Privacy Policy

1. Information We Collect

To provide seamless financial management and administrative services for your chama, we collect specific personal identification details from members, including:

• National Identification Number / Passport Number
• Full Name & Contact Email Address
• Physical & Residential Address
• Mobile Phone Number

2. Purpose of Collection and Usage

L-Chama collects and uses member information strictly to perform platform operations and fulfill financial and administrative duties. Specifically, your data is used to:

• Verify Identity & Enforce KYC: Authenticate members to prevent identity theft, unauthorized account access, and fraudulent financial activities.
• Facilitate Financial Transactions: Process merry-go-round distributions, loan applications, contribution tracking, and mobile money payouts (e.g., M-Pesa / Bank transfers).
• Maintain Auditable Records: Generate accurate individual member statements, contribution histories, and group ledgers.
• Provide Communication & Alerts: Send transactional notifications, payment receipts, system alerts, loan reminders, and account security notices via SMS or email.
• Legal & Contractual Obligations: Establish legal enforceability for credit agreements, micro-loans, and group constitutions managed on the platform.

3. Strict Limitation of Data Use

Your personal details are strictly for L-Chama company operations and your registered chama's internal management.

• No Data Selling or Renting: L-Chama does not sell, rent, trade, or lease member data to third parties, advertising networks, or external marketers under any circumstances.
• Authorized Access Only: Access to member data is strictly restricted to authorized system processes and designated officials (e.g., elected Chama Secretaries/Chairs) approved by your specific group.
• Third-Party Service Providers: Information is shared with third-party vendors (such as telecom payment gateways or SMS infrastructure providers) solely to the extent necessary to complete your requested transactions. These partners are bound by strict non-disclosure and security agreements.

4. Data Protection and Security

We employ industry-standard technical and organizational security measures to protect your personal data, including:

• Encryption: Data in transit is encrypted using Secure Sockets Layer (SSL/TLS) technology, and sensitive data at rest is stored using advanced encryption protocols.
• Access Controls: Strict multi-factor authentication (MFA) and role-based access permissions prevent unauthorized internal or external access.
• Regular Audits: Continuous monitoring and vulnerability assessments to safeguard systems against potential cyber threats.

5. Your Rights

Subject to applicable data protection legislation, you reserve the right to:

1. Access and request a copy of the personal information L-Chama holds about you.
2. Request corrections to inaccurate or outdated personal details.
3. Request the deletion or restriction of your data, provided there are no pending legal or financial liabilities tied to your account within your group.