Privacy policy

A. WHO WE ARE

The purpose of this Privacy Policy is to explain how, why, and when YesCash Zambia Limited T/A Expresscredit.co.zm (‘Express Credit’) collects, uses, and processes your Personal Data in compliance with the DPA and international data protection best practices.

We respect your privacy and are committed to protecting the integrity, confidentiality, and security of all company data, including personal data, regardless of its source, ownership, or storage medium. To provide you with efficient service—whether through our digital platforms or physically through our branches and call centre—we may need to process certain Personal Data. By using our Platforms, you agree to the processing of your Personal Data as described in this Privacy Policy.

Please read this Policy carefully before using our Services, visiting any of our Platforms, or providing us with your personal information. By visiting our Platforms, using our Services, or providing us with your personal information, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please refrain from using our Services, visiting our Platforms, or providing us with your personal information. This Privacy Policy applies to all visitors and/or users of our Platforms except employees or job applicants in their capacity as employees or candidates. Employees and candidates should refer to our Employee Privacy Policy or Candidate Privacy Policy, respectively.

In this Privacy Policy:

"DPA" refers to Data Protection Act No. 3 of 2021
“Personal Data” refers to all your identification details that Express Credit holds or collects about you, directly or indirectly, including your name, identification number, age, gender, location data, an online identifier, factors specific to your physical, physiological, genetic, mental, economic, cultural or social identity, transactions, financial information, interactions, and dealings with us. This includes information received from third parties, collected using our website, cookies, and our electronic service platforms;
“Platforms” refers to Express Credit’s websites, mobile applications, social profiles online systems and communication channels including our customer servicing branches and centres
“Processing” refers to any operation or set of operations performed on personal data, whether or not by automatic means, including the collection, recording, storage, use, copying, transfer, or holding of the data or the carrying out of any operation or set of operations on data, including -
(a) organisation, adaptation or alteration of the data;
(b) retrieval, consultation or use of the data;
(c) alignment, combination, blocking, erasure or destruction of the data; or
(d) disclosure of the information or data by transmission, dissemination or otherwise making available;
“user” refers to anyone who visits, registers, uses or otherwise engages with us on any of our Platforms or interacts with us digitally.
“we”, “us” or “our” refers to Express Credit.
“you” refers to every person accessing or using our Platforms.

B. WHAT PERSONAL DATA WE COLLECT AND RECEIVE

Express Credit processes Personal Data in a reasonable, adequate, relevant, and purpose-specific manner. We may receive Data directly from you, your devices, trusted third parties, and public sources.

You provide Personal Data when you:

register or apply to access services on our Platforms;
contact us through our customer service channels;
interact with us on social media;
engage with third-party partners we work with (payment providers, regulators, data processors, agents, etc);
make your Data publicly available.

The Personal Data we may collect includes, but is not limited to:

full name and surname;
email address;
phone number;
physical address;
identification number (e.g., National Registration Card ("NRC", Identity Card ("ID"), Driver's Licence, passport, etc);
gender (optional);
date of birth;
online identifiers;
location data;
social media profiles;
payment and billing details;
Data voluntarily submitted when contacting or interacting withour customer servicing branches and centres

You warrant that the Data you provide is accurate, current, true, and does not impersonate any other person.

Children’s Privacy

We do not knowingly collect or solicit any personal information from children under the age of 18. In the event that we learn that we have collected personal information from a child, we will promptly take steps to delete that information. If you are a parent or legal guardian and think your child has given us their personal information, you can email us at: [email protected].

C. DATA FROM USING THE PLATFORMS

When you access our virtual Platforms, we automatically receive Data such as:

log data (usage times, pages viewed, browsing activity);
device and browser Data;
IP address;
geolocation (GPS, cell towers, WiFi networks, if enabled);
recorded customer service communications (calls, emails, chats).

D. WHY WE PROCESS YOUR PERSONAL DATA

Express Credit processes Personal Data primarily to provide you with our financial products and services. We may lawfully process your Data to:

identify and verify you;
provide access to our Platforms and services;
Establish and maintain the contractual relationship between you and Express Credit;
process applications and payments;
communicate updates and service notifications;
comply with legal, regulatory and tax obligations;
secure our systems and detect fraud;
develop, test and improve our offered products and services; and
conduct research, analytics, and summary statistical reporting (does not include personally identifiable information).
Disclosing and obtaining information from Credit Reference Bureaus (CRBs) regarding your credit history.
Operational purposes.
Protect the legitimate interests of Express Credit.

We may process your Personal Data where necessary to protect or pursue legitimate interests, such as:

business and operational management;
improving our products and services;
fraud detection and prevention;
business continuity and security;
enforcing our rights;
tailoring user experiences;
conducting internal analytics and audits;
sending marketing communications (unless you opt out).

E. DIRECT MARKETING

We may use your Personal Data to send you marketing content about products, promotions, or services we believe may interest you, through:

Email
WhatsApp
SMS
Phone
Social media
Online advertising

If you are not a registered user of our services, we will send electronic marketing only if you give consent. You may opt out of marketing at any time.

F. USER TRACKING AND COOKIES

We use cookies and tracking technologies to:

enhance and personalise your experience whilst visiting our platforms;
analyse user behaviour and platform performance;
prevent fraud;
deliver relevant advertising.

You can choose to have your computer warn you each time a cookie is being set, or you can choose to turn off all cookies; you can do this through your browser settings. Each browser is a little different, so look at your browser’s ‘Help Menu’ to learn the correct way to modify your cookies. If you turn cookies off, you will not have access to many features that make your experience more efficient, and some of Express Credit’s services will not function properly. Blocking or deleting cookies from the site may also prevent you from using the site.

G. WHO WE SHARE YOUR PERSONAL DATA WITH

We do not sell your Personal Data.

We may share your Data with third parties only when:

you provide consent;
required to fulfil a contract;
required by law or by order of any competent court or (quasi-) governmental authority or in matters of public safety or policy ;
necessary to protect legitimate interests.
Under strict conditions of confidentiality, we may share your Personal Data with our agents and Express Credit contractors who may use it on Express Credit’ s behalf or in connection of furtherance of the contractual relationship with Express Credit in order to enable us provide services to you.

These third parties may include:

employees and authorised personnel;
payment gateways and banks;
IT and cloud service providers;
fraud prevention and security agencies;
regulators and law enforcement;
business partners or affiliates.

We require third parties we share data with to maintain strict confidentiality and comply with the DPA.

H. LINKS TO THIRD PARTY WEBSITES

Our website may contain links to third party websites. These third-party websites have their own terms of use and privacy policy, which we encourage you to read when you visit the website. We are not responsible for third party websites and their content.

I. RETENTION OF RECORDS

We retain your Personal Data only for:

as long as necessary to provide services;
as required by law;
our internal policies;
the duration of your consent;
the period required to protect our legal interests.

We generally retain your Personal Data and records for a minimum period of 10 years, as required by the Law. Once no longer required, Data is securely deleted.

J. TRANSFER OF PERSONAL DATA OUTSIDE ZAMBIA

The data that Express Credit collects from you may be transferred to, and stored at, a destination outside your country of residence. By submitting your personal data, you agree to this transfer, storage, or processing. The security of your Personal Data is important to us and we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with the Express Credit Data Protection and Privacy Policies, international best practices relating to Data Protection and the DPA.

K. SECURING YOUR PERSONAL DATA

We implement appropriate technical and organisational measures to prevent the loss, misuse, and alteration of your Personal Data under Express Credit control , including:

secure data storage and encryption;
physical and network security;
strict access control;
monitoring and auditing;
secure disposal of records;
confidentiality agreements with third parties;
incident and breach response procedures.

Express Credit will never ask you to share any of your Passwords, and you are requested not to share any password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although Express Credit will do its best to protect your Personal Data, Express Credit cannot guarantee the security of your data transmitted to the Express Credit site; as such any transmission is at your own risk. Once Express Credit has received your information, Express Credit will use strict procedures and security features to prevent unauthorized access. If you disclose your Data to a third party that is not Express Credit, we cannot be held liable for misuse outside our control.

L. RESPONSIBLE AI USE STATEMENT

Express Credit uses Artificial Intelligence (AI) technologies responsibly and ethically. Our guiding principles include:

beneficial use with human oversight;
technical excellence and robust standards;
fairness and minimising bias;
accountability and transparency;
privacy and data security in line with DPA.

M. YOUR RIGHTS

Subject to legal and contractual exceptions, you may exercise the following rights under the terms of applicable laws once adequate proof of identity is provided:

Right to be informed: To be informed about the collection and use of your Personal Data.
Right to access: To request access to and obtain a copy of your Personal Data. Express Credit may be allowed by law to charge a fee for this.
Right to erasure: To request Express Credit to delete your Personal Data if Express Credit no longer has a valid reason to retain and process, subject to all applicable laws.
Right to rectification: To request that Express Credit correct or update your Personal Data. This can be done at your nearest branch or through our dedicated call centre.
Right to object: To object to processing of your Personal Data in certain circumstances as defined by applicable laws.
Right to data portability: To request a copy of your Personal Data in a machine-readable format.
Right to restriction of processing: To restrict processing of your Personal Data in well-defined circumstances as defined by applicable laws.

The rights stated above may be exercised with reasonable frequency and without undue delay, at your nearest branch or through our dedicated call centre.

Consent may be withdrawn by:

using the unsubscribe option in our e-mail messages,
sending an e-mail expressly withdrawing consent to: [email protected]
calling our customer service center on: 3334,
on-site at any of our customer service centers.

Withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal. Please also note that the withdrawal of consent will not affect the processing of your personal data, which we process based on other legal grounds. However, withdrawal of consent may affect your ability to use our services.

N. CONTACT

If you have any queries or concerns about the processing of your Personal Data that is available with Express Credit, please discuss this with our customer service representatives at your nearest branch, via the call centre or you may send an email to [email protected]. If your queries is still not be addressed to your satisfaction, you have the right to lodge a formal complaint through our Complaint Handling Process (Please refer to our complaint handling procedure).

Express Credit will address your concerns in accordance with the Express Credit Data Protection and Privacy Policy, applicable law and international best practice relating to Data Protection.

O. COMPLAINTS – DPC

If you believe Express Credit is not complying with the DPA, you may lodge a complaint with the Data Protection Commissioner:

Office of the Data Protection Commissioner
Ministry of Technology and Science
Maxwell House, Los Angeles Boulevard,
P. O. Box 50464,
LUSAKA
Email: [email protected]

P. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy replaces previous versions. Updates may occur from time to time and become effective immediately upon publication on our website: www.expresscredit.co.zm. We recommend that you visit our website regularly for up-to-date Data. The version displayed on our Platforms applies to you.

Back