission, register on portals, enrol in programmes, apply for aid, or contact the university directly. This may include full name, date of birth, gender, national identification number, Ghana Card number, contact address, phone number, email address, academic qualifications, next-of-kin details, photographs, and payment/financial information.
Information Collected Automatically: When you visit our websites or online portals, we may automatically collect your IP address, browser type, device identifiers, operating system, pages visited, links clicked, time spent on pages, and cookies.
Information from Third Parties: We may receive personal data from third parties such as the Ghana Education Service (GES), West African Examinations Council (WAEC), GTEC, other educational institutions, or government agencies where necessary and lawful.
How We Use Your Personal Data
TaTU processes personal data for the following lawful purposes:
- Admission processing and student enrolment
- Academic administration, examinations, and results management
- Student welfare, counselling, and support services
- Staff recruitment, payroll, and human resource management
- Fee payment processing and financial management
- Communication of University news, events, and notices
- Research and statistical analysis (in anonymised form where possible)
- Compliance with legal and regulatory obligations
- Security monitoring of University premises and digital infrastructure
- Alumni engagement and advancement activities
Legal Basis for Processing
TaTU processes personal data on one or more of the following legal bases:
- Consent — where you have given explicit, informed consent
- Contractual necessity — to fulfil obligations under an enrolment or employment agreement
- Legal obligation — to comply with applicable Ghanaian law and regulatory requirements
- Legitimate interests — where the University has a genuine interest that does not override your rights
Disclosure and Sharing of Personal Data
TaTU does not sell, rent, or trade your personal data. We may share data with government bodies (e.g., GTEC, NTVETD, GRA) as required by law, partner institutions for attachments, third-party IT/payment providers under contract, or law enforcement agencies via court orders. All contractual processors must protect it under relevant Ghanaian laws.
Data Security
The University implements appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, alteration, or disclosure. These measures include password-protected access controls, encryption of sensitive data in transit and at rest, regular security audits, staff training, and physical security controls over archives and server rooms.
Data Retention
TaTU retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Student academic records are retained for a minimum of 30 years following graduation. Employment records are retained for a minimum of 10 years following termination. Other records fall under the University’s Records Management Policy.
Your Data Protection Rights
Under the Data Protection Act, 2012 (Act 843), you have the right to request access to your data, demand correction of inaccurate records, request deletion when data is no longer necessary, object to or restrict certain types of processing, invoke data portability rules, or withdraw your consent. Inquiries must be handled within 30 days by writing to our supervisor.
Cookies and Online Tracking
TaTU websites use cookies to improve user experience, enable portal functionality, and analyse web traffic. Cookies are small text files stored on your device by your browser. You may disable cookies through your browser settings; however, doing so may affect the functionality of some University online services. We do not use tracking for advertising.
Protection of Minors
TaTU is a tertiary institution, and its services are directed at people aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental or guardian consent. If you believe data was collected inadvertently from a minor, please alert us immediately.
Changes to This Privacy Statement
TaTU reserves the right to update this Privacy Statement periodically to reflect changes in law, University policy, or operational practices. The revised statement will be published on the website with an updated effective date. Continued use of university services following updates constitutes acceptance of the changes.
Contact and Complaints
If you have questions or concerns about how TaTU handles your personal data, or wish to exercise your legal data protection rights, please contact:
Data Protection Supervisor
Tamale Technical University
P.O. Box 3 E/R, Tamale, Northern Region, Ghana
Email: dicts@tatu.edu.gh
Telephone: 0244441019
Website: www.tatu.edu.gh
If you are dissatisfied with the University’s response, you have the legal right to lodge a formal complaint with the Data Protection Commission of Ghana.