Data Protection Statement

Last updated: January 2025  |  ENA Golden Enterprise, Accra, Ghana

1. Our Commitment

ENA Golden Enterprise is committed to handling personal and financial data responsibly, transparently, and in accordance with applicable data protection legislation, including the Ghana Data Protection Act, 2012 (Act 843).

2. Data Controller

ENA Golden Enterprise acts as a data controller for information collected directly from clients and website visitors. For data processed on behalf of clients (e.g., end-user transaction data), we act as a data processor under the client's instructions.

3. Legal Basis for Processing

• Contractual Necessity: Processing required to deliver our services as agreed.
• Legal Obligation: Processing required by financial regulations, AML laws, and regulatory directives.
• Legitimate Interests: Security monitoring, fraud prevention, and service improvement.
• Consent: Where explicitly obtained for specific purposes (e.g., marketing communications).

4. Data Subject Rights

Under applicable data protection law, individuals may have the right to:

• Access their personal data held by us
• Request correction of inaccurate data
• Request deletion of data (subject to legal retention obligations)
• Object to or restrict certain processing activities
• Data portability where technically feasible

5. Cross-Border Data Transfers

Where data is transferred to systems hosted outside Ghana (e.g., cloud providers), we ensure adequate protections are in place through contractual data transfer mechanisms and security standards aligned to international best practices.

6. Data Breach Response

In the event of a data breach, we will notify affected clients and relevant regulatory authorities within the timeframes required by applicable law, and take immediate steps to contain and remediate the incident.

7. Data Protection Officer

For data protection enquiries or to exercise your rights, contact us at: info@enagolden.com | ENA Golden Enterprise, Accra, Ghana.