KUZA CAPITAL FINANCE TANZANIA LIMITED - Privacy Policy

KUZA CAPITAL FINANCE TANZANIA LIMITED ("KUZA CAPITAL")

KUZA CAPITAL is committed to protecting your personal data in compliance with the Personal Data Protection Act, 2022 of Tanzania and other relevant regulations. This Privacy Policy outlines how we collect, use, store, and disclose your personal information with transparency and accountability. .

1. Scope of the Policy

This Privacy Policy applies to:

• Customers using KUZA CAPITAL's financial services, including KUZA Sokoni, KUZA Kilimo, KUZA Biashara, and KUZA Maisha.
• Users interacting with KUZA CAPITAL’s digital platforms (websites, mobile applications).
• Vendors, partners, and stakeholders associated with KUZA CAPITAL.

2. Collection of Personal Information

We collect personal data for specific purposes, including:

• Onboarding: Registration for KUZA CAPITAL loan services.
• Credit Assessment: Credit scoring and repayment monitoring. The credit scoring assessment is only done after borrower’s consent as required by regulatory bodies and Credit Reference Bureau.
• Customer Support: Resolving inquiries and offering assistance.
• Marketing: Sending relevant offers (subject to consent).

During onboarding, the borrower will be required to provide or KUZA CAPITAL will collect the following data:

• Identification Data: Name, ID/passport numbers.
• Contact Information: Phone numbers, email, addresses.
• Financial Data: Transaction history, credit reports, loan balances.
• Digital Data: IP addresses, cookies, device information (for app/website usage).

Special Clause for Sensitive Data: We may collect sensitive data such as biometric information only where necessary for identity verification, with your explicit consent.

3. Use of Personal Information

Your personal data may be used for:

• Credit Facility Operations: Loan processing, repayment tracking, and service improvements.
• Legal Compliance: Meeting obligations under laws and regulations, specifically the requirements of the Personal Data Protection Commission and Bank of Tanzania.
• Fraud Prevention: Monitoring and mitigating risks of fraud or misuse.
• Personalization: Enhancing user experiences on digital platforms.

Prohibited Uses: KUZA CAPITAL will not sell or use personal data for purposes unrelated to the services offered.

4. Legal Basis for Processing

We process your personal data based on:

• Your explicit consent during registration.
• Performance of contractual obligations (loan agreements).
• Compliance with legal obligations (e.g., reporting to regulators).
• Legitimate interests of KUZA CAPITAL (e.g., fraud detection, business improvement).

5. Data Sharing and Cross-Border Transfers

KUZA CAPITAL shares personal data only when necessary and ensures adequate protections:

• Third-Party Vendors: Payment processors, IT service providers.
• Credit Reference Bureaus: Assessing creditworthiness.
• Regulatory Authorities: Meeting legal requirements.

Cross-Border Transfers: For data shared with entities outside Tanzania, KUZA CAPITAL ensures compliance with Tanzanian regulations by implementing safeguards such as data transfer agreements.

6. Data Security

KUZA CAPITAL implements the following security measures:

• Encryption: For data in transit and at rest.
• Access Control: Restricting access to authorized personnel.
• Regular Audits: Conducting frequent assessments to ensure compliance.

Incident Reporting: In case of data breaches, affected individuals will be notified within 72 hours.

7. Data Retention and Disposal

Personal data is retained only as long as necessary for the purposes outlined or as required by law.

• Loan-related data: Retained for 7 years after account closure.
• Marketing data: Retained for 1 year post-customer consent withdrawal.

After the retention period, data will be securely deleted or anonymized.

8. Your Rights as a Data Subject

You have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request updates to inaccurate data.
• Deletion: Request deletion of data (subject to legal obligations).
• Data Portability: Request data in a machine-readable format.
• Object to Processing: Oppose certain types of data use.
• Restrict Processing: Limit the use of your data in specific circumstances.

To exercise these rights, contact the Data Protection Officer at malalamiko@kuza.co.tz or 0744 980 220.

9. Consent Management

By engaging with KUZA CAPITAL, you consent to data collection and processing as outlined.

• Consent for marketing activities can be withdrawn anytime through our digital platforms or by contacting us.
• Failure to provide consent may limit access to certain services.

10. Updates to This Privacy Policy

KUZA CAPITAL will periodically update this Privacy Policy. Notifications of updates will be provided via email or our digital platforms. Changes will take effect immediately upon posting.

11. Accountability and Contact Information

KUZA CAPITAL has appointed a Data Protection Officer responsible for overseeing compliance with the Personal Data Protection Act, 2022.

Contact the DPO: