Draft for review. This policy should be checked by a qualified legal adviser against Ghana's Data Protection Act, 2012 (Act 843) before Creda launches publicly.
Who we are
Creda is a digital platform based in Accra, Ghana, that helps micro and small businesses build business profiles and connect with participating licensed lenders. Creda is not a lender and does not make credit decisions.
What we collect
Account details (name, email, phone), business profile details (business type, location, years operating, staff, revenue and expense figures), financing requests, supporting documents you choose to upload, your consent choices, and records of activity on your account.
How we use it
To run your account, help match your financing request with a participating lender, keep you informed about your application, keep the service secure, and meet legal obligations. We do not sell your information.
When lenders can see your information
A lender can see your application, business profile and documents only when all of these are true: our team has matched your application with that lender, the lender has an active partnership agreement with Creda, and you have given consent. You can withdraw consent at any time from your application page, and the lender loses access on Creda immediately. Information a lender already reviewed may be kept by that lender under its own legal obligations.
Who else can see it
Authorised Creda staff, for operating and supporting the service. Our hosting and email providers process data on our behalf under appropriate safeguards.
How we protect it
Access is controlled per account and per role. Documents are stored privately and opened only through short-lived links. Important actions such as status changes, consent and document uploads are recorded in an audit trail.
How long we keep it
For as long as your account is active and afterwards only as long as required for legal, regulatory or dispute purposes.
Your rights
You can ask to access, correct or delete your information, or withdraw all consents. Signed-in users can make a request from Privacy requests; anyone else can contact us.
Last updated: October 2026.