Privacy Policy
Why we collect and process personal data

For the purpose of establishment, continuation and management of banking relationships and in order for FINCA to fulfil the contract with a customer for a product or service requested, we need to collect and process that customer’s personal data. This includes the following:

  1. Processing applications for products and services
  2. Effecting Transactions
  3. Completing Instructions Or Requests
  4. Providing Products and Services
  5. Assessing Suitability For A Product Or Service
  6. Credit Assessments
  7. Statistical Purposes
  8. Surveillance of FINCA premises including ATMS for security purposes
  9. The prevention, detection, investigation of criminal activity such as money laundering, terrorism financing, fraud, corruption, embezzlement and other financial crimes
  10. Conduct Due Diligence Checks
  11. Comply with legal obligations, regulatory directives, court orders, government sanctions, prudential reporting requirements and law enforcement directives

We may also process your personal data where it is in our legitimate interests to seek professional advice. For example, to defend our rights in connection with any legal proceedings.

What is personal data and what types of personal data do we collect?
This is any data from which you can be identified. The personal data we may collect about you includes:

  1. name, age, gender, sex, and identifying numbers.
  2. physical and email addresses and contact numbers;
  3. online identifiers and your online behaviour such as cookies and IP addresses;
  4. engagements with us including use of products or services, transactions, requests, queries, applications and complaints;
  5. financial data including with regard to financial behaviour, goals and needs;
    internal reports and other derivative data based on the personal information we collect;
  6. other personal information including biometric details, race or ethnic origin, criminal history and behaviour, medical history and health and your personal beliefs and persuasions such as religious, philosophical, trade union membership or political beliefs.

Disclosure Of Personal Data
FINCA may disclose your personal data to any of the following parties in connection with any of the purposes outlined above:

  1. Any director, officer or employee of FINCA
  2. Professional advisers such as auditors, third party service providers, agents or independent contractors providing services to support FINCA’s business.
  3. Any person to whom disclosure is permitted or required by law.
  4. Any court, regulatory body, law enforcement agency where required by law.
  5. Credit bureaus or credit reference agency
  6. Any financial institution conducting credit, fraud, and anti-money laundering checks for prevention of financial crime.

Personal Data Outside Uganda
FINCA will not process or store personal data outside Uganda without the express consent of the data owner. Where such consent is obtained, FINCA shall ensure the country where the data is to be processed or stored has adequate laws in place for the protection of such data equivalent or greater than Uganda.

Security Of Personal Data
The security of personal data is of paramount importance. FINCA has put in place robust technical and administrative information security measures to safeguard your personal data. We also ensure that third party service providers adhere to security standards mandated by the FINCA. Regardless of where personal data is transferred, we take all steps reasonably necessary to ensure that personal data is securely kept.

While we strive for the highest standards of security, you should be aware that the internet is not a secure form of communication. Thus, sending us any personal data over the internet carries with it risks including the risk of access and interference by unauthorized third parties. Information sent through the internet may be transmitted internationally (even when sender and recipient are located in the same country) via countries with weaker privacy and data protection laws than Uganda.

Retention Of Personal Data
FINCA only retains your personal data in line with our legal and regulatory obligations and for business and operational purposes. This means we keep personal data for at least 10 years from when a transaction was conducted. In the case of account holders, we keep personal data for at least 10 years from when the account is closed.

Your Rights
You are entitled to the following data protection rights;

  1. Right to access personal information
  2. Right to prevent processing of personal data
  3. Right to prevent processing of personal data for direct marketing
  4. Rights in relation to automated decision-taking
  5. Rights to rectification, blocking, erasure and destruction of personal data

Complaints
If you have a complaint in relation to your personal data, you may visit the nearest branch and submit your complaint OR contact the Data Protection Officer using;

Data Protection Officer,

FINCA Uganda, Plot 11B Acacia Avenue;

Email: UG_DPO@fincaug.org

Tel: 0779010154

You also have the right to complain to the Personal Data Protection Office at the National Information and Technology Authority (NITA).

Changes To This Data Privacy Statement
This Privacy Policy may be updated from time to time and you are advised to visit our website regularly to check for any amendments. This policy was last updated on 21/02/2023.