Privacy Policy
1. Introduction
Welcome to Lato SACCO Society Limited (“Lato SACCO,” “we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or become a member of our SACCO.
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access our website or use our services.
2. Information We Collect
2.1 Personal Information You Provide to Us
We collect personal information that you voluntarily provide to us when you:
- Register for membership with Lato SACCO
- Open a savings or loan account
- Apply for financial products or services
- Contact us for customer support
- Participate in our Watano groups
- Attend our financial literacy workshops
- Subscribe to our newsletters or communications
This information may include:
- Identity Information: Full name, date of birth, national ID number, passport number, gender
- Contact Information: Physical address, email address, telephone number, mobile number
- Financial Information: Bank account details, income information, employment details, business information, credit history
- Transaction Information: Details about deposits, withdrawals, loan applications, loan repayments, and other financial transactions
- Documentation: Copies of identification documents, proof of residence, business registration documents, tax compliance certificates
- Guarantor Information: Details about your Watano group members or other loan guarantors
- Next of Kin Information: Emergency contact details and beneficiary information
2.2 Information Automatically Collected
When you visit our website, we may automatically collect certain information about your device and browsing behavior, including:
- IP address and location data
- Browser type and version
- Device type and operating system
- Pages visited and time spent on pages
- Referring website addresses
- Clickstream data
2.3 Information from Third Parties
We may receive information about you from:
- Credit reference bureaus (CRBs) for credit assessment
- Other financial institutions for verification purposes
- Government agencies and regulatory bodies
- Your employers (with your consent) for income verification
- Business partners and service providers
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 To Provide Financial Services
- Processing membership applications
- Opening and managing savings accounts
- Processing loan applications and disbursements
- Facilitating deposits, withdrawals, and transfers
- Managing your Watano group participation
- Calculating and distributing dividends
- Processing share capital transactions
3.2 To Communicate With You
- Sending account statements and transaction confirmations
- Providing customer support and responding to inquiries
- Sending important notices about your accounts or services
- Informing you about changes to our terms, policies, or services
- Sending newsletters and promotional materials (with your consent)
- Inviting you to financial literacy workshops and community events
3.3 To Ensure Security and Prevent Fraud
- Verifying your identity
- Detecting and preventing fraudulent transactions
- Monitoring for suspicious activity
- Complying with anti-money laundering (AML) regulations
- Protecting against security threats
3.4 For Regulatory Compliance
- Complying with legal obligations under Kenyan law
- Meeting SASRA (SACCO Societies Regulatory Authority) requirements
- Responding to legal processes and government requests
- Maintaining proper records for auditing purposes
- Reporting to regulatory authorities as required
3.5 For Business Operations and Improvement
- Analyzing usage patterns to improve our services
- Conducting research and analytics
- Developing new products and services
- Training our staff
- Managing our relationship with you
- Resolving disputes
4. How We Share Your Information
We may share your information in the following circumstances:
4.1 With Your Consent
We may share your information with third parties when you give us explicit consent to do so.
4.2 With Service Providers
We may share your information with trusted third-party service providers who assist us in:
- Payment processing and mobile banking services
- IT support and system maintenance
- Data storage and cloud services
- Marketing and communication services
- Debt collection services (for defaulted loans)
- Audit and legal services
These service providers are contractually obligated to keep your information confidential and use it only for the purposes we specify.
4.3 With Regulatory Authorities
We may share your information with:
- SACCO Societies Regulatory Authority (SASRA)
- Central Bank of Kenya
- Kenya Revenue Authority (KRA)
- Credit Reference Bureaus (CRBs)
- Other regulatory and law enforcement agencies as required by law
4.4 Within Our SACCO Structure
- With your Watano group members (limited to information relevant to group operations and loan guarantees)
- With our board of directors and management for governance purposes
- With our internal audit and compliance teams
4.5 For Legal Reasons
We may disclose your information when we believe in good faith that disclosure is necessary to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Protect the rights, property, or safety of our members and the public
- Investigate fraud or security issues
- Enforce our terms and conditions
4.6 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:
- Secure servers and encrypted data transmission
- Access controls and authentication procedures
- Regular security assessments and updates
- Employee training on data protection
- Physical security measures at our branches
- Secure document storage and disposal procedures
- Firewall and antivirus protection
- Regular data backups
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal and regulatory requirements
- Resolve disputes and enforce our agreements
- Maintain accurate financial records
Specific retention periods include:
- Membership Records: For the duration of your membership plus 7 years after termination
- Transaction Records: Minimum of 7 years as required by law
- Loan Records: For the duration of the loan plus 7 years after full repayment
- Identification Documents: For the duration of the business relationship plus 7 years
- Marketing Communications: Until you unsubscribe or withdraw consent
After the retention period expires, we will securely delete or anonymize your information in accordance with our data disposal procedures.
7. Your Rights
Under Kenyan data protection laws, you have the following rights regarding your personal information:
7.1 Right to Access
You have the right to request copies of your personal information held by us.
7.2 Right to Correction
You have the right to request correction of inaccurate or incomplete information.
7.3 Right to Deletion
You may request deletion of your personal information, subject to our legal and regulatory obligations.
7.4 Right to Object
You may object to our processing of your information for direct marketing purposes.
7.5 Right to Restrict Processing
You may request restriction of processing in certain circumstances.
7.6 Right to Data Portability
You may request transfer of your information to another service provider where technically feasible.
7.7 Right to Withdraw Consent
Where we rely on your consent to process information, you may withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided in Section 12 below.
8. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device that help us:
- Remember your preferences
- Understand how you use our website
- Improve website functionality
- Provide relevant content
You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.
9. Third-Party Links
Our website may contain links to third-party websites, including social media platforms and partner organizations. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.
10. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. However, we do offer Junior Savings Accounts for minors, which must be opened and managed by a parent or legal guardian. If you believe we have inadvertently collected information from a child without proper parental consent, please contact us immediately.
11. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website with a new “Last Updated” date
- Sending you an email notification (if you have provided your email address)
- Displaying a notice at our branches
We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Lato SACCO Society Limited
Head Office:
Musovo Market, Ukasi
Mwingi, Kitui County, Kenya
Email: info@latosacco.co.ke
Phone: +254113718893
Branch Locations:
- Ukasi Branch
- Nuu Branch
- Tseikuru Branch
- Kamuwongo Branch
Data Protection Officer:
[Insert DPO Name and Contact Information if applicable]
Office Hours:
Monday – Friday: 8:00 AM – 5:00 PM
Saturday: 8:00 AM – 1:00 PM
Sunday: Closed
13. Complaints
If you are not satisfied with how we have handled your personal information or if you believe we have violated your privacy rights, you may file a complaint with:
Office of the Data Protection Commissioner (ODPC)
P.O. Box 24884-00100
Nairobi, Kenya
Email: info@odpc.go.ke
Website: www.odpc.go.ke
14. Consent
By registering for membership with Lato SACCO, using our services, or providing us with your personal information, you acknowledge that you have read, understood, and agree to this Privacy Policy. You consent to the collection, use, and disclosure of your information as described in this policy.
Thank you for trusting Lato SACCO Society Limited with your financial needs and personal information. We are committed to protecting your privacy while serving you with excellence.
