As you transact with Tabasamu Sacco, you will be required to personally consent for the collection and pprocessing of your personal data when filling member application forms, loan forms, and any other forms deemed necessary for provision and improvement of your services by agreeing to the terms below.

CONSENT FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA

1. Pursuant to the Data Protection Act, Tabasamu Sacco Limited in its capacity as a data controller and/or processor under the Act, requests your explicit, affirmative, and informed consent before it can collect or process your personal data.

2. “Personal data” means any information relating to an identified or identifiable natural person (a “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

3. The categories of personal data you are being asked to consent to Tabasamu Sacco Limited collection and use are your name, Identity Card Number, KRA Pin number, Postal Address, Email Address, Telephone Number, Date of Birth, Gender, whether physical or mentally challenged, Current place residence, Guarantors details, occupation, earnings, beneficiaries and next of kin details and any other details as may be deemed necessary for service delivery to members, stakeholders, etc.

4. Any personal data that is collected from you will be for the sole purpose of.

• Opening new member accounts
• Application for loans
• Appraisal for loans
• Loan repayment and recovery; For compliance purposes with SASRA
• For welfare processing to members
• For processing of payroll
• Communicating Tabasamu Sacco Ltd activities and accomplishments.
• Awareness of Tabasamu Sacco loan products.
• Loan Insurance and
• To send you SMS’s through USSD (Unstructured Supplementary Service Data)
• This also includes processing the personal data as required to execute contractual obligations in connection the purposes described in clause 4 above and in compliance with applicable laws, to execute the obligations to you concerning your loan application.

5. Tabasamu Sacco Ltd may process personal data without the data subject’s consent under the exceptions on lawful basis.

6. Tabasamu Sacco Ltd in exercising its mandate shall share your personal data with (public and private) third party entities for the purposes mentioned above. These third parties are contractually obligated to keep your personal data confidential subject to appropriate safeguards to prevent it from unauthorized disclosure. These third parties include and are not limited to:

• Debt collection Agencies/Entities
• Credit Reference Bureaus
• Law enforcement agencies and regulatory authorities
• Publicly available and/or restricted government databases such as Kenya Revenue Authority (KRA), Appointed external auditors, Teachers Service Commission, County governments, National Government, and Integrated Population Registration System (IPRS),
• Financial Institutions

7. Tabasamu Sacco Ltd shall also share/disclose personal data to third parties for loan recovery under the following conditions.

• Upon loan default for a period exceeding 1 month since issuance of the loan.
• Upon issuance of Three (3) Demand Notices on the last known address and no response on repayment plan is received.
• For purpose of listing the loanees who are in default in accordance with the prevailing Credit Reference Bureau Regulations.

9. Guarantors Data collected from you will be for sole purpose of:

• Supporting application for loan
• Appraisal for loan
• Disbursement/loan payment
• and Loan repayment and recoveries.

10. Tabasamu Sacco shall share/disclose your guarantors’ data to third parties for purposes of verification of data and Loan repayment. Any data shared in this regard will be done in accordance with the provisions of the Data Protection Act.

11. Your personal data is a key enabler, without the data, Tabasamu Sacco cannot discharge its mandate of collecting member savings and provision of credit to members.

12. Your personal data will be stored in accordance with the record retention requirements applicable to Tabasamu as a Society, and any other applicable Kenyan laws.

13. Subject to the exemptions specified in the Privacy Statement, under the Data Protection Act and your contractual obligations, you have the right to request access to, rectify, erase, and restrict the processing of your personal data. You also have the right to revoke this consent to use your personal data. Without affecting the legal obligations of Tabasamu Sacco Limited.

14. If you feel Tabasamu Sacco has violated the Data Protection Act you have the right to file a complaint with Tabasamu Sacco’s Data Protection Officer. These rights are more specifically described in the Privacy Notice.

15. Tabasamu Sacco reserves the right to amend or modify this consent form at any time without jeopardizing your rights., Any amendment or modification to the form shall remain effective from the date of notification.

16. By giving your details through the Society forms, you will be deemed to have consented to the handling and processing of your data as per the Society’s data privacy statement.