Privacy Policy

This Privacy Policy outlines UASA Sacco's practices regarding the collection, use, and disclosure of your information when you use our Service. It also informs you of your privacy rights and the legal protections in place for your personal data under the Data Protection Act, 2019 (Kenya) and applicable Sacco Societies Regulatory Authority (SASRA) guidelines.

By using our Service, you consent to the collection and use of your information as described in this Privacy Policy.

Interpretation

Words with capitalised initial letters have defined meanings outlined below. These definitions apply consistently, whether appearing in singular or plural form.

Definitions

• Account: A unique account created for you to access our Service or parts of our Service.
• Company: UASA Sacco (UASA-K SACCO), UASA House, Nairobi CBD, Nairobi, Kenya.
• Cookies: Small files placed on your computer, mobile device, or any other device by a website, containing details of your browsing history among other uses.
• Country: Kenya
• Device: Any device that can access the Service, such as a computer, cellphone, or digital tablet.
• Personal Data: Any information that relates to an identified or identifiable individual.
• Service: The Website and associated digital channels, including the UASA Sacco mobile app, USSD (*886#) and WhatsApp services.
• Service Provider: Any natural or legal person who processes data on behalf of the Company.
• Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (e.g., duration of a page visit).
• Website: UASA Sacco, accessible from https://www.uasasacco.com/
• You: The individual accessing or using the Service, or the company or legal entity on whose behalf such individual is accessing or using the Service.

Personal Data

While using our Service, we may ask you to provide personally identifiable information, including but not limited to:

• Email address
• First and last name
• Phone number
• National ID number and other KYC details required for membership, loan or SME/LPO financing applications

Usage Data

Usage Data is collected automatically when using the Service and may include your device's IP address, browser type and version, pages visited, time and date of visits, time spent on pages, unique device identifiers and other diagnostic data. When accessing the Service via a mobile device, we may collect additional information such as device type, unique ID, IP address, operating system, browser type and diagnostic data.

We use Cookies and similar tracking technologies (such as beacons, tags, and scripts) to monitor activity and improve our Service.

• Cookies or Browser Cookies: Small files placed on your device. You can refuse cookies via browser settings, but this may affect Service functionality.
• Web Beacons: Small electronic files in certain sections of our Service and emails to count users, record popularity, and verify system integrity.
• Persistent Cookies: Remain on your device when offline.
• Session Cookies: Deleted as soon as you close your web browser.

Types of Cookies Used

• Necessary / Essential Cookies (Session): Enable core website features and authenticate users, including for Member Login and Join Now applications.
• Cookies Policy / Notice Acceptance Cookies (Persistent): Identify if users have accepted cookie usage.
• Functionality Cookies (Persistent): Remember preferences such as login details and language.

UASA Sacco may use Personal Data for the following purposes:

• To provide and maintain our Service
• To manage your Account and membership
• For the performance of a contract, including loan, savings and SME/LPO financing agreements
• To contact you via email, phone, SMS, WhatsApp or push notifications for updates and important communications
• To deliver news, special offers, and information about similar products, services and events
• To manage your requests
• For business transfers
• For other purposes such as data analysis and Service improvement

Your information may be shared:

• With Service Providers
• For business transfers
• With affiliates
• With business partners
• With other users (in public areas)
• With your consent

We retain your Personal Data only as long as necessary for the purposes outlined in this policy, as required by law, or to resolve disputes and enforce agreements. Usage Data is generally kept for a shorter period unless needed for security or functionality improvements.

Your information may be processed and maintained outside your governmental jurisdiction. We do not intend to transfer your Personal Data outside Kenya unless necessary for a legal obligation or otherwise in the public interest, and we take all reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy wherever it is transferred.

You have the right to delete your Personal Data. You may do so through your account settings or by contacting us. Some information may be retained as required by law.

• Business Transactions: Your data may be transferred in case of a merger, acquisition, or asset sale, with prior notice provided.
• Law Enforcement: Data may be disclosed if required by law or public authorities, including SASRA and law enforcement.
• Other Legal Requirements: To comply with legal obligations, protect rights and safety, or prevent wrongdoing or liability.

We strive to use commercially acceptable means to protect your data, but no method of transmission or storage is 100% secure.

Our Service is not intended for anyone under age 18. We do not knowingly collect information from minors; if we become aware of such collection, we will delete the information. Parental consent may be required in certain jurisdictions.

Our Service may contain links to third-party sites. We are not responsible for their privacy practices and advise reviewing their policies.

We may update this Privacy Policy periodically. We will notify you of changes by posting the new policy on this page and via email and/or prominent notice. Changes become effective upon posting.

If you have any questions about this Privacy Policy, please contact us:

Data Protection Officer: dpo@uasasacco.com
Note: the Data Protection Officer email should be confirmed and formally designated by UASA Sacco's board/management before this policy is published, if not already in place.