Privacy & Data Protection
Your data, protected by design.
How Fariji DT Sacco collects, uses and safeguards your personal information in line with Kenya's Data Protection Act, 2019 — and how you can opt out or exercise your rights.
Our Commitment
Handling your information responsibly.
As a licensed deposit-taking SACCO regulated by SASRA, Fariji DT Sacco collects and processes personal data to open accounts, assess and disburse loans, and keep your savings safe. We process this information as a data controller in line with Kenya's Data Protection Act, 2019, and the guidance of the Office of the Data Protection Commissioner (ODPC). This page explains what we collect, why, who we share it with, and how you can control it.
Last reviewed: July 2026
What We Collect
The information
we hold about you.
Identification details
Full name, date of birth, National ID or passport number, KRA PIN, and a passport-size photo collected during membership registration.
Contact information
Phone number, email address, physical and postal address, and the contact details of your next of kin.
Financial & account data
Savings history, loan applications and repayments, transaction records, and guarantor information linked to your account.
Employment & income data
Employer details, payslips, business records, or other information used to assess your eligibility for a loan.
Digital & channel data
Records of USSD *645# sessions, Fariji Mobile App activity, and calls, SMS or WhatsApp messages exchanged with our team.
Identity verification records
Photographs, signatures and ID copies captured at our branches or agents to meet Know-Your-Customer (KYC) requirements.
Why We Collect It
How we use
your information.
To process your membership registration, savings contributions, and loan applications.
To assess your creditworthiness and manage loan disbursement and repayment.
To meet our obligations to SASRA, the Central Bank of Kenya, KRA and anti-money-laundering (AML/CFT) laws.
To detect, investigate and prevent fraud or unauthorised account activity.
To communicate with you about your account, statements, and service updates.
To send information about new products, only where you have not opted out of marketing.
To improve our branches, agency network, and digital banking channels.
To respond to complaints, disputes, and regulatory or legal requests.
Sharing & Retention
Who sees your data,
and for how long.
Who we share data with
We do not sell your personal data. We only share it where necessary, with:
- Regulators — SASRA, the Central Bank of Kenya, and KRA
- Licensed Credit Reference Bureaus (CRBs), for credit assessment and reporting
- Auditors, legal and professional advisors bound by confidentiality
- Service providers supporting our mobile app, USSD and SMS platforms, under data-processing agreements
- Law enforcement or courts, only where legally required
How long we keep it
We retain personal data only for as long as it is needed to provide our services, and for the record-keeping periods required by the SACCO Societies Act, SASRA regulations, tax law, and the Data Protection Act, 2019. Once data is no longer required by law or for a legitimate business purpose, it is securely deleted or anonymised.
You have the right to know what personal data we collect, why we collect it, and who we share it with — as set out on this page.
You may request a copy of the personal data we hold about you, and details of how it has been processed.
If any information we hold about you is inaccurate or outdated, you can ask us to correct or update it.
You can request deletion of your personal data, subject to our legal and regulatory obligation to retain certain account and financial records for a defined period.
You may object to, or ask us to limit, certain uses of your data — for example, processing for purposes beyond running your account.
Where technically feasible, you can request your data in a structured, commonly used format to transfer elsewhere.
You can opt out of receiving marketing SMS, calls or emails from us at any time, without affecting your membership or account services.
If you believe we have mishandled your personal data, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.
In-Branch Process
How to opt out or
exercise your rights.
To protect your account, opt-out requests and other data rights requests are handled in person at any branch, so we can confirm it is really you asking.
Visit any branch
Walk into any of our branches, at your convenience.
Bring a copy of your ID
A copy of your National ID (or passport) is required to verify your identity and protect your account.
Fill the request form
Ask our staff for the Data Protection Request Form and indicate whether you are opting out of marketing or exercising another right.
We action your request
Our team processes your request in line with the Data Protection Act, 2019, and confirms once it is complete.
For general questions about this policy before you visit, call +254 727 398 699 or email info@farijisacco.co.ke. Requests cannot be actioned by phone or email alone, since we're unable to verify your identity that way.