Data Protection and Management

In order to ensure the protection of information in custody and sensitive data, the following should apply to ELCT ND SACCOS staff and contractors: –

1. Any ELCT ND SACCOS data that is kept on removable media such as external hard drives and flash disks should be protected by password or encryption. This applies to other mobile devices that have ELCT ND SACCOS data (they should be password protected).
2. All Confidential Information and data should always be encrypted when stored or during o ELCT ND SACCOS, unless it’s in line with his/her job role and responsibility. Where there is doubt, the relevant management should be contacted for clarification.
3. Information collected, owned and/or controlled by ELCT ND SACCOS during the cause of business should not be disclosed to outside people, party, or organizations unless there is authorization from bank management. This include directors & employees’ information, members / customers details, vendor/partner/third-party details that is in custody of ELCT ND SACCOS.
4. No unauthorized copies or duplication is allowed unless it is for ELCT ND SACCOS business activities.
5. The country laws related to data protection should be observed all the time unless directed otherwise by relevant country authority.
6. Users with Laptop should store minimum quantity of ELCT ND SACCOS information on local storage and they should ensure that there is a backup kept in the shared drives.
7. Users other than laptop users, are prohibited from storing company information on local drives in order to preserve storage space and to prevent the loss of files and confidential information in the case of a hardware failure or theft

Information Security and Protection

Information security and protection is critical to ELCT ND SACCOS in order to preserve: –

Confidentiality – Access to programs and data shall be confined to those with appropriate authority.

Integrity – Information shall be complete and accurate. All systems, assets and networks shall operate correctly, according to specification.

Availability – Information shall be available and delivered to the right person, at the time when it is needed

ELCT ND SACCOS, will take all appropriate measures to protect the systems, information and data of the company through various measures, including but not limited to; physical access to computer/laptop machines, the assignment of unique user IDs and passwords and relevant access privileges to the users based on job roles and responsibilities, the logging and monitoring of user activities on authorized systems and networks, the installation of security protection and monitoring systems that includes firewalls & anti-virus software.

All users (employees, contractors, partners, support teams, etc.) granted access to ELCT ND SACCOS network, systems and data are responsible for Information and security as specified hereunder: –

1. All ELCT ND SACCOS system users are responsible for their use or misuse of confidential information. The users should not in any way disclose, copy, release, sell, loan, review, alter or destroy any information except it has been authorized properly and within their scope of professional responsibilities. No unauthorised copies of ELCT ND SACCOS information, policies, procedures or any intellectual property or material should be allowed to produce. Appropriate and suitable measures should be taken to protect confidential information wherever they are located and in any form.
2. Staff and contractors (users) must protect/safeguard any physical key, alarm code, ID card or computer network account that in their possession and allows access to confidential information. Care should be taken when creating pins or password and avoid using common ones that can be easily traced.
3. Where there are suspicious activities that might lead to compromise confidential data and/or information, effort should be established to report the incident to supervisor, line manager or head of department.

ELCT ND SACCOS – Mobile App

ELCT ND SACCOS values its members / customers and ensures their privacy is very important. The aim  of this policy is to explain how members / customers data are collected, used, disclosed, as well as how information is protected when using Mwalimu Mobile application. By using Mwalimu Mobile app, members / customers agree to the collection and use of information in accordance with this policy and other related laws from the governing bodies.

Information We Collect

• Personal Information

From our application, ELCT ND SACCOS, may collect personal information that you provide to us, including but not limited to:

1. Full Name
2. Email Address
3. Phone Number
4. Date of Birth
5. Account Information
6. Transaction History

 

• Non-Personal Information

While using this application, we may also collect non-personal information about your device, such as:

1. Device Type
2. Operating System
3. IP Address
4. Browser Type
5. App Usage Data

 

How We Use Your Information

We use the collected information for various purposes, including:

1. To provide and maintain our service
2. To process transactions and send notifications
3. To improve and personalize your experience
4. To communicate with you, including members / customers support
5. To monitor and analyze usage and trends
6. To prevent fraudulent transactions and enhance security
7. To comply with legal and regulatory requirements

 

Sharing Your Information

We do not sell, trade, or otherwise transfer your personal information to outside parties except as described in this policy. We may share your information with:

• Service Providers: Third-party companies that help us operate and improve our services.
• Affiliates: Companies related to ELCT ND SACCOS for purposes consistent with this Privacy Policy.
• Legal Requirements: Authorities if required by law or to protect our rights.

 

Security of Your Information

We implement a variety of security measures to maintain the safety of your personal information. These include:

• Encryption of sensitive data
• Secure access controls
• Regular security audits

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

 

Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request access to your personal data.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Objection: Object to the processing of your personal data.
• Restriction: Request restriction of processing your personal data.
• Portability: Request transfer of your personal data to another service provider.

To exercise any of these rights, please contact us at info@elctndsaccos.org / elctndsaccos2019@gmail.com

Changes to This Privacy Policy

This policy may be updated from time to time. All users and members / customerss will be notified of any changes by posting the new Privacy Policy on our website. You are advised to review this privacy policy