Legal
Privacy Policy
How we handle your personal information. Because we collect NRC numbers, payslips and bank statements, this must be reviewed against the Data Protection Act 2021 before launch.
1. Who controls your data
This section must set out: The registered entity acting as data controller, and contact details for data questions.
2. What we collect
This section must set out: Identity, contact, address, employment, income, banking and document data - listed specifically, not generally.
3. Why we collect it
This section must set out: The purpose of each category and the lawful basis relied on for processing it.
4. Who we share it with
This section must set out: Employers for payroll verification, banks, credit reference bureaux, and any service provider - each named by category with the reason.
5. Where it is stored
This section must set out: The country in which data is hosted. If data leaves Zambia, the safeguards relied on must be stated here.
6. How long we keep it
This section must set out: A retention period for applications that are declined, and for loans that are settled.
7. How we protect it
This section must set out: Access controls, who inside the business can see what, encryption and audit logging.
8. Your rights
This section must set out: Access, correction, deletion, objection and withdrawal of consent, and how to exercise each.
9. Cookies and analytics
This section must set out: What the website itself stores or measures, if anything.
10. Complaints about data
This section must set out: How to complain to us, and the right to complain to the Data Protection Commissioner.
Once approved wording is supplied it is inserted here and this notice is removed. Each section is stored separately so it can be updated without rebuilding the site.