PRIVACY POLICY FOR TAQWA SACCO
1. INTRODUCTION
Taqwa Sacco (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal and financial data in compliance with the Kenyan Data Protection Act (2019) and global data protection standards. This Privacy Policy outlines how we collect, process, store, share, and secure your information when you interact with our website, mobile applications, and services (collectively, the “Services”).
By accessing or using our Services, you consent to the practices described in this policy. If you do not agree, please refrain from using our Services. We ensure that your data is processed lawfully, fairly, and transparently.
2. INFORMATION WE COLLECT
A. Personal Information
We collect the following personal data to provide and improve our Services:
Membership & Account Registration
– Full legal name
– Date of birth
– Gender
– National ID/Passport number
– KRA PIN (where applicable)
– Signature (for verification)
Contact & Demographic Information
– Email address
– Phone number(s)
– Physical and postal address
– Next of kin details (name, relationship, contact)
Financial & Transactional Data
– Bank account details
– Loan application details (income, employment history, credit history)
– Deposit and withdrawal records
– Transaction history (contributions, dividends, loan repayments)
Employment & Business Information
– Employer details
– Pay slips or proof of income
– Business registration documents (for business accounts)
B. Non-Personal & Technical Data
– Device Information: IP address, browser type, operating system
– Usage Data: Pages visited, time spent, clickstream data
– Cookies & Tracking Technologies: Session cookies, analytics tools (Google Analytics)
3. LEGAL BASIS FOR PROCESSING
We process your personal data based on the following legal grounds:
– Consent: Where you have given explicit consent for specific processing activities.
– Contractual Necessity: To fulfill our obligations under the membership agreement.
– Legal Obligations: To comply with regulatory requirements (e.g., SASRA, KRA).
– Legitimate Interests: For internal administrative purposes, fraud prevention, and improving our Services.
4. DATA SHARING & THIRD-PARTY DISCLOSURES
We may share your data with:
A. Internal Parties
– Sacco management & staff (on a need-to-know basis)
– Auditors & compliance teams
B. External Parties
– Banks & payment processors
– Credit Reference Bureaus (CRBs)
– Government regulators (SASRA, KRA)
– Legal authorities (court orders)
– IT service providers (under strict confidentiality agreements)
We ensure that all third parties comply with data protection laws and only process your data for specified purposes.
5. DATA SECURITY MEASURES
We implement robust security measures to protect your data, including:
– Encryption (SSL/TLS)
– Access controls (role-based access)
– Firewalls
– Regular security audits
– Staff training on data protection
In the event of a data breach, we will notify you and the relevant authorities within 72 hours, as required by law.
6. YOUR RIGHTS
Under the Kenyan Data Protection Act (2019) and global standards, you have the following rights:
✓ Access your data
✓ Request corrections to inaccurate or incomplete data
✓ Delete data (where applicable)
✓ Restrict processing of your data
✓ Object to marketing and other processing activities
✓ Withdraw consent at any time
✓ Data portability: Request a copy of your data in a structured, machine-readable format
To exercise these rights, contact us at:
+254 702 332 211
7. DATA RETENTION
We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
– Active members: Duration of membership + 7 years
– Loan records: 10 years
– Marketing data: Until opt-out
8. COOKIES POLICY
We use cookies to enhance your experience on our website. These include:
– Essential cookies (necessary for website functionality)
– Analytics cookies (to understand usage patterns)
– Marketing cookies (only with your opt-in consent)
You can manage cookies via your browser settings.
9. CHILDREN’S PRIVACY
Our Services are not intended for users under the age of 18. We do not knowingly collect or process data from minors without parental consent.
10. INTERNATIONAL DATA TRANSFERS
If your data is transferred outside Kenya, we ensure that adequate safeguards are in place to protect your data, in compliance with the Kenyan Data Protection Act and international standards.
11. POLICY UPDATES
We may update this Privacy Policy from time to time. Any changes will be posted on our website with a new effective date, and we will notify you of significant changes via email or other communication channels.
12. CONTACT US
For any questions or concerns regarding your data privacy, please contact:
Taqwa Sacco Customer Care Officer
Address: Jamia Plaza, Kigali Street
Email: customercare@taqwasacco.co.ke
Phone: +254 702 332 211
You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya if you believe your data rights have been violated.