Privacy Policy

1 Information We Collect

We collect several types of information to provide and improve our Services:

Personal Information You Provide

• Identity Data: Full name, date of birth, national ID, passport number, photograph.
• Contact Data: Email address, phone number, postal address.
• Financial Data: Mobile money numbers, bank account details, transaction history.
• Business Data: Company name, registration details, tax identification number.
• Communications: Messages you send us via email, contact forms, or WhatsApp.

Information Collected Automatically

• Device Data: IP address, browser type, operating system, device identifiers.
• Usage Data: Pages visited, time spent, referring URLs, click patterns.
• Location Data: Approximate geographic location based on IP address.

2 How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Services.
• To process payments, collections, and disbursements on your behalf.
• To verify your identity and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• To communicate with you about transactions, updates, and support requests.
• To detect, prevent, and address fraud, security breaches, or technical issues.
• To personalise and improve our Services, including analytics and product development.
• To comply with legal, regulatory, and tax obligations in Uganda.

3 Legal Basis for Processing

We process your personal information on the following legal bases:

• Contractual Necessity: To perform our contract with you (e.g., processing payments).
• Legal Obligation: To comply with laws such as the Uganda Data Protection and Privacy Act, 2019, and financial regulations.
• Legitimate Interests: To improve our Services, prevent fraud, and ensure security.
• Consent: Where you have explicitly agreed to specific processing activities.

4 Sharing Your Information

We do not sell your personal information. We may share it with:

• Mobile Money Operators (MMOs): Such as MTN and Airtel, to process your transactions.
• Banks & Financial Institutions: To facilitate settlements and reconciliation.
• Regulatory Authorities: Including the Bank of Uganda and the National Information Technology Authority (NITA-U), where legally required.
• Service Providers: Trusted third parties who help us operate our Services (e.g., hosting, analytics, customer support), bound by strict confidentiality agreements.
• Legal & Compliance: When required by law, court order, or to protect our legal rights.

5 Data Security

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Strict access controls and role-based permissions.
• Regular security audits and vulnerability assessments.
• Employee training on data protection and confidentiality.

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6 Data Retention

We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. For example, financial records are retained for at least 7 years to comply with Uganda's financial regulations.

7 Your Rights

Under the Uganda Data Protection and Privacy Act, 2019, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention obligations.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Personal Data Protection Office (PDPO).

To exercise any of these rights, please contact us using the details in the "Contact Us" section below.

8 Cookies

Our website uses cookies and similar technologies to enhance your experience, analyse usage, and remember your preferences. You can control cookies through your browser settings. Disabling cookies may affect some features of our Services.

9 Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10 Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of our Services after such changes constitutes your acceptance of the updated policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please reach out to us: