Privacy Policy
Last updated: March 2026 | Compliant with Uganda Data Protection and Privacy Act, 2019
Data Controller Information
AfrikCap Limited operates as a Data Controller under the Uganda Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021.
Entity: AfrikCap Limited
Data Protection Contact: support@afrikcap.com
Phone: +256 705205989
Location: Kampala, Uganda
1Introduction and Scope
AfrikCap Limited ("AfrikCap," "we," "our," or "us") is committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, use, process, store, share, and protect your personal information in compliance with:
- The Data Protection and Privacy Act, 2019 (Uganda)
- The Data Protection and Privacy Regulations, 2021
- NITA-U Data Controller Requirements
AfrikCap operates as a loan marketplace platform in Uganda. We connect small retailers and SMEs with licensed financial institutions for working capital loans. AfrikCap does NOT lend money directly and does NOT hold or disburse funds.
2Personal Data We Collect
We collect and process the following categories of personal data:
2.1 Personal Identification Data
- Full legal name
- National Identification Number (NIN)
- Contact phone number(s)
- WhatsApp number
- Email address
- Physical address
2.2 Business Information
- Business name and type
- Business location and address
- Years in operation
- Shop images and GPS coordinates (if provided)
2.3 Financial and Business Performance Data
- Average daily and monthly sales
- Monthly business expenses
- Existing loan obligations (if any)
- Outstanding loan balances
2.4 Loan Requirement Data
- Loan amount required
- Purpose of the loan
- Preferred loan tenure
- Repayment frequency preference
- Urgency of loan requirement
3Purpose of Data Processing
We process your personal data for the following specific and legitimate purposes:
- Loan Matching: To match your application with appropriate licensed financial institutions based on your requirements and eligibility
- Lender Facilitation: To share your application with AfrikCap's registered partners for credit evaluation
- Communication: To contact you regarding your application status, lender responses, and service updates
- Service Improvement: To analyze anonymized data to improve our platform and services
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
- Fraud Prevention: To detect and prevent fraudulent applications
4Legal Basis for Processing
Under the Uganda Data Protection and Privacy Act, 2019, we process your personal data based on:
Primary Legal Basis: Explicit Consent
By submitting an application through AfrikCap and checking the consent box, you provide explicit consent for us to collect, process, and share your personal data with AfrikCap's registered partners for the purpose of credit evaluation and loan facilitation.
Additional legal bases may include:
- Contractual Necessity: Processing necessary to perform our services as agreed
- Legal Obligation: Processing required to comply with Ugandan law
- Legitimate Interests: Processing for fraud prevention and service improvement
5Data Sharing and Disclosure
We share your personal data with the following categories of recipients:
5.1 Licensed Financial Institutions
Your application data is shared with AfrikCap's registered partners — including:
- Commercial Banks licensed by Bank of Uganda
- Microfinance Institutions (MFIs)
- Non-Bank Financial Companies (NBFCs)
- Licensed Fintech lenders
We may also share data with:
- Service Providers: Technology providers who assist in operating our platform (under strict data protection agreements)
- Regulatory Authorities: When required by law or regulatory request
- Legal Proceedings: In response to valid legal processes or court orders
We do NOT sell your personal data to third parties for marketing purposes.
6Data Retention Policy
We retain your personal data according to the following schedule:
| Data Category | Retention Period |
|---|---|
| Unsuccessful loan applications | 12 months from submission date |
| Successful loan applications | 7 years (as required by financial regulations) |
| Contact form submissions | 24 months |
| Partner applications | Duration of partnership + 7 years |
After the retention period expires, your data will be securely deleted or anonymized in accordance with our data destruction procedures.
7Cross-Border Data Transfers
Your data is primarily stored and processed in Uganda. However, some technical services (such as cloud hosting) may involve transferring data to servers located outside Uganda.
When we transfer personal data outside Uganda, we ensure appropriate safeguards are in place, including:
- Selecting service providers in countries with adequate data protection laws
- Implementing contractual clauses requiring data protection compliance
- Applying technical safeguards such as encryption
8Data Security Safeguards
We implement robust technical and organizational measures to protect your personal data:
Encryption
All data transmitted via HTTPS/TLS encryption
Secure Storage
Data stored in encrypted databases with access controls
Access Control
Restricted access only to authorized personnel
Monitoring
Regular security assessments and audit trails
9Your Data Subject Rights
Under the Uganda Data Protection and Privacy Act, 2019, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you
Right to Correction
Request correction of inaccurate or incomplete personal data
Right to Deletion
Request erasure of your personal data (subject to legal retention requirements)
Right to Withdraw Consent
Withdraw your consent for data processing at any time
Right to Object
Object to processing of your personal data in certain circumstances
Right to Data Portability
Request transfer of your data to another service provider
To exercise any of these rights, please contact us using the details in Section 11.
10Complaint Mechanism
If you believe your data protection rights have been violated, you have the right to:
- Contact us directly at support@afrikcap.com to resolve the issue
- Lodge a complaint with the National Information Technology Authority - Uganda (NITA-U), the designated supervisory authority under the Data Protection and Privacy Act, 2019
NITA-U Contact Information
National Information Technology Authority - Uganda
Website: www.nita.go.ug
Location: Kampala, Uganda
11Contact Information
For any questions about this Privacy Policy, to exercise your data rights, or for data access, correction, or deletion requests, please contact:
AfrikCap Data Protection Contact
12Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last updated" date.
This Privacy Policy was last updated in March 2026 and is compliant with the Uganda Data Protection and Privacy Act, 2019.