Privacy Policy

Last updated 31 October 2026

This policy explains what personal data Annan Capital Partners collects through this website, why we collect it, who it is shared with and how long we keep it. It is written to meet our obligations under Ghana’s Data Protection Act, 2012 (Act 843).

Who we are

Annan Capital Partners (“ACP”, “we”, “us”) is an independent investment and advisory house. For the purposes of Act 843 we are the data controller for the personal data described in this policy — we decide why and how it is processed.

Our Data Protection Supervisor is Kingsley Osei Amponsah, CTO & Group Operations Manager. Please put “Data protection request” in the subject line so that your message reaches him directly.

What we collect

We collect personal data in only one place on this website: the contact form. When you complete it, you give us

• your name;
• your email address;
• the subject line, if you choose to add one; and
• the content of your message.

If you contact us directly by email or telephone instead, we hold whatever you choose to tell us in that correspondence.

Collected automatically by our host

Like any website, this one is served by a hosting provider that keeps short technical logs of requests: the IP address, the browser and device type, the pages requested, the date and time, and any security events. We use these only to keep the site running and secure. They are not used to build a profile of you.

Collected away from this website

If you go on to become a client or counterparty, we collect identity and due diligence information through the engagement process — know-your-client, anti-money-laundering, sanctions and anti-bribery checks. That happens in correspondence and documentation, not through this site, and it is governed by the engagement between us.

We do not collect special personal data through this website — nothing about health, religious or political beliefs, ethnic origin, sexual life or criminal records.

We do not track you. This website sets no cookies, runs no analytics, and loads no advertising or social media tracking pixels. The typefaces are served from our own domain rather than from a third party. You can read this site from beginning to end without anything being recorded about you.

Why we use it, and our lawful basis

We use the information you send us to answer your enquiry, and to follow up on it where that is what you have asked for. Under section 20 of Act 843 we rely on your consent — given when you choose to complete and submit the form — and, where you are approaching us about work, on the legitimate interest both of us have in responding to it.

We do not use your details for direct marketing unless you have separately asked us to, and we do not sell, rent or trade personal data to anyone, ever. We make no decisions about you by automated means alone.

Who processes it with us

Messages sent through the contact form are delivered into HubSpot, the customer relationship system we use to make sure enquiries are seen and answered. HubSpot acts as a data processor on our instructions, and stores this data on servers in the European Union.

This website is hosted by Vercel, which serves the pages and keeps short-lived technical logs of requests, as any web host does.

Both are bound by contract to process data only as we direct and to keep it secure.

Beyond those two, we share personal data only with:

• our professional advisers — lawyers, auditors and accountants — where they need it to advise us;
• regulators, law enforcement and other authorities, where we are legally required to disclose it; and
• a purchaser or successor, if the business or part of it is ever transferred.

We do not sell personal information, and we do not share it for advertising.

Sending data outside Ghana

Because our systems are hosted abroad, personal data collected through this site is stored outside Ghana — principally in the European Union. Section 18(2)(f) of Act 843 requires us to tell you this. We only use providers that offer protection comparable to that required by Act 843, including the safeguards of the EU General Data Protection Regulation.

How long we keep it

• Enquiries — for as long as the conversation they relate to is live, and a reasonable period afterwards in case you come back to us; normally no more than three years from our last contact. Then they are deleted or anonymised.
• Client and engagement records — for as long as our contractual, tax, accounting and anti-money-laundering obligations require.
• Technical logs — for the short rolling period our hosting provider keeps them.

Keeping it safe

The data security safeguards in sections 28 and 29 of Act 843 require us to protect personal data against loss, damage and unauthorised access. This site is served only over an encrypted connection (HTTPS), form submissions are transmitted encrypted, and access to the systems holding enquiry data is restricted to the people at ACP who need it.

If personal data in our care is ever compromised, we will notify the Data Protection Commission and the people affected, as section 31 of the Act requires.

Your rights under Act 843

Ghana’s Data Protection Act gives you real and enforceable rights over your own data. You may:

• Be told what we are doing — which is what this policy is for.
• Ask what we hold — you can require us to confirm whether we hold personal data about you, and to give you a copy of it (section 32).
• Have it corrected or deleted — if what we hold is inaccurate, irrelevant, out of date, incomplete or misleading, you can require us to correct or erase it (section 33).
• Stop us processing it — you can object to processing that causes, or is likely to cause, unwarranted damage or distress (section 35).
• Stop direct marketing — you can tell us at any time to stop using your details to market to you, and we must comply (section 36).
• Not be subject to automated decisions — you cannot be subjected to a decision with significant effects taken by automated means alone. We do not take any.
• Withdraw consent — where we rely on your consent, you can take it back at any time, without affecting what was lawfully done beforehand.

Write to info@annancapitalpartners.com to exercise any of these. We may need to verify your identity first, so that we do not disclose your data to someone else. We will respond without undue delay, we do not charge a fee unless the Act allows one, and if we cannot do what you have asked we will explain why.

Complaints

If you believe we have mishandled your personal data, please tell us first so we can put it right. You also have the right to complain directly to the Data Protection Commission of Ghana, the independent authority that supervises compliance with Act 843, at dpc.gov.gh.

If you are outside Ghana

This policy is written to Ghanaian law, but you may have additional rights where you live — in Mauritius under the Data Protection Act 2017, or in the European Economic Area, Switzerland or the United Kingdom under their data protection law. We will honour those rights where they apply to you, and you may complain to your own national supervisory authority instead of, or as well as, the Commission in Ghana.

Children

This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

Other websites

Our pages link out to other organisations — portfolio companies, partners and our own social media accounts. Those sites have their own privacy practices and we are not responsible for them. Nothing is loaded from them until you choose to follow the link.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Where a change is significant, we will say so clearly rather than rely on you noticing.

See also our Terms of Service.