Data Privacy Policy

▸ About Pesa Pot SACCO

Pesa Pot Savings and Credit Society (hereafter referred to as "Pesa Pot SACCO" or "the Sacco") is a duly registered Sacco in Kenya, regulated by the Sacco Societies Regulatory Authority (SASRA) to offer financial services to its members. The Sacco uses the data subject's personal data to provide and improve its services. By using these services, the data subject agrees to the collection and use of information in accordance with this policy.

▸ About This Privacy Policy

Pesa Pot SACCO is committed to protecting the data subject's personal data and respecting the data subject's privacy.

This Privacy Policy explains in detail the types of personal data the Sacco may collect about the data subject when the data subject interacts with us through any of our contact points — including visiting our premises, requesting to join our membership, requesting for credit (Pesapap Instant Loan, Hela Loan, Dola Loan, Elimu Loan, or Development Loan), savings deposits, general inquiries, and membership exit.

Interaction points may be over the phone, in person at our office (Longonot Centre, Adjacent to Racemart Supermarket, 1st Floor, Nairobi), over email, or via our enquiry forms on our website or social media platforms. This Policy also explains how we store and handle that data, keep it safe, and tell the data subject about privacy rights and how the law protects them.

The Sacco reserves the right to update this Privacy Policy from time to time. We will notify the data subject of any significant changes.

1. Scope of This Policy

This Policy applies to all interactions with Pesa Pot SACCO, including:

• Online and mobile platforms (including WAKANDI APP and USSD *789*103#)
• Website visitors and digital services
• Customer support interactions (phone, email, chat)
• Office visits at our Nairobi branch
• Membership registration, loan applications, and savings account transactions

2. Collection of Personal Data

2.1 Why We Collect Your Personal Data

Some of the purposes for which we collect and process your data include:

• To provide and maintain our financial services, including loan disbursement and savings management.
• To comply with legal obligations under Kenyan law, including SASRA regulations.
• To notify you about changes to our services or products.
• To allow you to participate in interactive features of our services.
• To provide member support and respond to inquiries.
• To gather analysis or valuable information to improve our services.
• To monitor the usage of our services and detect fraud.
• To detect, prevent, and address technical issues.
• To provide you with news, special offers, and general information about our loan products and financial services.

2.2 What We Collect

We shall collect data directly from you or from authorized third-party sources as needed. This may include:

We may also collect personal data of individuals connected to a member that are relevant to their relationship with us, including company directors, shareholders, guarantors, next of kin, nominees, beneficiaries, agents, and holders of Powers of Attorney (PoA).

2.3 Legal Basis for Processing Your Information

• Where we have your consent to do so.
• Where we need the personal information to perform a contract with you (e.g., provide you with a loan product you have applied for).
• Where the processing is in our legitimate interests and not overridden by your rights.
• Where we have a legal obligation to collect personal information from you under Kenyan law or SASRA regulations.

3. Sharing Your Information

Pesa Pot SACCO will share your personal data with relevant and authorized third parties including the Sacco's service providers, regulators (including SASRA and the Office of the Data Protection Commissioner), credit reference bureaus, and others as appropriate and required by law.

4. Cross-Border Data Transfers

Your personal data may be transferred to jurisdictions outside Kenya for purposes outlined in this Data Privacy Policy. Such transfers will only occur where lawful and necessary — for example, where the receiving party is subject to adequate data protection safeguards, where you have provided consent, or where the transfer is required for the performance of a contract. Pesa Pot SACCO and its service providers will ensure appropriate measures are in place to protect your data in transit and at rest.

5. Safeguards and Security of Data

Pesa Pot SACCO endeavors to protect your personal data through diverse technical, administrative, operational, structural, and other measures to ensure confidentiality, integrity, and availability objectives are met. Our systems used for digital payments including WAKANDI APP, USSD *789*103#, and M-Pesa Paybill services are handled securely in accordance with applicable financial and data security standards.

6. Your Privacy Rights

As a Data Subject you have the following rights as set out in the Data Protection Act No. 24 of 2019 of Kenya:

• The right to be informed of the use of your information/data.
• The right to access, update or delete the information or data in our custody.
• The right of rectification — to have your information rectified or deleted if it is misleading, inaccurate or incomplete.
• The right to object to our processing of your Personal Data.
• The right to object to automated processing of your Personal Data.
• The right of restriction — to request that we restrict the processing of your personal information.
• The right to data portability — to receive your data in a structured, machine-readable format.
• The right to withdraw consent at any time without detriment to your interests.

7. Data Retention

Pesa Pot SACCO will retain your Personal Data only for as long as is necessary for the purposes set out in this Data Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (including SASRA regulatory requirements), resolve disputes, and enforce our legal agreements and policies.

8. Cookies, Tracking & Digital Advertising

Our website uses cookies — small files stored on your device used to collect certain information. You may choose to refuse cookies, but some functionality of the website may no longer be available to you. For more information, please see our Cookies Policy.

9. Automated Decision-Making & Profiling

Automated decision-making may be used to assist with lending decisions (including evaluation of loan applications for Pesapap Instant Loan, Hela Loan, Dola Loan, Elimu Loan, and Development Loan), financial crime prevention, account management, and the personalization of products and services. If any automated decision affects your rights or freedoms, a human review will be conducted to ensure fairness and accuracy.

You have the right to request human review of any decision made through an automated process, by lodging a rights request as per Clause 6 above.

10. Children's Privacy

We collect personal data of minors only where accounts and services specifically require such data, with minimal data collected and with parental or legal guardian consent. We do not knowingly collect or maintain personal information from persons under 18 years of age, and no part of this website is directed to persons under 18. If you are under 18, please do not use or access this website. We will take appropriate steps to delete any personal information of persons less than 18 years of age that comes to our attention.

11. Complaints

To submit any complaints regarding data privacy and protection, you may:

12. Privacy Policy Review

Pesa Pot SACCO may update this Data Privacy Policy from time to time. We will notify you of any changes by posting the new Data Privacy Policy on our website and, where appropriate, via email or a prominent notice on our service prior to the change becoming effective.

13. Contact Information