Privacy Policy (Uptima Credit)

Last updated: 7 January 2026

Uptima Credit and Microfinance House Limited (“Uptima Credit”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our website, contact us, apply for a product (such as loans, savings/current accounts, fixed deposits, investments, or susu), or interact with us in our branches and through our communication channels.

By using our website or providing your information to us, you acknowledge that you have read and understood this Privacy Policy.

1) Who we are (Data Controller)

Website: https://new.uptimacredit.com
Company: Uptima Credit and Microfinance House Limited
Location / Address: Mankessim–Ajumako Road, Ajumako Station; P.O. Box AJ 64, Ajumako, Central Region, Ghana
Email: info@uptimacredit.com
Phone: +233 53 401 9840 | +233 24 476 5949 | +233 53 402 3840

2) Scope (what this policy covers)

This Privacy Policy covers personal data we collect:

• on our website (including forms),
• through communications (email, phone, in-person),
• during account opening, KYC verification, and loan application processes,
• when you request support, submit a complaint, or interact with our customer care team.

This policy does not cover third-party websites or services that we do not control (see Section 10).

3) Personal data we collect

We collect personal data in three main ways: (A) information you provide, (B) information we collect automatically on our website, and (C) information we may receive from third parties where permitted by law.

A) Information you provide to us

Depending on how you interact with us, we may collect:

• Identity & contact details: full name, phone number, email address, residential address, business address.
• Account / application details: product selected, account details, application details, KYC details, supporting documents.
• Financial & employment/business information (where relevant): income information, employer or business details, repayment capability information, transaction-related details you provide.
• Communications: messages you send via contact forms, email, SMS/WhatsApp (if used), or in-branch requests; customer support interactions and complaint details.
• Marketing preferences: whether you opt in/out of receiving marketing messages.

B) Information we collect automatically (website usage data)

When you visit our website, we may automatically collect:

• device type, browser type, operating system,
• IP address and approximate location (derived from IP),
• pages viewed and interactions on the site,
• referral URLs,
• cookies and similar technologies (see Section 9).

C) Information we may receive from third parties (where lawful)

For example, where permitted by law and necessary to provide services, prevent fraud, or comply with regulatory obligations, we may receive information from:

• identity/KYC verification partners or document verification services,
• payment processors and financial service providers used to process transactions,
• professional advisors (legal, audit, compliance) and IT/security service providers,
• lawful government authorities and regulators.

4) Why we use your personal data (purposes)

We use personal data to:

1. Provide products and services (including account setup, servicing, and customer support).
2. Process applications (including savings/current account opening, loans, investments, fixed deposits, and related services).
3. KYC, identity verification & risk management (including verification of identity, fraud prevention, and security checks).
4. Communicate with you (responding to inquiries, complaints, service messages, and important notices).
5. Improve our website and customer experience (analytics, performance, troubleshooting, and security).
6. Marketing and promotions (where permitted) (e.g., sharing product updates), with opt-out options.
7. Legal and regulatory compliance (recordkeeping, responding to lawful requests, and meeting obligations).

5) Legal basis for processing

We process personal data where we have a lawful basis to do so, including:

• to perform a contract or take steps you request before entering a contract (e.g., processing an application),
• to comply with legal/regulatory obligations,
• your consent (where required, e.g., certain marketing messages or optional cookies),
• legitimate interests (e.g., protecting our services from fraud, ensuring website security, improving our services), balanced against your rights.

6) How we share your personal data

We do not sell your personal data.

We may share personal data only where necessary and lawful, including with:

• Service providers and vendors who help us operate (IT hosting, security, customer service tools, communications providers).
• Payment and transaction partners (to process payments or transfers you request).
• Professional advisors (lawyers, auditors, compliance advisors) where necessary.
• Regulators, law enforcement, and government authorities when required by law, regulation, or valid legal process.
• Business transfers (if we undergo a merger, acquisition, or restructuring, data may be transferred subject to appropriate safeguards).

When we use vendors (“processors”), we require them to protect personal data and use it only for authorized purposes.

7) International data transfers

Your personal data may be processed or stored outside Ghana if we use service providers (such as hosting, email, or security providers) located in other countries. Where this happens, we take reasonable steps to ensure appropriate safeguards are in place to protect your personal data.

8) Data retention (how long we keep data)

We keep personal data only as long as necessary for:

• the purposes described in this Privacy Policy,
• fulfilling contracts and providing services,
• meeting legal, regulatory, audit, and risk management requirements,
• resolving disputes and enforcing agreements.

Retention periods vary depending on the type of data and the purpose for which it was collected. Where data is no longer needed, we securely delete, destroy, or de-identify it.

9) Cookies and similar technologies

We use cookies and similar technologies to:

• enable core site functionality,
• improve site performance and security,
• remember preferences (where applicable),
• understand how visitors use our website (analytics, if enabled).

Managing cookies

You can control cookies through your browser settings (accept, block, delete). Note: blocking certain cookies may affect site functionality.

10) Third-party links and embedded content

Our website may include third-party links or embedded content (e.g., videos or social media links). Third-party sites and services may collect data about you under their own policies. We are not responsible for third-party privacy practices, and you should review their privacy policies.

11) Comments (if enabled) and Gravatar

If comments are enabled on any part of our website:

• we may collect the data you submit in the comment form, and technical data such as IP address and browser user-agent to help with spam detection;
• an anonymized hash of your email address may be shared with Gravatar to check if you use that service; if your comment is approved, your profile picture may be publicly visible alongside your comment.

12) Security (how we protect personal data)

We use reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or method of storage is 100% secure, so we cannot guarantee absolute security.

13) Your rights (Ghana)

Subject to applicable law, you may have rights to:

• request access to your personal data,
• request correction or deletion of inaccurate, incomplete, or unlawfully held data,
• object to certain processing, and
• request other actions recognized under Ghana’s Data Protection Act.

To exercise your rights, contact us using the details in Section 1. We may need to verify your identity before responding.

You may also have the right to lodge a complaint with Ghana’s Data Protection Commission.

14) Children’s privacy

Our services and website are not intended for children. We do not knowingly collect personal data from children without appropriate consent or lawful basis. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

15) Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated version on this page and update the “Last updated” date.

16) Contact us

If you have questions, requests, or complaints regarding this Privacy Policy or our handling of personal data, contact:

Uptima Credit and Microfinance House Limited
Email: info@uptimacredit.com
Phone: +233 53 401 9840 | +233 24 476 5949 | +233 53 402 3840
Address: Mankessim–Ajumako Road, Ajumako Station; P.O. Box AJ 64, Ajumako, Central Region, Ghana