Privacy Policy

Last edited on December 15, 2024

Permissions Revealed

Impiya is dedicated to safeguarding your privacy and guaranteeing openness in how we gather, use, and secure your personal data in line with the Zambian Data Protection Act, 2021, and other pertinent local legislation. We need certain rights to access particular information on your device in order to evaluate your eligibility and hence provide you a seamless loan acceptance process. Every piece of information gathered will be safely kept and applied just for uses connected to services. Third parties never will be able to access your data without your clear permission.

SMS permission Authorities

We want permission to examine your SMS data in order to more fairly assess your loan eligibility. By looking over all of your SMS records—including sender and receiver identities, transaction descriptions, and amounts—this helps us evaluate your financial trustworthiness. After system filtering, just SMS data pertaining to financial transactions will be uoloaded. Nothing else personally will be handled or disclosed.

Once you approve the rights and provide access to your SMS data, the app will start examining it. Just SMS data matching pre-defined keywords will be uploaded for analysis for the first-time credit check. When you apply for a loan, the app collects keyword-filtered financial text messages from the past period of time. Upload just SMS messages pertaining to matching predetermined phrases or financial transactions.

Your SMS data will stay private and not be sent to our servers should you refuse to allow access or fail to click the "Apply" button.

All SMS data is sent safely to our servers at https://direction.impiya.com/tupse using industry-standard encryption. Our first concern is your privacy; we never will distribute your SMS data to third parties without your permission.

Notifications

Regarding special offers, payment reminders, and critical account updates, we might send you push notifications. These optional alerts can be disabled at any moment without compromising the operation of the app.

Information about Emergency Contacts

For identification confirmation and fraud avoidance, we want access to two emergency contacts. These contacts can be entered personally or chosen from your address book. We will just access the contacts you provide; no more information from your address book will be gathered without your permission. Our servers will safely receive this data at https://direction.impiya.com/tupse over HTTPS.

Phone State (Some models will call this permission phone call)

Every time you click to apply for a loan or click allow the authorization, we compile specific device information to verify your identity and stop fraud. This covers the device model, running system version, brand, unique identifiers (like IMEI or serial number), screen width, default language, time zone, display settings, CPU performance, and other device environment information. We also compile details about financial apps you have installed on your device including app name, version, install date, and last update date. This lets us spot any hazards and protect your account against illegal activity.

Note that we do not gather information from non-financial apps. None of this device information will be sent or processed should you not choose to apply.

Our servers safely house all gathered device data to stop unwanted access.

Content for Networks

We evaluate possible hazards and stop data loss during network problems using network data—including your IP address, connection status, and network type. We may access your Wi-Fi network data and other information for risk assessments including MAC address, network type, and SIM provider.

Knowledge Your Customer, or KYC

Based on Zambia's laws, we could require you to supply particular personally identifiable information (PII) while utilizing our services. Though not restricted to these specifics, this could contain your phone number, email address, name, gender, birthdate, ID card number, and other pertinent information. To assist us to handle your loan application and assess your creditworthiness, we could additionally ask for details on your marital status, educational background, and job history.

List of App Notes

To evaluate fraud risks and find any possible malware compromising your security, we also gather data on the programs loaded on your device. This data lets us stop illegal access to your personal data and spot bogus behavior. We solely deal with financial apps and do not gather information from non-financial ones.

Data Utilization Methodologies

Using your gathered information, we:

Verify your creditworthiness and identification.

Sort your loan eligibility.

Boost our loan services' accuracy and efficiency.

Spot and stop fraud or other security hazards.

Guarantees of Data Security

All of the gathered data is safely sent to our servers at https://direction.impiya.com/tupse following encryption Your data will be kept safely and not distributed to any third party without your clear authorization.

Modern encryption methods help to guarantee that all data is safe both during storage and transmission. We shall only use your personal data as stated above; we are dedicated to protect it.

Strategies for Data Gathering

We compile your personal information mostly in two ways:

When you utilize our services—such as loan applications, online form completion, or correspondence with us—we gather the data you submit directly.

As you use our app, website, and connected services, we also automatically gather usage statistics. This covers information your device provides about location, type of device, and interactions with our system.

How We Apply Your Information

Using your personal information is for:

verification of identity.

Loan eligibility review and credit score.

managing collections and monitoring payments.

Risk evaluation guarantees your valid user status.

Under the following conditions we might exchange data with third parties:

Internal Affiliates: Advance statistical analysis, service evaluation, and product creation.

Service providers help with credit-related offerings.

Authorities of Government: To follow legal, judicial, or regulatory guidelines.

Third-party partners for advertising or promotions.

Using Impiya means that you agree to the gathering, use, and sharing of your data per this policy. Your authorization enables us to provide, depending on your financial condition, safe, open, and tailored financing solutions.

1. IN GENERAL

About Us

Impiya ("Impiya", "we", "us", or "our") is dedicated to delivering the highest quality of service to you. We have consistently prioritized the protection and respect of your personal information and privacy.

Justifications for reviewing this privacy statemen

The subsequent policy outlines the manner in which we will manage any personal information that we collect from you or that you provide through the Impiya applications (the "Apps"), the manner in which you create and use your Impiya account (your "Account"), and the manner in which you utilize our lending services (collectively, the Apps and your Account, the "Services," as further described in this privacy policy and our Terms of Use". I implore you to read it fully.

In order to acquire a thorough comprehension of our policies and procedures regarding your personal data and the manner in which we will utilize it, we strongly advise that you review the following information.

For information regarding the Services' general utilization, please consult our Terms of Use.

Please do not hesitate to contact us.

if you have any concerns about this policy or our privacy practices, you can contact us by sending an email to need.resolution@impiya.com or through the Apps.

Recent developments and news

We closely monitor the provisions of this policy and our privacy policies to guarantee that your personal data is processed in the most secure manner possible.

2. DATA THAT WE MAY ACQUIRE FROM YOU

A specific quantity of your personal data must be collected, stored, transmitted, analyzed, and processed in order to provide you with the Services. This section of the policy provides a comprehensive explanation of the data we will obtain about you and the circumstances under which it will be used.

Included in our management of personal information are the following:

You may be required to submit personal information when you create an account.

During the account creation procedure, we will ask if you would like to include a pseudonym and other details in your profile.

While this information is not necessary to create your Account, it will help us gain a more thorough comprehension of you as a customer and improve your overall experience with the Services.

Information that you provide when creating an account

When establishing an account, you are obligated to submit your display name and mobile number. These personal details are essential for the establishment of your account. You will not have full access to the Services after the initial configuration is complete. Therefore, I would like to inform you.

The confidential information necessary to establish your account in its entirety

Your access to Services will be severely restricted during the initial configuration of your Account. In order to completely activate your Account and grant you access to all of the Services, we are required to verify your identification in accordance with legal provisions. In order to accomplish this, we require your Zambian ID and any additional documentation that may be necessary. In order to verify your identity, we will derive your name, birthdate, Zambian ID expiration date, and any other personal information that we deem necessary or mandated by law from these documents. Please be advised that you are obligated to promptly notify us of any modifications to your personal information. Depending on the circumstances, it may be necessary to verify your identification once more.

Transactional data

When you employ our services to borrow money or for any other transactional purpose associated with the services, we collect information about your creditworthiness and the lending transaction. Example of information that may be included include your personal data, employment and income data, credit history, debt-to-income ratio, collateral information, loan purpose, loan amount, and terms, bank account information, residential information, references, and any information related to co-signers or guarantors.

Credit history

For instance, in order to determine which account to pay from and whether to extend credit to you, we will gather information about your employment, income, and bank account for the Services offered by the Apps. We will also assess your name, phone number, emergency contact information (including their name, relationship to you, and phone number), bank account information, and history of repaying credit that we have extended to you in order to determine whether to extend credit to you in the future via the Apps. In the event that you neglect to repay the appropriate credit or adhere to the terms and conditions of the service or service, we may also disclose this information to third parties, such as debt collection agencies.

Marketing preferences

We may send you emails or other marketing communications in accordance with your consent and preferences. Consequently, we may also gather supplementary preferences from you as a result of your interactions with and responses to our marketing communications. You are entitled to revoke your consent and reverse your decision at any time.

Information concerning allegations or inquiries

In the event that you wish to submit a complaint about our services, report a problem (such as an issue with the Apps), or contact us with inquiries, this personal information will be automatically incorporated into your Account.

Automated decision-making in conjunction with service provider data:

Verification experiments are supported by a third party, as previously described. Please be informed that the verification process may produce personal information that will be transmitted to us. Automated decision-making is implemented during verification tests conducted by our organization and our partner. Please be informed of this. Automated decision-making is the process of evaluating any aspect of you, such as your identification, by analyzing your personal data. Please be informed that the automated decision-making process will not authorize an Account for you if your identity has not been accurately verified.

Technical, cookie, and usage information

We gather information regarding the frequency and utilization of our services and/or applications, as well as other specifics regarding your usage. This measure is implemented to gain a more comprehensive understanding of the delivery mechanisms of the Services and Apps, as well as the factors that our users find endearing and objectionable. If applicable, these data may encompass the internet protocol (IP) address through which you connect your device to the internet, your registration credentials, the types and versions of browser plug-ins, your operating system, and the platform.

Device Specification

The following details are collected about the device you are using to access the Services and/or App: the type of hardware, the version of the application you are using, the mobile network, the list of applications on your device, the time zone setting, the SIM card, the IMEI, the name of the mobile operator, and the VPN.

3. OUR USE OF YOUR PERSONAL INFORMATION

This section offers a comprehensive account of the rationale behind our use of your personal information, as well as the legal justifications we have for doing so, which may include individual data protection laws. It is crucial to emphasize that we only process your personal information when it is legally permissible.

3.1 In order to offer the Website and Services

We manage your personal information in the following manner:

to confirm your identity and establish your account;

to determine your creditworthiness and make credit judgments in order to operate and provide the Services;

create a connection between your account and another platform or third-party account that is utilized to enhance the value of your account;

Assure that the applications are accessible.

The following legal justifications are employed to process your information for the purposes previously mentioned:

our legitimate interest in marketing our services to you and other parties, operating and enhancing the Services and Apps, offering lending-related Services, and being as efficient as possible in abiding by all applicable laws, duties, and regulations while maintaining our records up to date;

meeting our legal obligations, which encompass the validation of identification and other related procedures.

3.2 To protect our services, ourselves, your account, and your funds

We manage your personal information in the following manner:

To combat fraud and identify and manage risks. In order to comply with legal obligations regarding fraud and other financial offenses, as well as to safeguard you, your personal information, and your funds, your personal information is utilized.

to authenticate activities and maintain security and safety on and off our services. We reserve the right to investigate any suspicious conduct or suspected violations of our terms of use in order to ensure that you are not violating the law or the terms of use.

The following legal justifications are employed to process your information for the purposes previously mentioned:

In light of our legitimate interest in protecting your money, your Account, our Services, us, our group companies, and any necessary third parties, as well as in protecting us from security-related intrusions that could be detrimental;

if the proper implementation of a contract with you requires us to take action as instructed by you prior to the execution of the contract;

compliance with our legal obligations, including those concerning the prevention of financial offenses; and

For instance, we may be obligated to investigate hazardous conduct in order to safeguard the interests of you or another individual.

3.3 I am requesting to communicate with you.

Your personal information will be safeguarded by us:

The purpose of this communication is to address any inquiries you may have submitted or any potential fraudulent activity related to your account.

The following legal justifications are employed to process your information for the purposes previously mentioned:

our legitimate interest in safeguarding your funds, your Account, our Services, us, the businesses in our group, and any relevant third parties;

if it is essential to fulfill your requests and implement a contract with you in a manner that is appropriate prior to your signature; and

It is imperative that we fulfill our legal obligations, which encompass the validation of identification and other forms of verification.

3.4 To send you advertisements

Your personal information will be safeguarded by us:

to send you promotional communications, such as those regarding supplementary services that we or the businesses in our collaborative offer.

The following legal justifications are employed to process your information for the purposes previously mentioned:

if you granted permission for this to transpire; and

conditions that are unique to our legitimate interests in promoting our services to you and other individuals.

3.5 Enhance, modify, and improve our services and applications

Your personal information will be safeguarded by us:

to gather additional information regarding your preferences for our Applications and Services by examining your use of the Services and Apps. In order to guarantee that you do not neglect any discounts or opportunities, we may also assess your conduct while using the Services and Apps. To achieve this, we will employ the data we acquire to contact you, for instance, if you have not yet completed a transaction with one of our online retailers or have not used the Apps in a while.

To respond to any questions you may have, and

In order to enhance and personalize our services and applications.

The following legal justification is used to process your data for the aforementioned objectives:

our legitimate interest in providing Services and/or Apps related to lending, managing and enhancing the Services and/or Apps, advertising services to you and other individuals, and doing everything necessary to efficiently comply with applicable laws, duties, and regulations while maintaining accurate records.

4. DISCLAIMER OF PERSONAL DATA

Your personal information may be disclosed exclusively in the following situations:

(1) Your consent is required for the disclosure of your personal information.

(2) We may disclose your personal information to other users of the Services in order to guarantee that you both receive the maximal benefit from the Services we provide. Additionally, our services facilitate the effortless exchange of personal information with other Service users.

(3) By submitting personal information to your public profile on the Apps, you acknowledge and assent to the public display and viewing of this information by other App users.

(4) We may disclose your personal information to specific service providers, partners, or group organizations in order to assist us in the provision of the Services, including the transmission of funds, the management of transactions, the provision of in-app services, and the execution of verification checks. Occasionally, we may be obligated to disclose your entire account and financial information to a partner in connection with the Services, depending on the level of service they provide.

(5) We may disclose your personal data to specific service providers or group companies in order to evaluate the Services and make improvements to ensure that they are of the utmost quality for you and others.

(6) In order to comply with a legal obligation or to respond to laws enforcement, officials, regulatory agencies, and other legitimate demands or legal proceedings, we may be required to disclose your personal information.

(7) We may disclose your personal data in the event that a third party undertakes responsibility for the management of your personal data as a result of a merger, acquisition, or other form of restructuring.

Your transaction and other account data will be stored in Zambia in compliance with Zambian laws, finance company regulations, and consumer protection legislation. Nevertheless, we will ensure that the relevant data privacy laws are adhered to in the event that we are legally obligated to transfer any of your personal data to a country other than the one from which it was originally obtained, as a result of the aforementioned circumstances. The legal requirements, such as the involvement of which nations and the occurrence of cross-border personal data sharing, will be determined by the transmission of personal data. We will always guarantee that your personal information is safeguarded to the same degree outside of the country in which you currently reside.

5. PRIVACY OF YOUR PERSONAL INFORMATION

We prioritize the protection of your privacy and make every effort to prevent the unauthorized use, access, alteration, or disclosure of your data, as well as the accidental loss or damage of your data. The necessary security measures have been implemented to prevent this from happening.

urthermore, we exclusively grant access to agents, contractors, employees, volunteers, and other third parties who require it, as previously mentioned. They are obligated to maintain the confidentiality of your personal information and will only process it in accordance with our instructions.

I am sorry to inform you that the security of information transmitted via the internet is not entirely guaranteed. Despite our best efforts to safeguard your personal information, we are unable to guarantee the security of any information you submit using our services. You are accountable for the information you transmit. Your data will be protected from accidental loss, unauthorized use or access, alteration, or disclosure through the implementation of stringent security protocols and procedures from the instant we receive your information.

6. WHAT IS THE DURATION OF OUR STORAGE OF YOUR PERSONAL INFORMATION?

Your personal information will be retained for the length of time required to fulfill the objectives for which it was acquired, including fulfilling any obligations resulting from laws, regulations, taxes, accounting, or reporting. When determining the appropriate retention period for personal data, we take into account the quantity, nature, and sensitivity of the data, the potential harm from its unauthorized use or disclosure, the reasons for processing the data and whether we can achieve those purposes in a different manner, and any relevant legal, regulatory, tax, accounting, or other requirements.

Given this, we have concluded that:

We will retain your financial information for a period of six years from the date of your most recent transaction, or for a prolonged period if it falls within the retention term specified below, as permitted by applicable law, including anti-money laundering measures.

We will permanently delete all corresponding data, including personal and transactional information, after a maximum of six years from the cancellation date.

In the event of a complaint or if we have reasonable grounds to believe that there may be legal action or other regulatory enforcement or action regarding our relationship with you and/or your use of the Services, your personal data may be retained for an extended period of time.

7. RIGHTS THAT YOU ARE AWARE OF

It may be possible to do so, provided that specific conditions and jurisdictional restrictions are met:

(1) Submit a request for access to your personal information. By taking this action, you can verify that we are lawfully processing your personal data and obtain a copy of the information we have about you.

(2) Request that the personal information we have on file for you be corrected. This enables you to revise any inaccurate or incomplete information we may have about you, although we may need to confirm the credibility of any new information you submit.

(3) Request the removal of your personal information. When there is no valid justification for the continued use of personal information, you have the ability to request its erasure or removal from our systems. In the event that you have successfully exercised your right to object to processing (see below), if we may have unlawfully processed your information, or if we are obligated to expunge your personal data in order to comply with local law, you also have the right to request that we delete or remove your records.

(4) If you believe that the processing of your personal data violates your fundamental rights and freedoms due to factors specific to your circumstances, and we are relying on our own or a third party's legitimate interests, you have the right to object to the processing of your data. Furthermore, you have the right to object if we are using your personal information for direct marketing purposes.

(5) Request that the processing of your personal data be restricted. This enables you to request that we discontinue the processing of your personal data in specific circumstances.

(6) Request that your personal data be transferred to you or another party. Your personal data will be transmitted to you or a designated third party in a machine-readable, widely-used format that is organized.

(7) If we are processing your personal data with your consent, you have the right to revoke it at any moment.

(8) File a complaint with the applicable authorities in the event of any data protection concerns. We would appreciate it if you could reach out to us at your earliest convenience to address your concerns before you approach the regulator.

In order to exercise any of the rights mentioned above, please use the information provided above to contact us.

In order to verify your identity and guarantee that you are free to exercise the right you desire, we may need to request specific information from you. This is implemented as a security measure to prevent the disclosure of personal information to individuals who are not authorized to receive it. Please be advised that we may contact you to request further information in order to expedite our response.

An endeavor is made to respond to all legitimate inquiries within a month. Occasionally, the completion of your request may exceed one month if it is exceedingly intricate or if you have submitted multiple requests. In the event that this occurs, we will provide you with regular updates and notify you.

8. EXTERNAL LINKS TO THIRD PARTIES

Hyperlinks to third-party websites, plug-ins, and applications may be present on our website and services. If you click on these links or enable these connections, third parties may be able to collect or share information about you. Please be aware of this. We are not responsible for the privacy policies of these third-party websites, plug-ins, and/or programs, as they are beyond our control. Before leaving our applications or website, please review the privacy policies of any website or application you visit or use.