Legal

Privacy notice

We collect only what we need to assess, provide and administer credit responsibly, and we restrict who inside the company can see it.

Who is responsible for your data

Yaya Capital Limited is responsible for personal data processed through this platform. Contact us at our published email or our published phone number with any privacy question.

What we collect

Identity data: name, date of birth, gender, national ID or passport details, photograph.
Contact data: phone number, email address, physical address, next of kin.
Financial data: income, expenses, existing commitments, business records, bank or mobile money statements.
Application and account data: products applied for, assessments, approvals, disbursements, repayments and arrears.
Documents you upload: identification, proof of residence, business and collateral evidence.
Technical data: device and log information needed to keep accounts secure.

Why we use it

To verify your identity and meet KYC and anti-money-laundering obligations.
To assess affordability and make a documented credit decision.
To administer your loan, produce schedules, statements and receipts.
To manage arrears, collections and restructures.
To handle enquiries and complaints.
To detect and prevent fraud, and to meet legal and regulatory requirements.

Who can see it

Access is granted by role on a least-privilege basis. A loan officer sees the customers assigned to them; a branch manager sees their branch; finance and compliance see what their function requires. Uploaded documents are held in private storage and are not publicly accessible. Material actions on your record are written to an audit log.

Sharing

We share personal data only where necessary: with regulators and law enforcement where legally required, with credit reference infrastructure where applicable, with guarantors as to the obligation they have guaranteed, and with service providers bound by confidentiality obligations. We do not sell personal data.

Retention

We keep application and loan records for the period required by applicable law and sound record-keeping practice after your relationship with us ends, then delete or anonymise them. Records under dispute or investigation are retained until the matter concludes.

Your rights

To ask what personal data we hold about you.
To have inaccurate data corrected.
To ask us to delete data we no longer have a lawful basis to keep.
To object to a particular use, subject to our legal obligations.
To complain if you believe your data has been mishandled.

Security

Data is protected in transit and at rest, access is authenticated and role-restricted, financial calculations and status changes are performed server-side, and privileged actions are logged. No system is perfectly secure, so please protect your own credentials and tell us immediately if you suspect unauthorised access.

Changes

We may update this notice. Material changes will be communicated through the customer portal or by direct contact.

See also our terms of use and complaints process.