UMB Stockbrokers Ltd
Board of Directors
UMB Stockbrokers Ltd. (UMB SL) recognises the importance of privacy and security of personal information that is shared with us whilst executing our business and providing services to our clients. While new technologies have dramatically changed how information is gathered, used, and stored, preserving customer trust and the privacy of personal information at UMB SL remains a core objective.
“Data Controller” is a person who, either alone, jointly with other persons, or in common with other persons, or as a statutory duty, determines the purposes for and the way Personal Data is processed or is to be processed.
“Processor” is any person other than an employee of the data controller who processes the data on behalf of the Data Controller.
“Data Subject” is an individual who is the subject of Personal Data.
“Personal Data” is data about an individual who can be identified (a) from the data or (b) from the data or other information in possession of or likely to come into the possession of the Data Controller.
“Processing” is an operation, activity, or set of operations, by automatic or other means, concerning data or Personal Data.
UMB SL is an investment management and advisory firm licensed by the Securities and Exchange Commission (SEC) and registered with the National Pensions Regulatory Authority (NPRA) as a pension fund manager.
Unless otherwise stated, UMB SL is the Data Controller for the information we process and, at some point, a data processor.
Our Location and Contact Address
No. 1 Abdul Diouf Street
South Ridge, Accra - Ghana
GPS Address: GA-052-5000
If you do have any complaints, requests, or questions regarding your personal information and about how it is being processed, please contact the Data Protection Supervisor via:
Telephone: +233 (0)30 225 1137 / +233 (0)30 225 1138
Postal Address: P O Box CT 1317, Accra, Ghana
UMB SL collects personal information directly from you when you engage with us through various channels. When we collect your personal information indirectly from you, we will inform you about how we obtained the information. The following are some of the various ways we collect information from you:
You are not obliged to provide us with your personal information. However, certain basic information may be required from you to enable us to provide you with our services or attend to your requests. Where this is the case, we will advise you when obtaining the information.
We collect personal information that is necessary, relevant, and reasonable for the purpose of processing. The type of personal information that we may collect and process about you when you interact with us includes the following:
The purpose for which we process your Personal Data may include any of the following and we certify that the data obtained will be used for its intended purpose only:
UMB SL would only process your Personal Data for the specific purpose that we state at the point of Personal Data collection in accordance with the law. Your Personal Data may be used in any of the following circumstances:
We have set out (in the below table) a description of the ways we may use your Personal Data and the legal bases and have identified what our legitimate interests are, where appropriate:
Type of Processing Activity
Make available our services to you
To contact you, following your enquiry, reply to any questions, suggestions, issues,
Marketing /mailing list /subscriptions
Fulfillment of a contract or to provide you with an agreed service
Performance of a contract
To contact you, following your enquiry, reply to any questions, suggestions, issues,or complaints you have contacted us about
Generally, UMB SL will not share your information with third parties. However, UMB SL may share your Personal Data in any of the following circumstances:
Act 843 provides some basic rights to Data Subjects. These include the:
You have the right to be informed about processing your personal information (Personal Data). This privacy notice ensures we meet our obligations to enable you to exercise your right to be informed.
You have the right to access the personal information that we hold about you. This is sometimes termed a ‘Data Subject access request.’ UMB SL will ask for proof of identity and sufficient information about your interactions with us to locate your personal information when you make such a request. If you would like to exercise this right, please contact us as set out below.
Where information we hold about you is inaccurate, incomplete, or outdated, you may ask us to correct or update it at any time. You also have the right to block us from further processing your Personal Data where we do not have any legitimate or legal basis for processing it.
You may also ask us to delete your Personal Data in certain circumstances. The right to erasure or destruction is not absolute and only applies in certain circumstances. If you would like to exercise this right, please contact us as set out below.
Under this right, you can give us written notice to not start or cease processing your Personal Data for a specific purpose or manner which will cause or is likely to cause any unwarranted damage or distress. You can also prevent us from processing your information for direct marketing purposes.
Where we rely on your consent to process your Personal Data, you have the right to withdraw it at any time by contacting us or using any details provided in our communication with you.
The Data Protection Commission (DPC) regulates data protection and privacy matters in Ghana. They make a lot of information accessible to citizens or consumers on their website, and they ensure that the registered details of all Data Controllers, such as us, are publicly available.
You may contact DPC to lodge a complaint if you are not satisfied with how your complaint(s) or concerns are being addressed, if you believe any of your rights have not been met, or if we fail to meet our obligations as a Data Controller through the following address:
Telephone: +233 (0) 30 222 2929
UMB SL will ensure that the various rights of Data Subjects are respected and taken seriously wherever we operate. Where we process Personal Data from other jurisdictions, we undertake a privacy assessment to identify any potential risk of non-compliance.
You can, at any time, give written notice to us to exercise your rights. Within twenty one (21) days after receipt of a notice, we will inform you in writing that we have complied or intend to comply with your notice or the reasons if we cannot comply with the request.
Act 843 governs this privacy notice. Any legal issues or actions arising in connection with this privacy notice will be submitted to the courts of Ghana.
Your Personal Data is important to us, and we are committed to protecting and safeguarding it. We aim to ensure the integrity and be responsible and accountable for your data. We adhere to the general principles of data protection and international best practices in relation to data protection and are not only guided by Act 843.
Rest assured that we shall employ all the necessary technical and organizational measures to secure and treat your personal information in accordance with this privacy notice and maintain and ensure the accuracy of your Personal Data.