Privacy Policy
Disclosure of Permissions
At Shamwa, we are committed to transparency and the protection of your privacy in accordance with the Zambia Data Protection Act, 2021, and other applicable regulations. To evaluate your eligibility and ensure a smooth loan approval process, we require specific permissions to access certain data from your device. All data collected is securely transmitted, stored, and used solely to deliver our services. We will not share your data with third parties without your explicit consent.
Device Information
Each time you apply for pre-approval, we collect device-related data to verify your identity and prevent fraud. This includes device model, operating system details, unique identifiers (e.g., IMEI, serial number), and environmental parameters (e.g., screen settings, language preferences).
Additionally, we assess installed apps, focusing only on financial apps, by collecting their names, version numbers, and installation details. Non-financial apps are excluded from analysis. No data is transmitted unless you initiate the application process.
All collected data is encrypted during transfer and securely stored on our systems.
Network Data
To enhance security and optimize services, we collect the following network-related information:
1. Wi-Fi State: To assess network risks and irregularities.
2. Network State: To monitor risks and prevent data loss during connectivity issues.
3. Additional Details: Includes IP address, MAC address, network type, and SIM details.
Application List Permissions
To prevent fraud and malware risks, we analyze your device's operating environment by examining your list of installed applications. This includes collecting app names, version details, and installation times. Non-financial apps and unauthorized software are excluded from analysis.
All data is encrypted during transfer and securely stored on our servers at https://oaleayuca.shamwa-credit.com.
Data Security and Storage
We use industry-standard encryption and security measures to securely transfer and store your data. Without your explicit consent, no data will be shared with third parties. If you choose not to proceed with a loan application, no data will be uploaded.
Data collected includes your name, device details, and information relevant to financial transactions. We may also integrate financial data from external institutions to improve credit evaluations. By using our services, you agree to the secure collection, processing, and storage of your data.
Use of Data
We collect data through the following methods:
1. Direct Submission: Information provided by you when using our services, such as during loan applications or customer support interactions.
2. Automated Collection: Data captured from your device during app usage, including logs and device environment details.
Purpose of Data Usage:
- Identity verification and credit scoring.
- Loan assessment and credit risk evaluation.
- Payment monitoring and collections.
- Statistical analysis and service optimization.
Data Sharing and Transmission
Shamwa Credit may share personal data under the following circumstances:
1. Affiliates and Subsidiaries: For product development, performance analysis, and service improvement.
2. Third-Party Service Providers: For credit-related services.
3. Legal Authorities: To comply with legal or judicial requirements.
4. Risk Management: For fraud prevention and security purposes.
5. Advertising Partners: For targeted promotional activities.
By using Shamwa Credit, you agree to the described data collection, use, and sharing policies, allowing us to provide secure, efficient, and tailored financial services to meet your needs.
You acknowledge and consent to the data acquisition, usage, and sharing practices described in this disclosure by utilizing the Shamwa credit. Your consent allows us to offer loan services that are secure, transparent, and efficient in accordance with your financial requirements.
Our regulations regarding data collection and utilization are as follows in order to protect your privacy.
1. WHAT HAPPENS TO A COMMON USER
1.1 Comprehensive Background Information
The goal of Shamwa credit ("Shamwa credit", "we", "us", or "our") is to provide the utmost quality of service. We have consistently placed a high value on the protection of your privacy and personal information.
1.2 What is the basis for the assessment of this privacy statement?
Our privacy statement and our Terms of Use provide further information on the creation and use of your Shamwa credit account (your "Account"), the management of any personal information you submit through the Shamwa credit applications (the "Apps"), and the utilization of our lending services (collectively, the "Services," which encompass the Apps and your Account). I am certain that you will complete the reading.
To guarantee that you have a thorough comprehension of our policies and procedures concerning your personal data and the manner in which we will employ it, it is strongly advised that you consult the accompanying literature.
Please refer to our Terms of Use for additional information on the services' general utilization policies.
If you have any questions or concerns regarding our privacy practices or policy, please do not hesitate to contact us directly at communication.patient@shamwa-credit.com or through the Apps.
1.3 News and Current Affairs
To ensure that your personal data is managed in the most secure manner possible, the terms of this policy and our privacy policies are routinely reviewed.
2. INFORMATION THAT YOU ARE ALLOWED TO DISCLOSE
A specific amount of your personal information must be collected, stored, shared, examined, and managed in order to provide you with the services. The information we will acquire about you and the circumstances in which it will be utilized are comprehensively described in this section of the policy.
2.1 Requirements for Identity Verification During Account Activation
During the initial period of account establishment, you will be granted restricted access to services. In order to fully activate your account and provide you with access to all services, we must first verify your identification in accordance with the Law. We require your Zambian ID and any supplementary documentation that may be required for this purpose. We would like to remind you that it is your responsibility to promptly inform us of any changes to your personal information. It may be necessary to re-verify your identification, contingent upon the circumstances.
2.2 Transactional data
We collect information regarding your creditworthiness and the lending transaction when you use our services to borrow money or complete any other service-related transaction. Your personal information, employment and income details, credit history, debt-to-income ratio, collateral details, loan purpose, amount, and terms, bank account details, residential details, references, and any information about co-signers or guarantors are among the type of information that may be included.
2.3 The Character's Background
For instance, in order to ascertain which account to debit and whether to extend credit, we will gather information about your employment, income, and bank account. Before extending you additional credit through the Apps, we will evaluate your name, phone number, emergency contact details (including name, relationship to you, and phone number), bank account details, and repayment history of previous credit. In the event that you neglect to pay the credit or adhere to the service's terms and conditions, we may also provide your information to third parties, including debt collection agencies.
2.4 Customer Preferences
Depending on your preferences, we may use your consent to send you emails or other marketing materials. We can gain a more comprehensive understanding of your preferences by monitoring your interactions with and responses to our marketing messages. Consent may be revoked at any time.
2.5 Inquiries or specifics regarding expenditures
This personal information will be promptly added to your account if you wish to contact us with inquiries, file a complaint about our services, or report an issue (such as a problem with the programs).
Service provider data enables automated decision-making.
As previously indicated, verification experiments are supported by a third party. Please be aware that we may receive personal data that is generated during the verification process. Our organization and its collaborator implement automated decision-making during verification evaluations. Would you be able to provide me with supplementary information regarding this matter? As part of the automated decision-making process, your identity is assessed by analyzing relevant personal data. If the computerized decision-making process is unable to adequately verify your identification, account authorization will be denied.
2.7 Technical information, cookies, and applications
We collect information about your utilization patterns, including the frequency and type of services and/or applications you use. As a result, we are implementing this measure to acquire a more comprehensive comprehension of the manner in which our users perceive the services and applications, as well as their attractiveness and repellence. These may include your IP address, platform, operating system, browser plug-in versions and categories, and, if applicable, your registration information.
2.8 During the appliance's operation
The user is required to submit technical information and unique identifiers, including their mobile device's IMEI number, MAC address, or phone number, in order to access the application. Furthermore, you are obligated to furnish information about the time zone, mobile network, mobile browser version, and operating system of your device. Emergency contacts, call and text message records, and any additional digital content that you choose to include are among the other requirements.
3. OUR APPROACH TO THE MANAGEMENT OF YOUR PERSONAL DATA
The legal defenses we employ and the rationale behind the use of your personal information, including local data protection laws, are comprehensively explained in this section. It is essential that we emphasize that we exclusively process your personal information in accordance with the law.
3.1 To guarantee that the Services and Website are accessible to consumers
3.1.1 In order to protect your personal data, the following protocols are implemented:
(1) Increase the value of your account by connecting it to a third-party website.
(2) Verify the programs' accessibility.
3.1.2 The subsequent legal justifications are implemented during the processing of your information:
(1) We are authorized to sell our services to you and other users, administer and enhance the Services and Apps, provide lending-related services, and promptly update our records in compliance with all relevant laws, obligations, and regulations.
(2) Is it essential to complete a contract with you and meet your requirements before you execute it?
(3) Completing identification verification and other pertinent procedures in accordance with our legal obligations.
3.2 To safeguard your accounts, funds, and services
3.2.1 The following methodologies are employed to manage your personal information:
(1) To detect hazards and regulate and prevent misconduct. The utilization of personal data ensures the protection of your identity, finances, and personal information. Furthermore, it aids us in fulfilling our legal responsibilities with respect to financial offenses, such as fraud.
(2) To guarantee the security and safety of our services, we implement both internal and external operational verifications. We reserve the right to investigate any suspected violations or questionable conduct to ensure that you are not in violation of the law or our terms of service.
3.2.2 The subsequent legal justifications are implemented during the processing of your information:
(1) Our legitimate concern is the safeguarding of our services, our affiliated companies, your account funds, any necessary third parties, and ourselves from security-related attacks that could be detrimental.
(2) If the proper completion of a transaction with you necessitates that we comply with your instructions prior to the execution of the contract;
(3) Complying with our legal obligations, which encompass the obligation to atone for financial malfeasance;
For instance, we may be required to investigate hazardous behavior in order to protect the interests of you or another individual.
3.3 I am enthusiastic about the prospect of forming a relationship with you and would be grateful for the chance to engage in conversation.
3.3.1 We will guarantee the confidentiality of your personal information:
(1) The purpose of this correspondence is to notify you of any potential fraudulent activity associated with your account or to address any recent inquiries you may have submitted.
3.3.2 The subsequent legal justifications are implemented during the processing of your information:
(1) We are still capable of protecting your account, your money, our services, our business network, and any relevant third parties.
(2) If it is essential to satisfy your requirements and execute a contract with you in a reasonable manner prior to its legal binding character; and
(3) In order to satisfy our legal obligations, it is necessary to obtain identity validation and other forms of verification.
3.4 To distribute advertisements
3.4.1 We will guarantee the confidentiality of your personal information:
(1) To furnish you with promotional materials, such as information about the supplementary services that our businesses or we offer.
3.4.2 The subsequent legal justifications are implemented during the processing of your information:
(1) If you have authorized the occurrence of an event, then
Two circumstances immediately render our legitimate objective of introducing you and others to our services antithetical.
3.5 Improve, modify, and upgrade our services and applications
3.5.1 We will guarantee the confidentiality of your personal information:
(1) Our objective is to acquire a more thorough understanding of your preferences for our services and applications by examining your utilization patterns. Additionally, we may supervise your use of the applications and services to prevent you from disregarding any promotions or discounts. For example, we may contact you if you have not used the Apps for an extended period or if you have not used the data we have collected to communicate with one of our web businesses.
(2) To answer any inquiries you may have, and
(3) To improve and customize our services and applications.
3.5.2 The following sources provide the legal justification for the use of your information to achieve the aforementioned objectives:
(1) We sincerely commit to the provision of lending-related services and/or applications, the management and enhancement of these services and/or applications, the advertisement of our services to you and others, and the maintenance of accurate records in accordance with all pertinent laws, duties, and regulations.
4. NOTICE REGARDING THE PRIVACY OF PRIVATE DATA
The following conditions must be met in order for your personal information to be disclosed:
4.1 The dissemination of your personal information is contingent upon your assent.
4.2 We reserve the right to share your personal information with other service users to ensure that you both receive the maximum benefit from the services we provide. Furthermore, our services enable the exchange of personal information between you and other Service users.
4.3 By incorporating your confidential information into your public profile on the Apps, you authorize other Apps users to publicly view and utilize it.
4.4 Our organization may disclose your personal information to specific service providers, partners, or group companies in order to facilitate the provision of services such as transaction management, in-app services, verification checks, and money transfers. Occasionally, we may be obligated to provide a partner with access to your entire account and financial data, subject to their performance.
4.5 We may grant specific service providers or group companies access to your personal information in order to assess the services and make the requisite adjustments to guarantee the utmost quality for you and others.
4.6 We may be obligated to disclose your personal information in order to address the valid claims or legal proceedings of law enforcement, regulatory bodies, officials, or other entities, or to comply with a legal requirement.
4.7 In the event of a merger, acquisition, or other restructuring, we may disclose your personal information to a third party that is responsible for its processing.
In accordance with Zambian consumer protection laws and finance industry regulations, your transaction and other account information will be stored in Zambia. In the event that any of the aforementioned circumstances necessitate the legitimate transfer of your personal information to a nation other than the one from which it was initially acquired, we will guarantee that the relevant data privacy regulations are adhered to. In addition to discussing the potential for cross-border data sharing and the countries' engagement, we will also provide an overview of the legal framework for the transmission of personal data. We assure you that your personal information will be protected to the same extent, regardless of your current location.
5. SECURITY OF YOUR PERSONAL INFORMATION
We are dedicated to protecting your data from unauthorized access, alteration, disclosure, and use, as well as from accidental loss or injury. Our primary goal is to protect your privacy. The necessary security measures have been implemented to prevent this.
Additionally, as previously stated, we limit access to agents, contractors, laborers, volunteers, and other pertinent third parties. They are responsible for safeguarding your personal data and will only use it in accordance with our policies.
I am sorry to inform you that there is no absolute guarantee that data transmitted via the internet will be secure. We cannot guarantee the security of any personal information you submit through our services, despite our best efforts. The data you transmit is your responsibility. Upon receipt of your data, we will immediately establish stringent security protocols to safeguard it from illicit access, disclosure, use, and modification.
6. CONDITIONS THAT DIRECT THE STORAGE OF YOUR PERSONAL INFORMATION
6.1 Your information will be retained for the specified period in order to satisfy the purposes for which it was collected, including reporting, accounting, tax, and legal requirements. Volume, nature, sensitivity, potential harm from unauthorized use or disclosure, the purposes for processing the data, whether those purposes can be achieved through alternative means, and any applicable legal, regulatory, tax, accounting, or other prerequisites are all considered when determining the appropriate retention period for personal data.
What we have found is that:
6.1.1 We will retain your financial information for a maximum of six years from the date of your most recent transaction, or for a longer period if it falls within the retention term specified below, as permitted by relevant statutes, including anti-money laundering regulations.
6.2 All relevant data, including personal and transactional data, will be permanently deleted six years after the cancellation date.
In the event of a complaint or if there are reasonable suspicions of impending legal action or other regulatory enforcement action, your personal information may be retained for an extended period of time in relation to our relationship with you and/or your use of the Servicess.
7. YOU ARE CONSCIOUS OF YOUR RIGHTS
This can be achieved by complying with jurisdictional constraints and meeting specific criteria:
7.1 In order to obtain access to your personal information, submit an application. You will be able to confirm that we are legally processing your personal information and obtain a copy of the data that we presently have on file for you by completing this step.
7.2 We respectfully ask that you revise the personal data that we currently have on file in response to your request. This offers you the chance to update any incomplete or inaccurate information we may have about you; however, any new information you submit may necessitate verification.
7.3 If you are not in debt, you are entitled to request the deletion of your personal information. You have the right to request that your personal information be removed from our systems if there is no legitimate reason for its retention. If you have successfully exercised your right to object to processing (see below) or if we may have unlawfully processed your information, you have the right to request that we erase or delete your records in accordance with local legislation.
7.4 If you believe that the processing of your personal data violates your fundamental rights and freedoms due to circumstances that are unique to you, you have the right to object. In this instance, we will base our decision on the justifiable interests of either ourselves or a third party. Furthermore, you have the right to object when your personal information is used for direct marketing purposes.
7.5 Please request that the use of your personal data be limited. You have the right to request that we discontinue the processing of your personal information in specific circumstances.
7.6 Request that your personal information be transferred to you or another individual. Your personal data will be provided in a structured, machine-readable format to you or a designated third party.
7.7 You have the right to revoke your consent at any time if we use your personal information for any purpose.
7.8 Any data protection concerns should be reported to the appropriate authorities. We strongly urge you to reach out to us as soon as possible in order to address your concerns before they are submitted to the regulator. We would be extremely grateful.
To exercise any of the privileges mentioned above, kindly contact us using the information provided above.
We may request specific information from you in order to confirm your identity and ensure that you are competent of exercising your rights. This is implemented as a security measure to prevent unauthorized individuals from accessing personal information. We could reach out to you in order to acquire supplementary information, which would enable us to act more promptly. Please keep this in mind.
We make every effort to address legitimate inquiries within one month. In certain instances, the assessment of petitions that are exceedingly complex or have been submitted on multiple occasions may necessitate more than one month. We will ensure that you are kept informed of any new developments and that you receive information on a consistent basis.
8. INTERNAL RELATIONS WITH ANOTHER ENTITY
Our website and services may contain plug-ins, applications, and hyperlinks to websites operated by third parties. Third parties are granted the authority to collect and distribute personal data about you by touching on these links or enabling these connections. Please keep this in mind. We are not responsible for the privacy policies of these third-party websites, plug-ins, or programs, as we have no control over them. Before departing, it is imperative that you examine the privacy policies of each website or application that you utilize or visit.
