Privacy Notice
Our Privacy Notice and You
Your privacy matters to us. Here you will find an overview of how and why we process your Personal Data. You’ll also see what your rights are and how you can contact us.
Of course, if you want more details, you can get access to the full Privacy Notice (published at https://m-kopa.com/privacy/).
Aged under 18?
M-KOPA may collect Personal Data about children from a parent or guardian directly and only with that person’s explicit consent.
What data do we collect?
- Personal Data you provide voluntarily to us when you make a purchase, login on our website(s), contact us, provide feedback, fill in a form, share content with us on our website(s) or publicly share information about M-KOPA on social media.
- Personal Data that we create (e.g., when you make a purchase, and data collected automatically when you access one of our website (s) or app(s), e.g., IP address, device ID. You can see our (published at https://m-kopa.com/privacy/) for more information on these technologies.
- Data collected from other legitimate sources such as M-KOPA promotional partners, from public sources, data from your interaction with our advertising, or Personal Data that is part of your profile on a social network and that you have made available to us.
Why do we process your Personal Data?
We process your Personal Data to get to know you, complete your order(s), process your payments, answer your questions, share information about M-KOPA and our new products or services and improve our future offerings. We also process your Personal Data in order to help us comply with the law, to sell or transfer any relevant part of our business, to manage our systems and finances, to conduct investigations and to exercise legal rights. We combine your Personal Data from all sources so that we can understand you better to improve and personalise your experience when interacting with us.
Whenever we ask you to provide us with any Personal Data, you will be told why we need it and how it will be used. Your Personal Data will only be processed for the purposes set out in our Privacy Notice, or any other further purposes notified to you before the processing begins. If you choose not to provide your Personal Data when we ask you, this may limit the services we can offer you. For example, our “know your customer” requirements help us to better understand your credit profile (such as daily income/purchase potential etc) and protect you and M-KOPA from identity theft.
Who can access your Personal Data and why?
We limit the disclosure of your Personal Data to others, however we do need to disclose your Personal Data in certain instances and mainly to the following recipients:
- Companies within the M-KOPA Group, where required for our legitimate interests or with your consent;
- Third parties engaged by us to provide services such as administering customer care communications (such as WhatsApp Business), payment collections, M-KOPA websites, applications and services (e.g. features, programs, and promotions) available to you, subject to appropriate protections;
- Credit reporting agencies/debt collectors, where permitted by the law and if we need to verify your creditworthiness or collect outstanding monies; and
- Relevant public agencies and authorities, if required to do so by law or a legitimate business interest.
Transfer of your personal data
We may process your Personal Data outside of the country in which you are based for the purposes set out in this notice. When we transfer your Personal Data to other countries, we take reasonable steps to ensure that applicable laws are being followed.
What are your rights over your Personal Data?
When you share Personal Data with us, you have a right to (i) request access (i.e. to ask us what data we have about you, and obtain a copy), (ii) ask for changes to be made or (iii) to have the data deleted. This can be done by contacting us.
- You can also opt-out of marketing communications by (i) clicking on the “unsubscribe” link provided in the promotional material you might receive; (ii) changing preferences via your account or by our Customer Care team by emailing us at customercare@m-kopa.com or calling us in your respective country (Click for contact information).
- For cookies and similar technologies, you can manage your preferences through our Cookie Consent Banner. Find more information in our Cookie Notice.
You can make a complaint:
- If you are concerned about a possible interference with your privacy or misuse of your Personal Data by us you can contact us to make a complaint. We hope we can satisfy queries you may have about the way we process your Personal Data. However, if you have unresolved concerns you also have the right to complain to competent data protection authorities.
Data security and retention
We use a variety of measures to keep your Personal Data confidential and secure, including restricting access to your Personal Data on a need-to-know basis and following appropriate security standards to protect your data.
We take every reasonable step to ensure that your Personal Data is only processed for the minimum period necessary in connection with: (i) the purposes set out in this Privacy Notice (such as the duration of your repayment period); (ii) any additional purposes notified to you at or before the time of collection of the relevant Personal Data or commencement of the relevant processing; or (iii) as required or permitted by applicable law; and thereafter, for the duration of any applicable limitation period. In short, once your Personal Data is no longer required, we will destroy or delete it in a secure manner.
Updates to this Privacy Notice
As business and technology evolves, we might need to change this Privacy Notice. We encourage you to regularly review this Privacy Notice to make sure you are up-to-date with how M-KOPA is using your Personal Data.
Contact us
M-KOPA is responsible for your personal data. M-KOPA comprises of M-KOPA Holdings Limited (a limited liability company in England & Wales, registered number 10891868) and its subsidiary undertakings (referred to collectively as “M-KOPA” or “we” or “our”). More information on our affiliates or subsidiaries can be found here. Your Personal Data will be controlled by the M-KOPA affiliate or subsidiary that is providing services to you or communicating to you and each such entity is regarded as an independent “controller” for your Personal Data. This Notice applies to all such entities. If you have any questions or comments regarding this Privacy Notice or M-KOPA’s Personal Data collection and processing practices, please contact us at dpo@m-kopa.com or calling us in your respective country (Click for contact information).
Effective: 1 January 2024
This Privacy Notice (“Notice”) describes M-KOPA’s policies and practices regarding your Personal Data. It explains how your Personal Data are collected, used, and disclosed by the M-KOPA group of companies (“M-KOPA”, “We”, “Us”). It also tells you how you can access and update your Personal Data and make certain choices about how your Personal Data are used.
If you do not provide necessary Personal Data to us (we will indicate to you when this is the case, for example, by making this information clear in our sign up forms), we may not be able to provide you with our goods and/or services. This Notice can change from time to time (see Section 10).
This Notice provides important information in the following areas:
- PERSONAL DATA OF CHILDREN
- SOURCES OF PERSONAL DATA
- PERSONAL DATA THAT WE COLLECT ABOUT YOU AND HOW WE COLLECT IT
- COOKIES/SIMILAR TECHNOLOGIES
- DISCLOSURE OF YOUR PERSONAL DATA
- RETENTION OF YOUR PERSONAL DATA
- ACCESS, STORAGE AND/OR TRANSFER OF YOUR PERSONAL DATA
- YOUR RIGHTS
- YOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR PERSONAL DATA
- CHANGES TO THIS NOTICE
- DATA CONTROLLERS & CONTACTS
1. PERSONAL DATA OF CHILDREN
We do not knowingly request or collect Personal Data from anyone below the age of 18. If We discover that We have unintentionally collected Personal Data from anyone below 18, We will remove that person’s Personal Data from our records promptly. However, M-KOPA may collect Personal Data about children below the age of 18 years of age from the parent or guardian directly, and with that person’s explicit consent.
2. SOURCES OF PERSONAL DATA
We collect Personal Data from or about you from the following sources:
- M-KOPA website(s): Website(s) operated by Us under our own domain(s)/URL(s) (such as www.M-KOPA.com) and mini-sites that We run on third party social networks such as Facebook (“Websites”).
- M-KOPA mobile sites/apps: Customer-directed mobile sites or applications operated by or for M-KOPA, such as smartphone apps.
- Call, text, USSD (Unstructured Supplementary Service Data) message and other electronic messages: Interactions with electronic communications between you and M-KOPA.
- M-KOPA Customer Care call centres: Communications with our Customer Care team.
- Registration forms: Printed or digital registration and similar forms that We collect when you sign up to purchase our products and services, in-store demos, contests and other promotions, or events.
- Advertising interactions: Interactions with our advertisements (e.g., if you interact with on one of our ads on a third-party website, We may receive information about that interaction).
- Surveys: Information gathered when you complete any survey, focus group, interview, study or other such activity.
- Recruitment and former employees: Information shared by yourself when applying for a job with Us, information publicly available on social media platforms to identify prospective candidates for a specific function, or basic information required from former employees about their employment at M-KOPA.
- Data We create: In the course of our interactions with you, We may create Personal Data about you (e.g. records of your purchase(s), issue logs etc).
- Data from other sources. Credit reference bureaus, third party social networks (e.g. such as Facebook), advertising networks (e.g. such as Google), messaging apps (e.g. such as WhatsApp), market research (if feedback is not provided on an anonymous basis), third party data aggregators, M-KOPA promotional partners, public sources and data received when We acquire other companies.
3. PERSONAL DATA THAT WE COLLECT ABOUT YOU AND HOW WE COLLECT IT
Depending on how you interact with M-KOPA (online, offline, over the phone, etc.), We collect various types of information from you, as described below:
- Personal contact information: This includes any information you provide to Us that would allow Us to contact you, such as your name, e-mail address, social network details, or phone number.
- Your Account: Any information that is required to create your account with M-KOPA and give you access to your specific account profile. Examples include your login ID, date of birth, age or age range, gender, geographic location occupation, national identity number (or similar identification numbers as applicable), image, mobile number, password in unrecoverable form, and/or security question and answer and any other information required for our due diligence and to better understand your credit profile (such as daily income/purchase potential etc).
- Device information: Any information about the device that you have purchased from Us or that has been issued to you as an employee, which may include, your device’s unique device ID (IMEI number), make/model, location based data, geo-location and other similar device data that may be (i) for the performance of the contract you have entered with us; (ii) to comply with our legal obligations (for example where We are required to carry out due diligence on our customers to avoid theft, fraud and comply with anti-money laundering regulations); (iii) to help us improve the quality of the devices and services that We offer you, and to offer you additional products and services.
- Websites/communication usage information: As you use our applications or websites, We collect certain information about your actions in order to prevent fraudulent use of your account by others, assist you in remembering your log in details or language and other preferences to avoid you having to re-enter your preferences every time you use our website. This information is captured using automated technologies such as cookies and web beacons and is also collected through the use of third party tracking for analytics and advertising purposes. You have the right to object to the use of such technologies, for further details please see Section 4.
- Market research & customer feedback: Any information that you voluntarily share with Us about your experience of using our products and services. As part of completing a survey, you may be asked to provide your name, address, phone number and any other information relevant. This can be done via means such as email, ads, SMS, phone calls, messaging apps and postal mailings to the extent permitted by applicable laws. Some of our research, campaigns and promotions are run on third party websites and/or social networks. This use of your Personal Data is voluntary, which means that you can oppose (or withdraw your consent in certain countries) to the processing of your Personal Data for these purposes.
- Profiling and automated decision making: To improve your experience and fight fraud, we may conduct manual reviews or use automated decision making, for example, your identification documents may be subject to human review and/or automated decision making for verification purposes.
- Customer-generated content: Any content that you create and then share with Us on third party social networks or by uploading it to one of our Websites or apps, including the use of third party social network apps such as Facebook. Examples include photos, videos, personal stories, or other similar media or content. Where permitted, We collect and publish customer-generated content in connection with a variety of activities, including contests and other promotions, website community features, consumer engagement, and third party social networking.
- Third party social network information: We receive your third party social network profile information (or parts of it) every time you interact with M-KOPA on a third party social network platform such as Facebook, every time you use a social networking feature that is integrated within M-KOPA’s website or every time you interact with Us through a third party social network. We use your Personal Data when you interact with the platform’s features, such as “Like” functions on Facebook or Instagram, to serve you with advertisements and engage with you on third party social networks. To learn more about how your information from a third party social network is obtained by M-KOPA, or to opt-out of sharing such social network information, please visit the website of the relevant third party social network.
- Employment information: We are constantly searching for new talent for our organization, and We collect information about job applicants or prospective candidates from several sources. Applicants are referred to M-KOPA Careers (published at https://m-kopa.com/careers/) for more information. When an employee leaves M-KOPA, We continue to process information that is related to them for any remaining business, contractual, employment, legal, and/or fiscal purposes as required by law.
- Payment and Financial information: Any information that We need in order to fulfil an order.
- Calls to M-KOPA: Communications with M-KOPA can be recorded or listened into, in accordance with applicable laws, for local operational needs (e.g. for quality or training purposes). Payment details are not recorded. Where required by law, you will be informed about such recording at the beginning of your call.
- Sensitive Personal Data: We do not seek to collect or otherwise process sensitive Personal Data in the ordinary course of our business. Where it becomes necessary to process your sensitive Personal Data for any reason, We rely on your prior express consent for any processing which is voluntary. If We process your sensitive Personal Data for other purposes, We rely on the following legal bases: (i) detection and prevention of crime (including the prevention of fraud); and (ii) compliance with applicable law (e.g. to comply with our diversity reporting).
4. COOKIES/SIMILAR TECHNOLOGIES
Please see our Cookie Notice (published at https://m-kopa.com/privacy/) to learn how you can manage your cookie settings and for detailed information on the cookies We use and the purposes for which We use them.
5. DISCLOSURE OF YOUR PERSONAL DATA
In addition to the M-KOPA entities mentioned in the data controllers & contact section (see section 11), We share your Personal Data with the following types of third party organisations:
- Service providers: These are external companies that We use to help Us run our business (e.g. order fulfilment, payment processing, fraud detection and identity verification, website operation, market research companies, support services, promotions etc.). Service providers, and their selected staff, are only allowed to access and use your Personal Data on our behalf for the specific tasks that they have been requested to carry out, based on our instructions, and are required to keep your Personal Data confidential and secure.
- Credit reporting agencies/debt collectors. To the extent permitted or required by applicable law, credit reporting agencies and debt collectors are external companies that We use to help Us to verify your creditworthiness (in particular for orders with invoice) or to collect outstanding payments.
- Third party companies using Personal Data for their own marketing purposes. Except in situations where you have given your consent, We do not license or sell your Personal Data to third party companies for their own marketing purposes. Their identity will be disclosed at the time your consent is sought.
- Third party recipients using Personal Data for legal reasons or due to merger/acquisition. We will disclose your Personal Data to third parties for legal reasons or in the context of an acquisition or a merger.
6. RETENTION OF YOUR PERSONAL DATA
M-KOPA takes every reasonable step to ensure that your Personal Data are only processed for the minimum period necessary for the purposes set out in this Privacy Notice and as communicated to you. We will however retain copies of your Personal Data in a form that allows for identification only for as long as:
- We maintain an ongoing relationship with you (e.g. where you have not unsubscribed from our marketing);
- your Personal Data are necessary for the purposes set out in this Privacy Notice; and c) we have valid legal basis plus the duration of: (i) any applicable limitation period (i.e. any period during which a person could bring a legal claim against us), plus (ii) an additional 2 months following the end of the applicable limitation period (so we are able to identify any Personal Data of a person who may bring a claim at the end of the applicable period); and
- if any relevant legal claims are brought, we may continue to process your Personal Data for such additional time necessary in connection with that claim.
During the periods noted in paragraph b) above, processing of your Personal Data will be restricted to review in connection with any claim or obligation under applicable law, storage and maintaining security of those data.Once the periods in paragraphs a), b) and c) above, each to the extent applicable, have expired, we will either (i) permanently delete or destroy the relevant Personal Data or (ii) anonymise the relevant Personal Data.
7. ACCESS, STORAGE AND/OR TRANSFER OF YOUR PERSONAL DATA
We use appropriate measures (described below) to keep your Personal Data confidential and secure. Please note, however, that these protections do not apply to information you choose to share in public areas such as third party social networks.
- People who can access your Personal Data: Your Personal Data will be processed by our authorised employees or agents, on a need to know basis, depending on the specific purposes for which your Personal Data have been collected (e.g. our employees in charge of consumer care matters will have access to your consumer record).
- Information Security: To protect your Personal Data from unauthorized access, use, and disclosure, We have implemented reasonable physical, administrative, and technical safeguards. We also require our Business Partners, suppliers, and third parties to implement appropriate safeguards.
- Transfer of your Personal Data. Because of the international nature of our business, We may need to transfer your personal data within the M-KOPA group, and to third parties as noted in Section 5 above, in connection with the purposes set out in this Privacy Notice. For this reason, We may transfer your personal data to other countries that may have different laws and data protection compliance requirements to those that apply in the country in which you are located (see Section 11 below for details of which countries your Personal Data may be transferred to). We have put in place the strictest standards to protect your Personal Data if transferred. If the countries to which your Personal Data will be transferred to do not implement adequate personal data protection standards, We will ensure that any transfer is subject to adequate levels of protection.
8. YOUR RIGHTS
Depending on where you are located, you have certain rights when it comes to the handling of your Personal Data. You may contact Us (see Section 11) to:
- request access to the Personal Data that We have on you, or have it updated or corrected. Depending on the applicable law, you may have additional rights concerning your Personal Data;
- request to obtain your Personal Data in a usable format and transmit it to another party (also known as the right to data portability);
- request to delete the Personal Data We hold about you;
- opt-out of specific Personal Data processing types, such as targeted advertising;
- ask questions related to this Privacy Notice and our privacy practices;
submit a complaint if you are not satisfied with how M-KOPA is processing your Personal Data.Any identification information provided to Us will only be processed in accordance with, and to the extent permitted by applicable laws. Note: requests submitted by a person other than you without evidence that it is legitimately made on your behalf will be rejected.Please note that the above rights are not absolute and may be subject to limitations or exemptions within local legislation. Where applicable, we will identify this in our response to your request.We hope that We can satisfy your queries about the way We process your Personal Data. If you have unresolved concerns you also have the right to complain to the relevant competent data protection authority. Authorities can be contacted through their websites (see below).
9. YOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR PERSONAL DATA
The following mechanisms give you control over your Personal Data:
- Cookies/Similar Technologies: You can manage your consent so as to refuse all or some cookies/similar technologies, or to alert you when they are being used. Please see Section 4 above.
- Advertising, marketing and promotions: You can consent for your Personal Data to be used by M-KOPA to promote its products or services through tick-box(es) located on the registration forms or by answering the question(s) presented by our Customer Care representatives. If you decide that you no longer wish to receive such communications, you can unsubscribe from receiving marketing-related communications at any time, by following the instructions provided in each such communication. Please note that, even if you opt-out from receiving marketing communications, you will still receive administrative communications from Us, such as notifications about your account activities (e.g. loan status, password changes, etc.), and other important non marketing related announcements.
10. CHANGES TO THIS NOTICE
If We change the way We handle your Personal Data, We will update this Notice. We reserve the right to make changes to this Notice at any time. Please check back frequently to see any updates or changes to our Notice.
11. DATA CONTROLLERS & CONTACTS
M-KOPA comprises of M-KOPA Holdings Limited (a limited liability company in England & Wales, registered number 10891868) and its affiliates and/or subsidiaries (referred to collectively as “M-KOPA” or “we” or “our”). M-KOPA affiliates and/or subsidiaries do business across Africa. The privacy laws in some countries consider a Controller (or Responsible Party as defined in South Africa) to be the legal entity (or natural person) who defines the purposes for which the processing of Personal Data takes place and how that data is processed. Parties that are involved in processing operations on behalf of a Controller are referred to as Processors (or Operator as defined in South Africa). The titles associated with the obligations differ, depending on the jurisdiction. Where relevant for the privacy laws in your country, the Controller of your Personal Data is M-KOPA’s main subsidiary or affiliate in your country. The contact details of our main affiliate and/or subsidiary in your country or region can be found in the table below: If you have any questions about our products or services, please contact Us at customercare@m-kopa.com.To ask questions or make comments on this Notice and our privacy practices or to make a complaint about our compliance with applicable privacy laws, please contact Us at dpo@m-kopa.com or call our Customer Care team (see below table for phone numbers).
London WC1N3AX
United Kingdom
In addition, all the following M-KOPA entities
M-KOPA Ghana Money Lending Co
P.O.Box CT 6282, Cantonments, Accra, Ghana
WhatsApp: +233551668800
M-KOPA Loans Kenya Limited
M-KOPA Mobility Kenya Limited
P.O. Box 5186600100
Nairobi, Kenya
WhatsApp: +254799136761
M-KOPA Lending Nigeria Limited
WhatsApp: +2349030009822
Jean Avenue, P.O. Box 7750, Centurion, Gauteng 0046
South Africa
WhatsApp: +27872922111
Tanzania
M-KOPA Sales Limited
WhatsApp: +256707743200
M-KOPA Lending Holdings Limited
M-KOPA Mobility Holdings Limited
1 Pancras Squarer
London N1C 4AG
United Kingdom
Introduction
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about You may be linked to the information stored in and obtained from Cookies. For further information on how We use, store and keep your personal data secure, see our Privacy Policy.
We do not store sensitive personal information, such as mailing addresses, account passwords, etc. in the Cookies We use.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Cookies Policy:
– Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Cookies Policy) refers to M-kopa Kenya.
– Cookies means small files that are placed on Your computer, mobile device or any other device by a website, containing details of your browsing history on that website among its many uses.
– Website refers to M-KOPA, accessible from m-kopa.com
– You means the individual accessing or using the Website, or a company, or any legal entity on behalf of which such individual is accessing or using the Website, as applicable.
The use of the Cookies
Type of Cookies We Use
Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close your web browser.
We use both session and persistent Cookies for the purposes set out below:
-Necessary / Essential Cookies
Type: Session Cookies Administered by: Us (M-KOPA)
Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
-Functionality Cookies
Type: Persistent Cookies Administered by: Us
Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.
Your Choices Regarding Cookies
If You prefer to avoid the use of Cookies on the Website, first You must disable the use of Cookies in your browser and then delete the Cookies saved in your browser associated with this website. You may use this option for preventing the use of Cookies at any time.
If You do not accept Our Cookies, You may experience some inconvenience in your use of the Website and some features may not function properly.
If You’d like to delete Cookies or instruct your web browser to delete or refuse Cookies, please visit the help pages of your web browser.
-For the Chrome web browser, please visit this page from Google: https://support.google.com/accounts/answer/32050
-For the Internet Explorer web browser, please visit this page from Microsoft: http://support.microsoft.com/kb/278835
-For the Firefox web browser, please visit this page from Mozilla: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored.
-For the Safari web browser, please visit this page from Apple: https://support.apple.com/guide/safari/manage-cookies-and-website-data- sfri11471/mac
-For any other web browser, please visit your web browser’s official web pages.
More Information about Cookies
You can learn more about cookies: Cookies: What Do They Do?.
Contact Us
If you have any questions about this Cookies Policy, You can contact us by visiting this page on our website: https://m-kopa.com/contact/