YEGO DRIVERS

SAVINGS AND CREDIT

CO-OPERATIVE SOCEITY LTD

PRIVACY POLICY

2024

1. Introduction

Yego Drivers Sacco, (“we,” “our,” and/or “us”) is a savings and Credit Co-operative operating under BOSA to offer financial services. As an organisation we value the privacy of individuals and take responsibility regarding the management of our stakeholder’s data very seriously as well as all who use our website (collectively, the “Yego Drivers Sacco platform”).

This privacy policy (the “Privacy Policy”) explains how we collect, use, and share information from Yego Drivers Sacco subscribers and any other persons who access the Yego Drivers Sacco Platform or utilize the Services including anyone who may not be a subscriber but visits in any of the Yego Drivers Sacco premises at the invitation of a subscriber (collectively, “Clients”). Beyond the Privacy Policy, your accessing the Yego Drivers Sacco Platform or use of the Services is also subject to our Terms and conditions available at https://www.driverssacco.com.

You consent to the practices outlined in this Privacy Policy by using the Yego Drivers Sacco Platform and/or the Services. If you have any inquiries about our procedures involving personal information, kindly get in touch with us right away.

Yego Drivers Sacco complies with and will continue to do so in accordance with the Data Protection Act of Kenya, the Kenyan Constitution, the Co-Operatives Ministry, and any other applicable laws.

2. Capacity

Since the processing of personal information is based on consent, Yego Drivers Sacco will not knowingly handle personal information for users who are younger than the legal age of consent in Kenya. If we come to know that we are carrying out that processing with these users, we will immediately stop doing so and take reasonable steps to swiftly delete the relevant information from our records.

3. Legal Basis/Lawful purposes Data Collection
4. All data processed by Yego Drivers Sacco will be done on one of the following lawful basis: Contract, Legal obligation, Vital Interests, Public Task, or Legitimate Interests.
5. Where consent is relied upon as a lawful basis for processing data, evidence of express written or opt-in consent shall be kept with the corresponding personal data.
6. Where communications are sent to individuals based on their consent, the option for the individual to revoke their consent should be clearly available and systems shall be in place to ensure such revocation is reflected accurately in our systems.

4. Data Collection
5. Information You Provide to Us, which We Collect and Data about your client profile.

Your name, Photograph, Identification (I.D.) / Passport number, Date of Birth, Biometric Data, Property Details, Postal Address, Telephone Number, Email address, phone number, login name, Marital Status, Gender, password, Next of Kin Details, billing information(as may be required from time to time), Closed Circuit Television (CCTV) surveillance recordings, Salary Details, Transaction Information are among the details you provide us when you subscribe to the Services. 

We also maintain a register of visitors in which we collect and keep your personal data such as your name, company/institution details, telephone number, vehicle registration details and National ID number.

2. Use of Information

Some of the purposes for which we collect and process your data include (this list may not be exhaustive):

• To provide and maintain our Service to members, suppliers and customers.
• To notify you about our services and changes thereto.
• To allow you to participate in interactive features of our Service when you choose to do so.
• To provide member support
• To gather analysis or valuable information so that we can improve our Service.
• To monitor the usage of our Service
• To detect, prevent and address technical issues.
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.

We collect your personal information during the following instances (this list may not be exhaustive). When you:-

• Join the Sacco and fill a membership form.
• Apply for a loan
• Register for a specific product or service offered by Yego Drivers Sacco.
• Request Yego Drivers Sacco for more information about a product or service or contact the Sacco with a query or complaint.
• Respond to or participate in a survey, marketing promotion, prize competition or special offer.
• Interact with Yego Drivers Sacco as a supplier, Agent, Merchant or Dealer.
• Apply for a job application and interviews.
• Visit any of our premises, website, mobile application, and other digital platforms.
• We may also collect your information from other organizations including Credit-Reference Bureaus, Fraud Prevention Agencies and Business Directories where you are listed.

Disclosure of Information

We may disclose your Personal Data to 3^rd Parties as necessary including for the following purposes:-

• To comply with a legal obligation
• To protect and defend the rights or property of Yego Drivers Sacco Limited.
• To prevent or investigate possible wrongdoing in connection with our Services.
• To protect the personal safety of users of Yego Drivers Sacco services or the public.
• To protect ourselves from legal liability.
• To improve the customer/member experience.

• Retention of Information

We will retain your Personal Data only for as long as is necessary for the purposes set out in this policy. In addition, we will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

• Your Data Rights

As a Data Subject you have the following Rights as set out in the Act:

• The right to be informed of the use of your information/data.
• The right to access, update or to delete the information or data in our custody – this is not absolute and maybe be subject to the nature of the data and other prevailing laws.
• The right of rectification – You have the right to have your information/data rectified or deleted if that information is misleading, inaccurate, or incomplete.
• The right to object to our processing of your Personal Data.
• The right to data portability – You have the right to be provided with a copy of the information Yego Drivers Sacco have on you in a structured, machine-readable, and commonly used format.
• The right to withdraw consent – You have the right to withdraw your consent at any time where Yego Drivers Sacco Society Limited relied on your consent to process your personal information, without any detriment to your interests.

7. Privacy of children.

Unless a specific Service allows differently, you must be at least 18 years old or, if it is lower than 18, the age of legal majority in your country. If the legal majority age in your country is different than 18 years old, you represent and warrant by opening a client account that you are at least 18 years old and that you have the capacity, right, and power to engage into and abide by the terms and conditions of this Agreement. Users who are younger than eighteen (18) or the age of majority in your jurisdiction (if that is different from eighteen) are not permitted to use the Service. You are prohibited from allowing third parties to access your client account, and you must be present when anyone under the age of 18 or the legal majority in your country (if that is different from 18) receives financial services. Yego Drivers Sacco is not intended for use by anyone under the age of 18 or the legal majority age in your country, whichever is older. We also do not knowingly collect Personal Information from anyone under the age of 18 or the legal majority age in your country, whichever is older. We shall take action to remove Personal Information provided to us by children under the age of eighteen (18) or the age of majority in your jurisdiction, if that age is lower than eighteen. Please get in touch with us right away if you think that a child who is younger than 18 or the legal majority age in your country (if that is different from 18) has provided us with Personal Information. When a Client brings a youngster inside Yego Drivers Sacco that Client agrees to the child’s usage of the Services and certifies that the Client has the right to do so.

• Data Minimization

Yego Drivers Sacco shall ensure that any Personal Data collected is adequate, relevant and limited to what is absolutely necessary in relation to the purposes for which the data is required and processed.

• Accuracy

• Yego Drivers Sacco shall take reasonable steps to ensure Personal Data has integrity and is kept accurate at all times.
• Where necessary for the lawful basis on which data is processed, steps shall be put in place to ensure that Personal Data is kept up to date.

1. Security

• The Sacco shall ensure that Personal Data is stored securely to guarantee confidentiality, integrity, and availability of the Personal Data.
• Access to Personal Data shall be limited to personal that need access and appropriate security shall be in place to avoid unauthorized sharing of information.
• When Personal Data is deleted, it shall be done safely such that the data is irrecoverable across the data value chain.

1. Data Breach

In event of a Personal Data leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data, the Sacco shall promptly assess the risk to data subjects’ rights and freedoms and appropriately report to the Data Commissioner as per the provision of the Act.

1. Data Protection Officer (DPO) Contacts

• If you wish to exercise any of the rights set out above, please contact us through:        Yego Drivers Sacco Limited

P.O Box 14831-00800 Wetlands

Tel No: +254 703 406181

E-mail: info@driverssacco.com

            yego@driverssacco.com

• Please note that we may ask you to verify your identity and provide signed instruction before responding to such requests. This is to ensure that your Personal Data is not disclosed to any person who has no right to access it.
• We shall endeavour to respond to all legitimate requests within a reasonable time. Occasionally it could take us longer if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.

1. Amendments to this Policy

We may update this Data Policy from time to time. We will notify you of any changes by posting the new Data Privacy Policy on the Sacco’s website. You can also find a copy of the Policy at our premises. We will let you know via Email and/or a prominent notice on our platforms, prior to the change becoming effective and update the ‘’effective date’’ on this Privacy Statement.

1. Governing Law and Jurisdiction

This statement shall be governed and constructed in accordance with the laws of the Republic of Kenya.