Privacy Policy
Last updated: Oct 17, 2025
This Privacy Policy explains how Haxo Labs Ltd (trading as boafuo) (“we”, “us”, or “our”) collects, uses, shares, and protects personal information when you visit our website www.boafuo.com or use our WhatsApp-based service (boafuo). It applies to all users and visitors and is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Ghana Data Protection Act, 2012 (Act 843).
Who We Are
Haxo Labs Ltd is a company registered in England and Wales (Company No. 15492336) with its registered office at 4th Floor, Radius House, 51 Clarendon Road, Watford, Hertfordshire WD17 1HP, United Kingdom. We operate boafuo, an AI-powered WhatsApp-native tailoring assistant designed to help tailors and fashion designers manage clients, orders, measurements, and communication.
Haxo Labs Ltd is the data controller for all processing activities described in this policy.
For questions or concerns, contact: privacy@boafuo.comhat Information We Collect
We collect the following categories of information:
Contact details: name, phone number, email, and business name.
Order and service information: client details, measurements, photos, messages, delivery and fitting information.
Technical data: IP address, device type, browser, usage logs, and interaction data from our website and WhatsApp service.
Contact form data: information submitted through the contact form on www.boafuo.com.
Communication data: messages and files exchanged with our WhatsApp assistant or support team.
We do not intentionally collect special category data (such as health or religion).
How We Use Your Information
We use personal data for the following purposes and legal bases:
To operate and provide the boafuo service (Performance of a contract).
To communicate with you and provide customer support (Legitimate interests).
To manage accounts, billing, and payments (Contract and Legal obligation).
To maintain security, prevent fraud, and ensure system integrity (Legitimate interests).
To improve our services and analyse usage (Legitimate interests).
To send service updates or feature information where permitted (Consent or soft opt-in).
We do not use personal data for advertising or profiling.
AI and Automation
boafuo is an AI-powered service. The AI component is integral to the product and cannot be turned off. We use reputable AI service providers such as OpenAI or equivalent. Your data is processed only to deliver the requested functionality and is not used to train general-purpose AI models without your explicit consent.Data Sharing and Subprocessors
We share data only as needed to provide our services:
WhatsApp Business Solution Provider (Meta Platforms) for message delivery.
Cloud hosting providers (e.g., AWS) for secure storage and infrastructure.
AI service providers (e.g., OpenAI) for message processing.
Payment processors (if applicable).
Legal or regulatory authorities when required by law.
Each provider is bound by a data processing agreement ensuring adequate protection. Our list of subprocessors is available at www.boafuo.com/legal/subprocessors. We do not sell personal data.
International Transfers
Your data may be transferred between the UK, Ghana, and other locations where our providers operate. Transfers are protected by the UK-approved Standard Contractual Clauses (SCCs) and the UK Addendum (IDTA), ensuring an adequate level of protection.Data Retention
We retain personal information only for as long as necessary for the purposes stated in this policy:
Account and order data: active account plus up to 24 months after inactivity.
Financial and legal records: 6 years (UK statutory).
Support and communication data: up to 24 months.
Security logs: up to 24 months.
After this period, data is securely deleted or anonymised.
Data Security
We implement technical and organisational measures to protect personal data, including encryption, role-based access, MFA, and continuous monitoring. While no system is completely secure, we take all reasonable steps to prevent unauthorised access or loss.Your Rights
Under the UK GDPR and Ghana Act 843, you have the right to:
Access your personal data.
Request correction or deletion.
Restrict or object to processing.
Request a copy of your data in portable format.
Withdraw consent where applicable.
To exercise these rights, message “Delete my account” on WhatsApp or contact privacy@boafuo.com.
Children’s Data
boafuo is not directed to children under 18. We do not knowingly collect data from minors. If such data is discovered, it will be deleted immediately.Cookies
We use cookies to improve your experience and analyse traffic on our website. Non-essential cookies are only used after consent. For details, please see our Cookies Policy at www.boafuo.com/legal/cookies.Links to Other Websites
Our website may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to read their privacy policies.Data Protection in Ghana Branch Operations
Haxo Labs Ltd operates an external branch in Ghana that supports local business operations. Data handling in Ghana complies with the Ghana Data Protection Act (Act 843). Haxo Labs Ltd remains the main data controller.Updates to This Policy
We may update this Privacy Policy periodically to reflect legal, operational, or technical changes. The latest version will always be posted on this page with the updated date shown above.Contact Information
If you have any questions, concerns, or complaints about this policy or how we handle your data, contact:
Haxo Labs Ltd (trading as boafuo)
4th Floor, Radius House, 51 Clarendon Road, Watford, Hertfordshire WD17 1HP, United Kingdom
Email: privacy@boafuo.com
Support: support@boafuo.com
If you are unsatisfied, you may also contact the Information Commissioner’s Office (ICO) at ico.org.uk or the Ghana Data Protection Commission at dataprotection.org.gh.