Privacy Policy

Global Africa Bank

Last Updated: November 02, 2025

Global Africa Bank (“we,” “us,” or “the Bank”) is committed to protecting your privacy and handling your personal information responsibly, in line with Shari’ah principles of trust, transparency, and ethical stewardship. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (globalafricabank.com), submit inquiries, or express interest in our services.

We adhere to major global data protection standards, including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and best practices for financial institutions (e.g., Gramm-Leach-Bliley Act safeguards). As a Shari’ah-compliant institution based in Djibouti, we prioritize halal data practices. This means we ensure that no information is misused and that full accountability is maintained.

Please read this policy carefully. By using our website, you consent to the practices described herein.

1. Information We Collect

We collect information you provide directly or that is generated through your interactions with our site:

• Personal Information: Name, email address, phone number, nationality, address, and any details shared via contact forms, subscription inquiries, or Investor Relations requests (e.g., investment interest).
• Inquiry-Related Data: Details from capital subscription expressions of interest, such as preferred investment amount or KYC document references (handled securely and manually).
• Technical Data: IP address, browser type, device information, and usage data (e.g., pages visited) via cookies and analytics tools.
• Sensitive Data: We do not collect financial account details, religious beliefs, or other sensitive categories unless explicitly required for ethical, Shari’ah-compliant verification. We collect this only with your explicit consent.

We collect this information only for legitimate purposes, such as responding to inquiries or promoting our ethical banking mission.

2. How We Use Your Information

Your data supports our operations in a transparent, ethical manner:

• To respond to inquiries, provide Prospectus summaries, or guide you on subscription processes.
• To improve our website and services (e.g., analytics for better user experience).
• To comply with legal obligations, such as anti-money laundering (AML) screening or Shari’ah audits.
• For internal purposes, like security, fraud prevention, and ethical investment screening (e.g., ensuring halal sources).
• With your consent, to send updates on our Shari’ah-compliant initiatives or AfCFTA-aligned opportunities.

We process data based on consent, legitimate interests (e.g., site security), or legal requirements. All processing aligns with Maqasid al-Shariah (objectives of Islamic law), promoting justice and welfare.

3. Sharing Your Information

We do not sell your data. We share only when necessary and with safeguards:

• Service Providers: Trusted partners for hosting (e.g., ICDSoft), analytics, or email services. These are bound by strict contracts requiring GDPR-level protection.
• Shari’ah Supervisory Board: For compliance reviews, ensuring ethical handling.
• Regulators/Legal Authorities: As required by Djibouti law, Banque Centrale de Djibouti, or international standards (e.g., AML/CTF).
• Affiliates/Partners: Limited to ethical, Shari’ah-approved collaborations (e.g., AfCFTA-aligned initiatives).

International transfers (e.g., to EU-based servers) use safeguards like Standard Contractual Clauses.

4. Data Security

We employ robust measures to protect your information:

• Encryption: SSL/TLS for all transmissions.
• Access Controls: Limited to authorized personnel trained in Shari’ah ethics and data protection.
• Audits: Regular internal/external Shari’ah and security audits.
• Breach Response: Prompt notification if a breach occurs, per GDPR/CCPA timelines.

Despite our efforts, no system is infallible. We encourage safe practices on your end.

5. Your Rights

You have control over your data:

• Access/Correction: Request a copy or updates.
• Deletion: Ask us to erase your data (subject to legal retention).
• Opt-Out: Withdraw consent for marketing or object to processing.
• Portability: Receive your data in a structured format.
• Non-Discrimination: No penalties for exercising rights (CCPA).

EU/UK residents: Additional GDPR rights, including lodging complaints with supervisory authorities.

Submit requests to privacy@globalafricabank.com (mailto:privacy@globalafricabank.com). We respond within 30 days (or as required by law).

6. Cookies and Tracking

We use essential cookies for site functionality and analytics (e.g., Google Analytics: aggregated, anonymized). No profiling for ads. Manage preferences via your browser or our cookie banner.

7. Children’s Privacy

Our site is not for children under 16. We do not knowingly collect their data.

8. Changes to This Policy

We may update this policy for new services or regulations. Changes are posted here with the updated date. Significant changes will be notified via email or site notice.

9. Contact Us

For questions, rights exercises, or complaints:

• Data Protection Officer: privacy@globalafricabank.com
• Address: Global Africa Bank, Head Office, Djibouti City, Djibouti

We value your trust and handle inquiries with utmost confidentiality.

Disclaimer: This policy is informational and subject to Djibouti law. Consult legal experts for personalized advice. We are not liable for third-party sites.

Thank you for choosing ethical banking with Global Africa Bank.