Privacy Notice

Last updated: 4 September 2026

1. Introduction

Aurum Advisory & Corporate Services Ltd (“Aurum”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Notice explains how we collect, use, store, share and protect personal information when you:

• visit or interact with our website;
• contact us by email, telephone, online form or social media;
• enquire about our services;
• become a client, supplier, business partner or professional contact;
• apply for employment or work with us;
• participate in a project, event or marketing activity involving Aurum; or
• otherwise provide personal information to us.

We process personal information in accordance with the Data Protection Act, 2012 (Act 843) of Ghana and applicable data protection requirements.

2. Who We Are

For the purposes of Ghana’s Data Protection Act, Aurum may act as a data controller where we determine why and how personal information is processed.

Where we process information strictly on the instructions of a client, for example in certain payroll, accounting or administrative engagements, we may act as a data processor on behalf of that client.

3. Our Services

Aurum provides corporate and business support services including:

• accounting and financial reporting support;
• bookkeeping and management reporting;
• payroll support;
• fund accounting support;
• corporate administration;
• company setup and filing support;
• business advisory and consultancy;
• AI-assisted advertising and digital solutions;
• marketing and content support;
• process improvement and workflow automation; and
• related corporate support services.

The personal information we process will depend on the service being provided.

4. Personal Information We May Collect

Identity information

• full name;
• date of birth where required;
• nationality;
• Ghana Card details;
• passport or other identification information;
• photograph where required for identification purposes.

Contact information

• email address;
• telephone number;
• postal or residential address;
• business address.

Corporate information

• company name;
• job title;
• director or shareholder information;
• beneficial ownership information;
• company registration details;
• business contact information.

Financial and accounting information

• invoices;
• payment information;
• accounting records;
• payroll information;
• bank account details where necessary;
• financial statements and supporting schedules;
• transaction records.

Employment and payroll information

Where we provide payroll or related support, this may include:

• employee names;
• salary information;
• tax information;
• SSNIT information;
• pension details;
• employment details;
• bank payment information.

Website and technical information

• IP address;
• browser type;
• device information;
• website usage information;
• pages visited;
• time and date of visits;
• information collected through cookies or similar technologies.

Enquiry and communication information

• information provided through website contact forms;
• emails and correspondence;
• meeting notes;
• proposals and requests for services;
• feedback or complaints.

5. How We Obtain Personal Information

We may obtain personal information:

• directly from you;
• from the company or organisation you represent;
• from our clients where we provide outsourced services;
• from directors, shareholders, employees or authorised representatives;
• through our website or enquiry forms;
• through email, telephone or meetings;
• from publicly available corporate or regulatory records;
• from professional advisers or service providers;
• from regulators or government agencies where permitted by law.

Where personal data is obtained from a third party, we will take reasonable steps to ensure that the processing is lawful and that appropriate information is provided to the data subject where required.

6. Why We Use Your Personal Information

We may process personal information to:

• respond to enquiries;
• prepare proposals and quotations;
• onboard clients;
• provide contracted professional and corporate services;
• maintain accounting and financial records;
• process payroll and related administrative information;
• perform corporate administration services;
• support company registrations and statutory filings;
• manage client relationships;
• communicate with clients and business contacts;
• issue invoices and collect payments;
• manage suppliers and contractors;
• comply with tax, corporate and regulatory obligations;
• prevent fraud or misuse of our services;
• protect our systems and information;
• resolve complaints and disputes;
• improve our website and services;
• conduct marketing where appropriate consent has been obtained;
• recruit and manage employees; and
• establish, exercise or defend legal rights.

We seek to ensure that personal data is collected for a specific, lawful and reasonable purpose and is not excessive in relation to that purpose.

7. Grounds for Processing

Depending on the circumstances, we may process personal information where:

• you have provided consent;
• processing is necessary to provide a service you have requested;
• processing is necessary to perform a contract;
• processing is necessary to take steps before entering into a contract;
• processing is required by Ghanaian law;
• processing is necessary to meet regulatory, tax, corporate or employment obligations;
• processing is necessary for a legitimate and reasonable business purpose that does not unjustifiably interfere with your privacy rights; or
• another lawful basis permitted under Act 843 applies.

Where we rely on consent, you may withdraw that consent, subject to any legal or contractual requirements that require us to retain or continue processing certain information.

8. Sensitive Personal Information

Certain services may require us to receive information that is considered sensitive under Ghanaian data protection law.

We will only process sensitive personal information where it is necessary, lawful and appropriate for the relevant purpose.

We do not intentionally request sensitive personal information through our general website enquiry form unless it is necessary for the service concerned.

You should therefore not submit Ghana Cards, passports, bank statements, payroll information or other sensitive documents through a general website contact form unless requested by Aurum through an approved secure channel.

9. Sharing Personal Information

We do not sell personal information.

We may disclose information where reasonably necessary to:

• employees and authorised personnel of Aurum;
• professional advisers;
• accountants, lawyers or consultants;
• banks and payment providers;
• technology and cloud-service providers;
• payroll or accounting software providers;
• website hosting and IT providers;
• government departments;
• the Ghana Revenue Authority;
• Office of the Registrar of Companies;
• SSNIT or pension service providers;
• regulators;
• law-enforcement authorities; or
• other parties where you have authorised the disclosure.

Where third parties process personal information on our behalf, we will seek to ensure appropriate confidentiality, security and contractual arrangements are in place.

10. International Transfers and Access

Some of our technology, software, cloud storage or professional support services may involve personal information being stored, accessed or processed outside Ghana.

Where this occurs, Aurum will take reasonable steps to ensure that:

• the transfer is lawful;
• appropriate confidentiality and security measures are applied;
• the recipient is subject to suitable contractual safeguards; and
• processing remains consistent with applicable Ghanaian data protection requirements.

11. Data Security

We take reasonable technical and organisational measures to protect personal information against:

• unauthorised access;
• accidental loss;
• unlawful processing;
• alteration;
• disclosure;
• destruction; and
• misuse.

Depending on the type of information concerned, these measures may include:

• password-protected systems;
• access restrictions;
• secure cloud storage;
• multi-factor authentication;
• encryption where appropriate;
• staff confidentiality requirements;
• secure document-sharing procedures;
• backups;
• antivirus and cybersecurity controls; and
• access monitoring.

12. Data Breaches

If we become aware that personal information may have been accessed or acquired by an unauthorised person, we will investigate the matter and take appropriate remedial action.

Where required by Act 843, we will notify the Data Protection Commission and affected individuals as soon as reasonably practicable.

13. How Long We Keep Personal Information

We will retain personal information only for as long as reasonably necessary for:

• the purpose for which it was collected;
• performance of our contractual obligations;
• accounting and tax requirements;
• corporate and regulatory requirements;
• professional record-keeping requirements;
• dispute resolution;
• fraud prevention; or
• establishment, exercise or defence of legal claims.

Different categories of information may therefore have different retention periods.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it, subject to applicable legal requirements.

14. Direct Marketing

We may occasionally send information about Aurum services, events or business updates where we have the appropriate permission to do so.

We will not use personal information for direct marketing in circumstances where consent is required without first obtaining the appropriate consent.

You may withdraw your marketing consent at any time by contacting us at:

admin.aurumadvisory@gmail.com

15. Cookies

Our website may use cookies or similar technologies to:

• enable basic website functionality;
• remember preferences;
• understand how visitors use the website;
• measure website performance; and
• support marketing activities where applicable.

Where required, we will request your consent before placing non-essential cookies on your device.

A separate Cookie Notice may provide further details about the cookies used on our website.

16. Your Rights

Subject to Act 843 and applicable limitations, you may have the right to:

• be informed about the processing of your personal information;
• request access to your personal information;
• request correction of inaccurate or incomplete information;
• object to particular types of processing;
• request that certain processing stop;
• withdraw consent where processing is based on consent;
• object to direct marketing;
• raise a complaint concerning our handling of your information; and
• exercise applicable rights in relation to automated decision-making.

To exercise a privacy right, contact:

admin.aurumadvisory@gmail.com

We may need to verify your identity before fulfilling a request.

17. Automated Processing and Artificial Intelligence

Aurum may use digital tools and artificial intelligence to support certain internal processes and client services, including:

• content development;
• workflow automation;
• document preparation;
• marketing support;
• data analysis; and
• administrative efficiency.

We do not intend to make decisions that significantly affect individuals solely through automated processing unless appropriate safeguards and legal requirements have been addressed.

Confidential client information should not be submitted to public AI platforms unless appropriate contractual, privacy, information-security and client-approval requirements have been satisfied.

18. Links to Other Websites

Our website may contain links to external websites.

Aurum is not responsible for the privacy practices, security or content of third-party websites. You should review the privacy policies of those websites before submitting personal information.

19. Children’s Information

Our services are primarily directed to businesses and adult professional contacts.

We do not intentionally collect personal information from children through our website unless it is necessary for a specific authorised service and appropriate safeguards and permissions are in place.

20. Complaints

If you believe we have processed your personal information improperly, please contact us first so that we can investigate your concern.

You also have the right to lodge a complaint with the Data Protection Commission of Ghana.

Website: https://dataprotection.org.gh/

21. Changes to This Privacy Notice

We may update this Privacy Notice periodically to reflect:

• changes in our services;
• changes in law or regulatory guidance;
• new technology;
• changes in how we process personal information; or
• improvements to our privacy practices.

The latest version will be published on our website with the applicable “Last Updated” date.

22. Contact Us

For questions about this Privacy Notice or the way Aurum processes personal information, please contact: