Fortune Sacco Limited (“us”, “we”, or “our”) is a Sacco regulated by SASRA to offer financial services. We operate the www.fortune.co.ke website, which provides more information of us and our various services /facilities as well as the Fortune e-cash Mobile App mobile application (the “Service”).

Fortune Sacco Limited is committed to protecting the privacy and security of personal information in accordance with the Kenyan Data Protection Act of 2019. This Data Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our website or engage with our services.

We use your data to provide and improve the Services. By using these Services, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Data Privacy Policy, terms used in this Data Privacy Policy have the same meanings as in our Terms and Conditions. While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

We collect several different types of information for various purposes in order to provide and improve our Service to you including Names, I.D./Passport Number, Date of Birth, Gender, Marital Status, Biometric Data, Property Details, Postal Address, Telephone Number. Some of the purposes for which we collect and process your data includes:

• To provide and maintain our Service.
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so.
• To provide member support
• To gather analysis or valuable information so that we can improve our Service.
• To monitor the usage of our Service
• To detect, prevent and address technical issues.
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

Fortune Sacco Limited may disclose your Personal Data in the good faith belief that such action is necessary to:

• Regulatory bodies: To comply with legal obligations and regulatory requirements.
•  Service providers: For the purpose of delivering specific services on our behalf, subject to contractual confidentiality and security obligations.
• To comply with a legal obligation
• To protect and defend the rights or property of Fortune Sacco Limited
• To prevent or investigate possible wrongdoing in connection with the Service.
• To protect the personal safety of users of the Service or the public
• To protect against legal liability
• Other members: In the case of joint accounts or as required for specific transactions.

We implement technical and organizational measures to ensure the security of your personal information, including encryption, access controls, and regular security assessments.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by applicable laws. We regularly review our data retention practices to ensure compliance.

Fortune Sacco Limited will retain your Personal Data only for as long as is necessary for the purposes set out in this Data Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
As a Data Subject you have the following Rights as set out in the Data Protection Act No. 24 of 2019:

• The right to be informed of the use of your information/data.
• The right to access, update or to delete the information or data in our custody.
• The right of rectification. You have the right to have your information/data rectified or deleted if that information is misleading, inaccurate or incomplete.
• The right to object. You have the right to object to our processing of your Personal Data.
• The right of restriction. You have the right to request that we restrict the processing of your personal information.
• The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable, and commonly used format.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where Fortune Sacco Limited relied on your consent to process your personal information, without any detriment to your interests.

Please note that we may ask you to verify your identity and provide signed instructions before responding to such requests.

To exercise these rights, please contact our Data Protection Officer at dpo@fortune.co.ke.

Fortune Sacco Limited may update our Data Privacy Policy from time to time. Any changes will be effective immediately upon posting the revised policy on our website. We encourage you to review this policy regularly to stay informed about how we are protecting your information.

If you have any questions or concerns about our data privacy practices, please contact our Data Protection Officer:

Fortune Sacco Lmited
P.O box 559-10300 Kerugoya
dpo@fortune.co.ke
254 111 054 300