Data Privacy Policy
Data Privacy Policy
Gusii Mwalimu Sacco Limited (“us”, “we”, or “our”) was established in the year 1977 and is registered under the Co-operative Societies Act, Cap 490 as a Sacco Society No CS/2641
We are a duly registered Sacco in Kenya and regulated by SASRA to offer financial services to our members. We operate the https://gusiimwalimusacco.co.ke/ website, which provides more information about us and our various services.
We use your data to provide and improve the Services. By using these Services, you agree to the collection and use of information by this policy. Unless otherwise defined in this Data Privacy Policy, terms used in this Data Privacy Policy.
Gusii Mwalimu Savings and Credit Society is committed to protecting your data and respecting your privacy. This Privacy Policy explains in detail the types of personal data we may collect about you when you interact with us through any of our contact points to request joining our membership, requesting credit, savings depositing, general inquiries, and membership exit. The interaction points you may have with us could be over the phone, in person, over email, or indeed via inquiry forms on our website or social media platforms.
It also explains how we’ll store and handle that data, keep it safe, and tell you about your privacy rights and how the law protects you. We shall likely need to update this Privacy Policy from time to time. We shall notify you of any significant changes, but you’re welcome to come back and check it whenever you wish.
Data Collection
We are data processors and controllers, as such we collect and determine the purpose of processing such personal data that we collect. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (i.e., anonymous data).
The people whose personal data we collect and control include:
Our members, potential members, employees, and other service providers whom we have a business relationship with, members’ security providers and guarantors, and next of kin details.
We collect personal data such as Name, date of birth, Identification number, tax pin, financial information such as bank account details and statements, age, and geographical information We may also collect sensitive personal data such as sex, marital status, family details, belief, ethnic origin, biometric data, etc.
Some of the purposes for which we collect and process your data include:
- To provide and maintain our Service.
- To notify you about changes to our Service
- To allow you to participate in interactive features of our Service when you choose to do so.
- To provide member support
- To gather analysis or valuable information so that we can improve our Service.
- To monitor the usage of our Service
- To detect, prevent, and address technical issues.
- To provide you with news, special offers, and general information about other goods, services, and events that we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.
Legal Basis for Data Collection and Processing
- Contractual Obligation:
To perform the contractual obligation entered into with our data subjects, we collect such personal data. For example, we provide our services based on the agreement we have with the data subject such as processing of credit facilities for our members.
- Consent.
We shall in specific situations collect and process your data with your consent. In doing so, we shall ensure that consent is explicitly requested from you. When collecting your data, we shall always make clear to you, which data is necessary in connection with a particular service. All data provided by you shall be used for legitimate purposes only and the company undertakes to use such information only in connection with services you shall normally expect from us. For example, example, when you lick a box/subscribe to receive email newsletters when you make an online inquiry
We shall also seek explicit consent when handling data about children below 18 years of age from the parent, guardian, or person holding responsibility for the said minor.
- Legal Compliance.
In the conduct of our business, we are required to comply with the specified industry regulators which would then oblige us to collect, process, and share the data subject’s information with the relevant regulators or law enforcement agency.
- Legitimate Interest
In specific situations, we require your data to pursue our legitimate interests in a way that might reasonably and legally be expected as part of running our business and which does not materially impact your rights, freedom, or interests.
How We Collect Your Data
We use different methods to collect data from and about you, including through:
- Direct interactions: When you fill out forms such as membership or send inquiries and submit the same to us directly.
- Closed Circuit Television (CCTV) surveillance recordings. CCTV Devices are installed at strategic locations to provide a safe and secure environment on all premises as a part of our commitment to community safety, security, and crime prevention.
- Through Automated interactions such as our website.
- Third parties such as the Teachers’ Service Commission or publicly available resources.
Data Retention, Disclosure, and International Transfer
We shall only retain your data for as long as reasonably necessary to fulfill the purposes we collected it for, including to satisfy any legal, regulatory, tax, accounting, or reporting requirements. We may retain personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation concerning our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your data, the purposes for which we process your data, and whether we can achieve those purposes through other means, the need to comply with our internal policy and the applicable legal, regulatory, tax, accounting or other requirements.
Anonymized information that can no longer be associated with you may be held indefinitely.
Gusii Mwalimu Sacco Limited may disclose your Personal Data in the good faith belief that such action is necessary to:
- Law-enforcement agencies, regulatory authorities, courts, or other statutory authorities in response to a demand issued with the appropriate lawful mandate and where the form and scope of the demand are compliant with the law.
- Our suppliers, associates, partners, software developers, and agents are involved in delivering services and services.
- Fraud prevention and Anti-money laundering agencies, credit-reference agencies;
- Publicly available and/or restricted government databases to verify your identity information to comply with regulatory requirements;
- Debt-collection agencies or other debt-recovery organizations;
- Any other person that we deem legitimately necessary to share the data with.
We do not generally transfer data beyond the Kenya jurisdiction. However, sometimes, within the conduct of business, we may need to transfer data to another country other than Kenya. In such a case, we shall only process your personal information with your consent. If necessary, we shall ask the party to whom we transfer your personal information to agree to our privacy principles, associated policies, and practices by the applicable Data protection laws.
Your Rights as the Data Subject
As a Data Subject, you have the following rights as set out in the Data Protection Act No. 24 of 2019:
- Right, to be informed that we are collecting personal data about you;
- The right to access such personal data that we hold and request details on how the same is processed.
- The right to request that we correct such personal data where the same is inaccurate.
- Right to request that we correct your data where it is inaccurate or incomplete;
- Right to request that we erase your data noting that we may continue to retain your information if obligated by the law or entitled to do so;
- Right to object and withdraw your consent to the processing of your data. We may continue to process if we have a legitimate or legal reason to do so;
- Right to request restricted processing of your data noting that we may be entitled or legally obligated to continue processing your data and refuse your request;
- Right to request transfer of your data.
You shall not have to pay a fee to access your data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances and in cases where it would be technically challenging to do so.
Verification of Identity for requesting data subject
We may need to request specific information from you to help us confirm your identity and ensure your right to access your data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information about your request to speed up our response.
If you have authorized a third party to submit a request on your behalf, we shall ask them to prove they have your permission to act
The time limit for response to the data subject.
We shall respond to all legitimate requests within 30 working days. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we shall notify you and keep you updated on the same.
Change of purpose
We shall only use your data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to obtain an explanation as to how the
processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your data for an unrelated purpose, we shall notify you and explain the legal basis that allows us to do so.
Please note that we may process your data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Safeguarding and Protecting Your Data
We have put in place technical and operational measures to ensure the integrity and confidentiality of your data via controls around information classification, access control, physical and environmental security, and monitoring and compliance.
Amendments to this Policy
We reserve the right to amend or modify this statement at any time. If and when we amend this statement. You may access the most current version of the privacy statement by visiting our website at https://gusiimwalimusacco.co.ke/ to understand how your personal information is being used or shared. Any amendment or modification to this statement shall take effect from the date of notification on the website.
Contacts
We hope this Privacy Notice has helped set out the way we handle your data and your rights to control it. If you have any questions or concerns that may have not been covered, please contact our Data Protection Officer who shall be pleased to help you using the details provided below:
Data Protection Officer (Insert DPO email)
Gusii Mwalimu Savings and Credit Sacco,
Gusii Mwalimu Complex, 1st Floor,
P.O. Box 1335-40200, Kisii- Kenya,
Tel: 058 – 2030357, Fax: 058 – 2031021.
Non-compliance with this policy
Gusii Mwalimu Savings and Credit Sacco shall have the right to terminate any agreement with you for failure to comply with the provisions of this statement and reject any application for information contrary to this statement.
Mobile Banking Terms and Conditions
Mobile Banking Terms and Conditions
- Definition:
In these Terms and Conditions, the following terms shall have the following meanings:
‘Facility’ means the Mobile Banking facility granted by the Sacco to the holder(s) of Gusii Mwalimu Sacco account or services as determined by the Sacco from time to time.
‘Sacco’ means any branch of Gusii Mwalimu Sacco in Kenya with which the Customer’s Account is maintained.
‘Customer’ means the person who holds an Account with the Sacco.
‘MSP‘ means any mobile service provider through whom the Customer or the Sacco receives the mobile service as notified by the Sacco.
‘Service Providers’ definition includes but is not limited to MSPs, organizations or individuals whose services the Sacco uses in relation to mobile banking Services in any capacity.
‘PIN’ means the 4-digit number as provided to the Customer by the Sacco for authentication/verification by Sacco of his/her identity. The customer will be able to obtain a range of financial information as determined by the Sacco related to his/her relevant Account(s) through the use of PIN and such other means of identification assigned to the Customer in connection with the Account(s) and Facility.
‘Alerts’ means the customized messages sent either by short messaging serving/text (SMS) over the Customer’s mobile phone, email, fax, or any other modes of communication in relation to PESA PEPE Service access.
- Availability
- The customer has requested for this Facility which the Sacco at its sole discretion may discontinue at any time without any prior notice.
- The Sacco may wherever feasibly extend the Facility to other MSPs from time to time
- The customer assumes full responsibility for the security and confidentiality of his or her mobile phone, mobile phone number and PIN to be used in initially gaining access to his or her enrolled Account(s) with the Sacco through the use of his or her mobile phone.
- The Sacco also reserves the right to make any additions or deletions in the services offered through the Facility at any time.
- The customer shall inform the Sacco immediately on surrendering or discontinuing use of the MSPs mobile connection.
- Process
- The Customer is duly bound to acquaint himself with the detailed process for using the Facility and the Sacco is not responsible for any errors/omissions by the Customer.
- The Sacco may, at its discretion, from time to time change the features of PESA PEPE Services /facilities. The Customer will be solely responsible for keeping himself updated of the available services, which shall, on best-efforts basis, be notified by the Sacco through notices, website or any other legally recognized medium of communication.
- The Sacco is not bound to acknowledge receipt of any query instructions nor shall the Sacco be held responsible to verify any instructions. The Sacco shall endeavor to provide instructions on a best effort basis and wherever operationally possible for the Sacco.
- The Customer is solely responsible for initiating in writing to the Sacco any change in his mobile phone number and the Sacco will not be liable for sending Alerts or other information over the Customer’s mobile phone number in any way whatsoever.
- The Customer acknowledges that the Facility is dependent on the telecommunications infrastructure, connectivity and services within Kenya. The Customer accepts that timeliness, of alerts sent by the Sacco will depend on factors affecting the telecommunications industry. Neither the Sacco nor its Services Providers shall be liable for non-delivery or delayed delivery of Alerts, error, loss, distortion in transmission of and wrongful transmission of alerts to the Customer.
- The Sacco shall endeavor to provide the Facility on a best effort basis and the Customer shall not hold the Sacco or its Partner(s) responsible /liable for non-availability of the Facility or any loss or damage caused to the Customer as a result of use of the facility (including relying on the Alerts for the Customer’s investment or business purposes). The Sacco or its Service Providers shall not be held liable in any manner by the Customer in connection with the use of the Facility.
- The Customer accepts that each Alert may contain certain Account(s) information relating to the Customer. The Customer authorizes the Sacco to send Account related information, though not specifically requested, if the Sacco deems that the same is relevant.
- The Customer must keep their PESA PEPE Services Mobile Banking Personal Identification Number (PIN) secret at all times. The Customer shall be solely responsible for the consequences in case the customer fails to adhere to the above and /or in case any unauthorized use of his/her mobile Banking PIN.
- The Customer must keep his/her SIM card and his/her Mobile phone in secure/safe custody at all times. The Customer shall be solely responsible for the consequences in case he/she fails to adhere to the above and /or in case any unauthorized use of his/her mobile phone or SIM card.
- By agreeing to the Terms and Conditions of Mobile Banking, the Customer accepts the option to use the enhanced options, as and when they are made available by the Sacco, which may include but not limited to making bill payments, transferring from one Account to another. Upon the Sacco offering the enhanced options, the Customer shall be advised the fees charged for various options available. Such alerts shall be charged on a per transaction basis or otherwise as determined by the Sacco.
- Additional and Withdrawal or Termination of Facility
- The Sacco reserves the right to introduce additional services with or without giving any notice to the customer. The Sacco reserves the right to send messages to the registered Mobile phones regarding its products, services or any related matter, without the express consent of the customer.
- The Sacco may, in its discretion, withdraw temporarily or terminate the Facility, either wholly or in part, at any time. The Sacco may, without prior notice, suspend temporarily the Facility at any time during which any maintenance work or repair is required to be carried out or in case of any emergency or for security reasons, which require the temporary suspension of the Facility.
- Notwithstanding the terms laid down in clause 4.2 above, either the Customer or the Sacco may, for any reason whatsoever terminate this agreement at any time upon prior written notice. Liabilities incurred by the Customer shall, however survives the termination of this agreement.
- Fees
- The Sacco may at any time, at its sole discretion, charge a fee for use of any facility, under a notice to the Customer through any medium available.
- The Customer shall pay the Sacco fees and charges for the use of the services. In this connection, the Sacco is hereby authorized by the customer to debit any of the Customers’ Accounts with the Sacco.
- The Customer shall be liable for payment of airtime or other charges which may be levied by the MSP in connection with using PESA PEPE Services, which may be levied by the MSP as per the terms and conditions of the MSP and the Sacco is in no way concerned with the same.
- Disclaimer
- The Sacco or its employee/contractual staff will not be liable for: (a) any unauthorized use of Customers PIN; (b) mobile Phone number/instrument or unauthorized access to emails received at his notified email address for any fraudulent, duplicate or erroneous instruments given by use of the same; (c) acting in good faith on any instructions received by the Sacco; (d) error, default, delay or inability of the Sacco to act on all or any of the instructions; (e) loss of any information/instruction/Alerts in transmission; (f) unauthorized access by any other person to any information/ instructions given by the Customer or breach of confidentiality.
- The Sacco shall not be concerned with and will not be held liable for any dispute that may arise between the Customer and the MSP and makes no representation or gives no warranty with respect to the quality of service provided by the MSP or guarantee for timely delivery of the contents of each PESA PEPE Services.
- The Sacco shall not be held liable for any disruption or failure of providing mobile telecommunication services by MSP. The customer agrees that any complaint in connections with the failure of mobile telecommunication services shall be referred to and addressed by the MSP.
- All responsibility of use of Facility by secondary cardholder/Joint account holder shall be binding on all joint account holders.
- Disclosure
The Customer accepts that all information/instructions will be transmitted to and/or stored at various locations and be accessed by personnel of the Sacco (and its affiliates). The Sacco is authorized to provide any information or details relating to the Customer or his Account to the MSPs and/or any other service providers.
- Liability and Indemnity
The Customer shall indemnify and keep the Sacco and its Service provider(s) free from and against all liabilities, loss, claims and damages arising from negligence, fraud, collusion or violation of the terms of this agreement on the part of the Customer and/or a third party. In addition, the Sacco shall not be liable for any expense, claim, loss or damage arising out or in connection with this agreement including but not limited to war, rebellion, typhoon, earthquake, electrical, computer or mechanical failures.
- Amendments
The Customer hereby, agrees to abide by, without need of notice and express consent, any and all future modifications, innovations, amendments or alterations to these terms and conditions.
- Laws and jurisdiction
This agreement shall be governed and fall under jurisdiction of the laws of Kenya.
All disputes or differences whatsoever which shall arise any time hereafter whether during the continuance of the Agreement in the first instance the parties shall endeavor to settle such matter amicably failing which the matter shall be referred to single arbitrator which shall be appointed by the parties from CCK. This shall be done in accordance with and subject to the provisions of Arbitration Act or any statutory modification or re-enactment thereof for the time being in force.
Trending Topics
Ahhjjbhbjhj jjnkjkjkjkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkg,hfghfghfhfhfgfghgghghgggjjhjkhjkhjkhjkhkjhjkhkjhjuggjuhukhuhkuhuuytttttttttttttttttttttttttttttttttttttttttttjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjhghggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg