Privacy Policy

1. Introduction

Mwanga Limited (“us”, “we”, or “our”) understands the criticality of privacy in handling your (“Data subject”) personal data. Hence, we want you to engage with us knowing that we value your Personal Data and that we protect it.

Here you will find details of how we process your Personal Data, the purposes for which we process it, your rights regarding the data we process, and how you can contact us.

2. Collectable Personal Data

Personal information refers to data that could identify a specific individual such as names, addresses, e-mail addresses, and telephone numbers. Depending on your medium of interaction with Mwanga Limited (online, offline, mobile phone, etc.), we collect various types of information from you, as described below.

  • Contact information- This includes any information you provide to Mwanga Limited that would allow us to contact you personally, such as your name, residential address, e-mail address, phone number or next-of-kin information
  • Payment and Financial information: Any information that we need in order to make payments to you, including bank details such as bank name and branch, account name and number, etc.
  • Demographic information & interests- Any information that describes your demographic or behavioral characteristics. Examples include your date of birth, age or age range, gender, geographic location (e.g. Postcode/zip code), hobbies and interests, and or lifestyle information. We use such information for improving the quality of our service offerings.
  • Sensitive Personal Data. We do not seek to collect or otherwise process sensitive personal data in the ordinary course of our business. Sensitive information includes a number of types of data relating to: race, ethnicity, political opinions, religious or other similar beliefs, trade union membership, physical or mental health, sexual tendencies or criminal record. Where it becomes necessary to process your sensitive personal data for any reason, we rely on your prior express consent for any processing which is voluntary. We may enhance personal information we collect from you with information we obtain from third parties that are entitled to share that information; for example, information from other agencies, search information providers, or public sources (e.g. for due diligence purposes), but in each case, as permitted by applicable laws

3. Condition for Processing Personal Data

MWANGA LIMITED Personnel or any third party acting on its behalf shall only process your personal data if at least one of these conditions are met.

  • Consent: this refers to any freely given, specific, informed, and unambiguous indication through a statement or clear affirmative action that signifies your agreement to the processing of your Personal Data by MWANGA LIMITED
  • Contract: the processing is necessary for the performance of a contract or entering into a contract at the request of the Data Subject only.
  • Legal obligation: the processing is necessary for compliance with a legal obligation to which MWANGA LIMITED is subject;
  • Vital interest: the processing is necessary in order to protect the vital interests of the Individual or of another natural person;
  • Public interest: the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in MWANGA LIMITED
  • Proper Motives: MWANGA LIMITED shall not seek consent that may engender direct or indirect propagation of atrocities, hate, child rights violation, criminal acts, and anti-social conduct.

4. How We Use Your Personal Data

To the extent permissible under applicable law, we may use your information for the following legitimate actions:

  • Provide any information and services that you have requested
  • Compare information for accuracy and to verify it with third parties
  • Manage our relationships with you
  • Recruitment processing and human capital management
  • Processing of employee benefit plan
  • To monitor, carry out statistical analysis and benchmarking, provided that in such circumstances it is on an aggregated basis which will not be linked back to you or any living individual.

5. User Rights

You have rights when it comes to our handling of their Personal Data. Those rights include:

  • The right to request  access to your Personal Data
  • The right to request that MWANGA LIMITED erase your Personal Data if it is no longer valid or necessary for the purposes for which it was collected or if it is incomplete or inaccurate.
  • The right to rectify or amend inaccurate or incomplete Personal Data.
  • The right to withdraw your consent at any time. This can be initiated by contacting the Data Protection Officer of MWANGA LIMITED.
  • The right to object to MWANGA LIMITED’s processing of your Personal Data if there are compelling legitimate grounds to do so and to the extent permitted by law or regulation.

6. Data Collection Methods

  • Electronic Communications: We keep a record of your interactions with us via electronic media (such as calls, email, text message, complaint forms, etc.) in a secure manner while maintaining accuracy. When necessitated by legal or vital obligations, we archive these communications.
  • Hard Copy Forms: We maintain accurate records of the information that you provide to us via hard copy forms in a secure manner. When necessitated by legal or vital obligations, we archive these communications.
  • WebForms: We keep a record of your personal details provided via our web portal. Typically, such details are processed for recruitment purposes and are kept in a secure manner.

7. Transfer Of Personal Data

Personal data collected by Mwanga Limited may be transferred among its various divisions and affiliated companies, around the world, as well as transferred to select partners with your consent. The following describes the various scenarios for which we may share your Personal Data to a third party.

  • Transfer for Service Provision: We employ other companies and individuals to perform functions on our behalf as service providers. Service providers, and their selected staff, are only allowed to access and use your Personal Data on Our behalf for the specific tasks that they have been requested to carry out, based on our instructions, and are required to keep your Personal Data confidential and secure.
  • Transfer as a legal requirement: We may share your information with other parties when required by law or as necessary to protect our service. We may also share your information in connection with a transfer of assets, or if we are otherwise involved in a merger or transfer.
  • Inter-Company Transfers: Your Personal Data may be transferred to or accessible by other entities within Mwanga Limited. However, these entities will be bound by the terms of this Policy.
  • Out of Country Transfer: Your Personal Data may be transferred to a foreign country for storage or processing where it is necessary to do so in line with the permissible conditions defined by the NDPR. We will ensure that appropriate safeguards are in place to ensure the protection of your Personal Data being stored or processed out of the country.

8. How We Ensure Protection Of Your Personal Data

  • We use appropriate measures (including physical access controls and secure software and operating environments) to keep your Personal Data confidential and secure. Please note, however, that these protections do not apply to information you choose to share in public areas such as third-party social networks.
  • Data Retention Policy: We ensure that your personal data are not retained for longer than necessary as determined by our data retention policy to reduce the likelihood/severity of a data breach.
  • Personal Data Breach Notification: MWANGA LIMITED will inform relevant authorities and if necessarily affected individuals of a personal data breach within 72 hours of being aware of the breach where Personal Breach refers to a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data. This includes breaches that are the result of both accidental and deliberate causes.

9. Changes To This Notice

If we change the way We handle your Personal Data, we will update this Notice. We reserve the right to make changes to our practices and this Notice at any time, please check back frequently to see any updates or changes to our Notice.

10. Data Controller And Contact

Any question regarding this policy can be addressed to the DPO at: (


What are cookies?

Cookies are small data files transferred to your device when you visit our site for the first time. We use cookies to collect information about our visitors’ web usage which helps us to provide you with a more personalized online experience. It also helps us remember your preferences and prevent the need to always re-enter your information if provided previously.


What cookies do we use?

These cookies may store your browser name, the type of computer, and technical information about your means of connection to this website, such as the operating system, browser platform, and other similar information. This information is used to technically facilitate the navigation and use of this website. In addition, functional cookies may be used to store personal settings, such as language, or to remember your information for your next visits if you request that. These cookies are stored for a maximum of two years.

We use cookies from Google Analytics to measure the number of visits and the parts of the website that are the most popular among our website visitors, as well as for benchmarking purposes. This information is used to provide aggregated and statistical information on the use of this website and to improve the content we provide to enhance your user experience.

How can we support your business

Loan Repayment Enquiry