Privacy Policy

1. What we collect

• Identity and contact details: name, ID or passport number, date of birth, KRA PIN, address, phone and email.
• Financial information: savings contributions, loan applications and balances, repayments, guarantor commitments.
• KYC documents you provide, and — for groups — registration certificates, officials' IDs and resolutions.
• Nominee details you choose to record.

2. How we use it

To operate your membership, process savings and loans, assess eligibility, meet legal and regulatory obligations, prevent fraud, and communicate with you about your account. We do not sell your personal information.

3. How we protect it

Access is restricted by role and enforced on the server. Passwords are stored using strong hashing, sessions can be revoked, and sensitive actions generate an audit trail. Logs never contain passwords, tokens or full ID numbers. Backups are encrypted and restore procedures are tested.

4. Sharing

We share information only where necessary to provide services (for example payment processors), where required by law, or with your consent. Guarantors see only the loan amount they are guaranteeing.

5. Your choices

You can update your details, set your preferred communication channels, and request a copy of the information we hold about you by contacting the SACCO.