Privacy Policy for Shelloyees SACCO Limited
Effective Date: June 2026
Last Updated: June 2026
This Privacy Policy explains how Shelloyees SACCO Limited (“Shelloyees SACCO”, “we”, “our”, or “us”) collects, uses, stores, protects, and discloses personal information obtained from members, prospective members, website visitors, mobile application users, and other stakeholders. Shelloyees SACCO is committed to protecting your privacy and complying with applicable laws, including the Kenyan Data Protection Act, 2019. (shelloyeessacco.co.ke)
1. Introduction
Shelloyees SACCO Limited is a member-owned Savings and Credit Cooperative Society established to provide savings, credit, investment, and related financial services to its members. In the course of providing these services, we collect and process personal information necessary for membership administration, loan processing, regulatory compliance, and service delivery. (shelloyeessacco.co.ke)
By accessing our website, mobile applications, offices, products, or services, you agree to the collection and processing of your personal data as described in this Privacy Policy.
2. Information We Collect
We may collect the following categories of information:
A. Personal Identification Information
- Full names
- National ID Number, Passport Number, or Alien ID
- KRA PIN
- Date of birth
- Passport photographs
- Signature
- Gender (where applicable)
- Postal and physical address
B. Contact Information
- Mobile phone number
- Email address
- Postal address
- Emergency contact details
C. Employment and Business Information
- Employer details
- Payroll number
- Department and work station
- Salary information
- Business ownership information
- Source of income and source of funds
D. Financial Information
- Savings account details
- Loan application details
- Repayment history
- Bank account information
- Share capital contributions
- Deposit records
- Transaction history
E. Technical Information
When you visit our website or use our digital platforms, we may collect:
- IP address
- Device information
- Browser type
- Operating system
- Website usage statistics
- Cookies and analytics information
F. Information from Third Parties
We may obtain information from:
- Employers
- Credit Reference Bureaus (CRBs)
- Regulators
- Government agencies
- Guarantors
- Service providers
- Identity verification providers
3. How We Collect Information
We collect information through:
- Membership application forms
- Loan application forms
- Mobile applications
- Website contact forms
- Customer service interactions
- Email correspondence
- Telephone calls
- Employer check-off arrangements
- Regulatory and verification processes
- Cookies and website analytics tools
4. Purpose of Collecting Personal Data
We collect and process personal data for purposes including:
Membership Management
- Opening and maintaining member accounts
- Verifying identity
- Managing member records
Financial Services
- Processing loans
- Assessing creditworthiness
- Managing deposits and savings
- Processing transactions
Regulatory Compliance
- Know Your Customer (KYC) requirements
- Anti-Money Laundering (AML) compliance
- Fraud prevention and detection
- Compliance with legal obligations
Communication
- Responding to inquiries
- Sending service notifications
- Delivering statements and account updates
- Providing marketing communications (where consent has been given)
Service Improvement
- Website analytics
- Product development
- Customer experience enhancement
- Security monitoring
5. Legal Basis for Processing
We process personal data on one or more of the following grounds:
- Your consent
- Performance of a contract or membership agreement
- Compliance with legal and regulatory obligations
- Legitimate business interests
- Protection of vital interests
- Exercise of legal rights and obligations
6. Sharing of Information
We do not sell personal information.
However, we may share information with:
Service Providers
Third-party vendors who assist in:
- Information technology services
- Mobile banking services
- Payment processing
- Data hosting
- Security services
Regulatory Authorities
Including but not limited to:
- Commissioner for Cooperative Development
- Kenya Revenue Authority (KRA)
- Central Bank of Kenya where applicable
- Financial Reporting Centre (FRC)
- Office of the Data Protection Commissioner (ODPC)
- Courts and law enforcement agencies
Credit Reference Bureaus
For credit assessment and reporting where legally permitted.
Employers
Where payroll deductions or employer certifications are required.
Professional Advisors
Lawyers, auditors, accountants, and consultants bound by confidentiality obligations.
7. Data Security
We implement appropriate technical, physical, and organizational measures to protect personal information from:
- Unauthorized access
- Loss
- Misuse
- Alteration
- Disclosure
- Destruction
These measures include:
- Access controls
- Password protection
- Encryption where appropriate
- Secure data storage
- Staff confidentiality obligations
- Regular security reviews
Despite our efforts, no system can guarantee absolute security.
8. Data Retention
We retain personal information only for as long as necessary to:
- Provide services
- Meet legal obligations
- Resolve disputes
- Enforce agreements
- Maintain business records
Where information is no longer required, it will be securely deleted, anonymized, or destroyed in accordance with applicable laws.
9. Cookies and Website Tracking
Our website may use cookies and similar technologies to:
- Improve functionality
- Analyze website traffic
- Enhance user experience
- Maintain security
You may manage cookie preferences through your browser settings, although disabling cookies may affect website functionality.
10. Your Rights
Subject to applicable law, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of personal data
- Restrict processing
- Object to certain processing activities
- Withdraw consent where processing is based on consent
- Request data portability
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)
Requests may be submitted using the contact details provided below.
11. Children’s Privacy
Our products and services are generally not directed at children except where specific savings products are operated through parents or legal guardians. Where personal data of minors is collected, appropriate parental or guardian authorization shall be obtained.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices, security, or content of those external websites. Users are encouraged to review the privacy policies of such websites before providing personal information.
13. International Data Transfers
Where necessary, personal information may be processed or stored outside Kenya through approved service providers. In such cases, Shelloyees SACCO will ensure appropriate safeguards are in place to protect personal data and comply with applicable data protection laws.
14. Changes to this Privacy Policy
We may amend this Privacy Policy from time to time to reflect changes in legal requirements, technology, or business operations.
Any updates will be published on our website and will take effect immediately upon publication unless otherwise stated.
15. Contact Us
For questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:
Shelloyees SACCO Limited
Vienna Court, State House Crescent Road
P.O. Box 73902-00200, Nairobi, Kenya
Telephone: 0713 171 618
Email: support@shelloyeessacco.co.ke
Website: www.shelloyeessacco.co.ke (shelloyeessacco.co.ke)
Disclaimer: This is a generic privacy policy template and should be reviewed by legal counsel to ensure full compliance with the Kenyan Data Protection Act, 2019, the Data Protection (General) Regulations, 2021, and any SACCO-specific regulatory requirements.