Privacy Policy

Effective Date: 1st January 2025

Entity Name: eMaisha Pay (U) Ltd

Address: Plot 390, Prof Nsibambi Rd, Namirembe; P.O.Box 110323, Kampala, Uganda

Email: info@emaishapay.com

1. Introduction

eMaisha Pay (U) Ltd ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and disclose your information through our mobile and web platforms, in accordance with the Uganda Data Protection and Privacy Act, 2019 and Google Play policies.

2. Information We Collect

a) Personal Information

• Full name, phone number, email address
• National Identification Number
• Business documents (Registration Certificate & Trade License)
• Nature of your business
• Geolocation data (with your consent)

b) Financial & Transactional Data

• Transactions history
• Wallet balances
• Produce and Payments records
• Trade financing and repayments history

c) Usage Data

• App activity logs
• Device type, operating system, and browser type
• IP address

3. How We Use Your Information

• Facilitate digital payments, and access to credit
• Assess creditworthiness through AI-driven analytics
• Process transactions and issue prepaid cards
• Improve user experience, platform security, and customer support
• Comply with legal obligations, such as anti-money laundering (AML) and Know-Your-Customer (KYC) requirements

4. Legal Basis for Processing

• Your consent (for optional services like geolocation or marketing)
• Contractual necessity (to provide our services)
• Legal obligations under Uganda’s laws
• Legitimate interests, such as improving our services

5. Sharing Your Information

• Mobile money providers (MTN, Airtel)
• Financial institutions for trade financing and credit services
• Card issuers and payment processors (e.g., Interswitch)
• Regulatory bodies, if legally required
• Data analytics providers (anonymized data only)

We never sell your personal data.

6. Data Storage and Security

• Data is stored on secure cloud servers (AWS) with industry-grade encryption.
• We implement end-to-end encryption, two-factor authentication, fraud detection, and role-based access controls.
• We follow ISO 27001-aligned standards and comply with Uganda’s Data Protection and Privacy Act.

7. Your Rights

As a data subject under Ugandan law, you have the right to:

• Access your personal data
• Request correction or deletion
• Object to processing for marketing
• Withdraw consent at any time
• Lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda

8. Data Retention

• For as long as you maintain an account with us
• For 7 years post-termination for audit and legal compliance, unless legally required for longer

9. Cookies and Tracking

We use cookies and similar technologies for:

• Improving app performance
• Analyzing user engagement
• Personalizing content

You may disable cookies via your browser settings, but this may affect functionality.

10. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect data from minors without guardian consent.

11. International Transfers

If data is transferred outside Uganda (e.g., to cloud servers), we ensure protection through standard contractual clauses and adherence to international privacy standards.

12. Updates to This Policy

We may update this policy periodically. Users will be notified via app updates or email. Continued use of the platform constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions or requests regarding this policy, please contact us at:

Email: info@emaishapay.com

Address: Plot 390, Prof Nsibambi Rd, Namirembe; P.O.Box 110323, Kampala, Uganda