Privacy Policy
Effective Date: 01/01/2025
At Zimba SACCO Ltd ("we", "our", or "us"), we are committed to protecting your privacy and the confidentiality of your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our mobile app, USSD platform, website, and other services. By becoming a member or using any of our services, you consent to the practices described in this policy.
Information We Collect
We collect the following categories of data:
a. Personal Identification Information
- Full name, date of birth, gender
- National ID or identification number
- Phone number, email address, and residential address
- Biometric data (where applicable)
b. Financial Information
- Account details
- Savings and loan activity
- CRB records and credit history
- Transaction and payment records
c. Device & Usage Information
- Mobile device ID, model, and operating system
- IP address and geolocation (with your consent)
- Log data on usage of app, USSD, or website
How We Use Your Information
We use your data to:
- Verify your identity and onboard you as a member
- Assess your creditworthiness and process loan applications
- Manage your savings, loans, and other transactions
- Share relevant reports with credit reference bureaus (CRBs)
- Communicate updates, reminders, or alerts via SMS, email, or push notifications
- Improve our services, features, and customer experience
- Comply with regulatory requirements
Data Sharing and Disclosure
We do not sell your data. However, we may share your data with:
- Credit bureaus, for loan processing and reporting
- Telecoms and payment providers, for mobile money and KYC verification
- Regulatory authorities, to meet legal obligations
- Trusted partners, such as NGOs or financial institutions, where required by partnerships (with safeguards)
All partners and processors are bound by data protection agreements.
Data Security
We use strong technical and organizational measures to protect your data, including:
- End-to-end encryption
- Two-factor authentication
- Access control and audit trails
- Regular system updates and vulnerability assessments
Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate information
- Withdraw consent for data processing (where applicable)
- Request deletion of your data, subject to regulatory limits
- File a complaint with the Personal Data Protection Office (PDPO) of Uganda
Requests can be made by contacting our Data Protection Officer (see Section 8).
Data Retention
We retain your personal data:
- As long as you are a member and for a minimum of 5 years after account closure, in line with financial regulations
- For a shorter or longer duration if required by law, a loan dispute, or audit
Cookies and Analytics (if applicable)
If you use our website, we may use cookies and similar tools to:
- Understand site usage patterns
- Improve performance and user experience
You may manage cookie preferences through your browser settings.
Contact Our Data Protection Officer
Data Protection OfficerZimba SACCO LtdEmail: privacy@zzzimba.comPhone: +256-75-8267255Office: Imani Complex, Kira MulawaPolicy Updates
We may update this Privacy Policy periodically. Significant changes will be communicated via app notifications, SMS, or email. Please review this policy regularly.
Governing Law
This policy is governed by the Data Protection and Privacy Act, 2019 of Uganda and other relevant local laws.