OBIBA / TRUST
Privacy Policy
How personal information is handled across Obiba’s website, app and related services, and how to exercise your privacy rights.
Last updated: 16 October 2026
hello@obibajk.com1. Scope and contact
This Privacy Policy explains how personal information is handled in connection with the Obiba website, mobile application and related support services. References to Obiba, we, us and our refer to the operator of these services. For privacy questions, requests or complaints, email hello@obibajk.com. Feature-specific notices should be read with this policy; the information needed depends on the service you use.
2. Information you provide
Information can include your name, email address, telephone number, account details, information entered in forms and correspondence with support. Business enquiries may include your organisation, role and company details. Do not send passwords, PINs, one-time codes, private keys or complete payment-card details by email.
3. Identity and financial information
Where required for a financial service, verification may require date of birth, address, identification documents, a photograph, business ownership information or information about the source of funds. Payment records may include amounts, currencies, fees, recipient identifiers, wallet addresses, transaction references and status. The service must explain any additional sensitive information required at collection. Marketing examples do not mean every category is collected from every visitor.
4. Technical information and device permissions
Using an online service can generate technical records such as IP addresses, device and browser information, access times, error reports and security logs. Permissions such as camera, notifications, contacts or location must be explained in the app when requested. You can manage permissions in your device settings; disabling a permission may affect the feature that needs it. This policy does not itself grant permission to access your device.
5. Purposes and lawful grounds
Personal information is used as applicable to provide requested services, verify identity and instructions, communicate with you, process payments, prevent misuse, resolve disputes and meet legal obligations. Processing must have an applicable lawful justification, such as your consent, steps necessary for an agreement, a legal obligation or a legitimate interest recognised by law. Where consent is relied on, you may withdraw it without affecting processing already lawfully carried out.
6. Recipients and service providers
Delivering a requested service may require information to be disclosed to payment recipients, financial institutions, verification providers, hosting and communications providers or professional advisers. Only information relevant to the purpose should be disclosed, subject to appropriate confidentiality and data-protection obligations. Information may also be disclosed when required by law, a valid court order or a competent authority. Applicable product notices must identify the relevant financial-service provider.
7. International processing
Service providers or payment recipients may be outside Ghana. Before transferring personal information internationally, Obiba must assess the applicable legal requirements and protections. Cross-border payments necessarily involve information reaching the recipient’s financial-service provider. Contact hello@obibajk.com for information about the processing arrangements relevant to your account.
8. Public blockchain records
Where a payment uses a public blockchain, wallet addresses, transaction amounts and related network records may be publicly visible and independently retained by network participants. Public blockchain entries generally cannot be altered or erased by Obiba. Removing an Obiba account does not remove records held on a public network. Avoid putting names, contact details or other personal information into public transaction messages.
9. Retention
Personal information should be retained only for as long as needed for its stated purpose or a lawful retention obligation. Relevant factors include the account relationship, transaction-record requirements, unresolved disputes, fraud investigations and legal claims. Closing an account may not allow immediate deletion of records that must be kept by law. A deletion response should explain any retained categories, the reason and the applicable retention period or criteria; unnecessary information should be deleted or anonymised.
10. Your privacy rights
Subject to applicable law and relevant exceptions, you may request access to your personal information, correction of inaccurate information, or deletion of information that no longer has a lawful basis for retention. You may object to applicable processing, withdraw consent and ask about the purposes and recipients of your information. Requests may require proportionate identity verification to protect your account. You can raise a privacy complaint with Ghana’s Data Protection Commission.
11. Account and data deletion
To request deletion of your Obiba account and associated personal information, email hello@obibajk.com with the subject “Obiba account deletion” from the email linked to your account, if possible. You can also request deletion of website enquiry information without having an account. Do not attach identity documents to the initial email. Any necessary identity check, pending payment, remaining balance or lawful retention requirement must be addressed during the request. Uninstalling the app is not an account-deletion request; disabling access is not a substitute for deleting eligible data.
12. Communications and preferences
You can ask to stop promotional messages by using an unsubscribe option where provided or by emailing hello@obibajk.com. Necessary account, transaction, security and legal messages are separate from promotional communications. Changing notification permissions does not close your account.
13. Children and eligibility
The financial services are intended for people who satisfy the age, capacity and verification requirements stated during registration for the relevant service. Do not create an account if you do not meet those requirements. If you believe a child has submitted personal information without appropriate authorisation, contact hello@obibajk.com so the matter can be investigated.
14. Automated tools and agent permissions
Where an automated tool or agent feature is available, its permissions and consequences must be explained before activation. A marketing demonstration does not authorise access to your account. You can ask support about a restriction or decision affecting your account and request review where applicable. Additional notices may be needed for particular automated processing.
15. Policy changes and complaints
Changes to this policy will be published with an updated date. Material changes affecting existing processing require appropriate notice and, where necessary, renewed consent. Contact hello@obibajk.com first if you have a concern. This does not limit your right to contact the Data Protection Commission or another competent authority.