Privacy Policy

1. Data controller

The controller responsible for personal data processed via the Platform is Ardent Africa Technologies Ltd, Accra, Ghana. Contact: privacy@ardentafrica.com.

2. Scope

This policy applies to visitors, registered users, Investors, Issuers, and others who interact with us online or offline in connection with the Services. It should be read together with our Cookie Policy and Terms of Use.

3. Data we collect

Depending on your role and use of the Platform, we may collect:

• Identity & contact: name, address, email, phone, date of birth, nationality, government ID numbers, photographs for verification.
• Account & profile: username, preferences, marketing choices, support tickets.
• Financial & transaction: bank or mobile-money details, investment amounts, payment status, tax identifiers where required.
• Compliance: KYC/AML documentation, beneficial ownership, sanctions screening results, source of wealth/funds where required.
• Technical & usage: IP address, device identifiers, browser type, logs, cookies and similar technologies (see Cookie Policy).
• Communications: emails, chats, and call recordings where permitted and notified.

4. Purposes and lawful bases

We process personal data to:

• Provide, secure, and improve the Platform and related Services (contract; legitimate interests).
• Onboard users, verify identity, and conduct AML/sanctions screening (legal obligation; substantial public interest in AML).
• Process investments, escrow, settlements, and regulatory reporting (contract; legal obligation).
• Communicate service, security, and transactional messages (contract; legitimate interests).
• Send marketing where permitted and where you have consented or soft-opt-in rules apply (consent/legitimate interests as applicable).
• Detect, prevent, and investigate fraud, abuse, or unlawful activity (legal obligation; legitimate interests).
• Comply with SEC Ghana and other regulators (legal obligation).
• Analyse aggregated usage to improve UX where we rely on consent for non-essential cookies/analytics.

Where we rely on consent, you may withdraw it at any time without affecting prior processing lawfulness.

5. Ghana data protection

We process personal data in accordance with applicable Ghanaian law, including requirements administered by the Data Protection Commission, Ghana(“DPC”). You may exercise rights under local law, including access, rectification, erasure where applicable, restriction, objection, and complaint to the DPC, subject to conditions in statute.

6. EEA, UK & international users

If you are in the European Economic Area (“EEA”) or United Kingdom (“UK”), GDPR/UK GDPR may apply. We will process your data as described here and provide:

• Legal bases: as listed in Section 4. Where we transfer data outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, as required.
• Rights: access, rectification, erasure, restriction, data portability, objection to certain processing, and withdrawal of consent. You may lodge a complaint with your local supervisory authority.

7. Sharing & processors

We may share data with:

• Regulated payment, banking, or escrow partners.
• KYC/AML and identity verification vendors.
• Cloud hosting, email, analytics (where consented), and IT security providers.
• Professional advisers (lawyers, auditors) under confidentiality.
• Regulators, law enforcement, or courts when required by law.

We require processors to protect data and process it only on our instructions.

8. International transfers

Your data may be processed in Ghana and other countries where we or our suppliers operate. Where transfers require safeguards, we implement appropriate measures and documentation.

9. Retention

We retain data for as long as necessary to fulfil the purposes above, including legal, regulatory, tax, and anti-fraud requirements. Investment and KYC records may be kept for extended periods as required by law.

10. Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit where applicable, access controls, and staff training. No system is perfectly secure; please use strong passwords and protect your devices.

11. Your rights

Subject to law, you may request access, correction, deletion, restriction, or portability, and object to certain processing. Contact privacy@ardentafrica.com. We will respond within statutory timeframes. We may need to verify your identity.

12. Cookies & similar technologies

We use cookies and similar technologies as described in our Cookie Policy. You can manage non-essential cookies via our cookie preferences tool linked in the footer.

13. Children

The Platform is not directed at children under 18 (or higher age if required locally). We do not knowingly collect data from children.

14. Automated decisions

We may use automated checks (e.g. fraud scoring, sanctions screening). Where a decision significantly affects you solely by automated means, you will be informed of logic and rights where required by law.

15. Changes

We may update this Privacy Policy and will revise the “Last updated” date. Material changes may be notified by email or prominent notice on the Platform.

16. Contact & complaints

Privacy enquiries: privacy@ardentafrica.com
Complaints handling: see Complaints & dispute resolution.
Ghana DPC: dataprotection.org.gh