Data & Privacy Policy

Last updated: 1st January 2026

1. Introduction

Ng'arisha SACCO Society Limited is committed to protecting your personal data in compliance with the Kenya Data Protection Act (2019).

2. Data We Collect

We collect personal data when you apply for membership, apply for loans, use digital channels, or contact us — including name, ID, KRA PIN, address, phone, email, employment and financial information.

3. How We Use Your Data

Your data is used for: processing membership; assessing loan eligibility; regulatory compliance (SASRA, CBK, KRA); fraud prevention; AGM and dividend communications; and service improvement.

4. Data Sharing

We do not sell your data. We may share it with regulators, credit reference bureaus, vetted service providers, and law enforcement when legally required.

5. Data Retention

We retain your data for the duration of your membership and for seven (7) years after membership ends.

6. Your Rights

You have the right to access, correct, delete, port, and object to processing of your data. You may also complain to the Office of the Data Protection Commissioner (ODPC).

7. Cookies

Our website uses cookies to improve your experience. Manage preferences via the cookie banner.

8. Security

We implement 256-bit SSL encryption, two-factor authentication, role-based access controls, and regular security audits.

9. Contact