Privacy Notice

WASHI Microfinance Uganda Limited

Last updated: 12 October 2026

WASHI Microfinance Uganda Limited (“WASHI”, “we”, “us” or “our”) respects the privacy and dignity of the people whose information we handle.

This Privacy Notice explains how we collect, use, share, store and protect personal information relating to our website visitors, people making enquiries, prospective borrowers, clients, guarantors, group members, job applicants and business contacts.

We handle personal information in accordance with applicable Ugandan law, including the Data Protection and Privacy Act, 2019, as amended, and its applicable regulations.

1. Who is responsible for your information: WASHI Microfinance Uganda Limited is responsible for determining how and why personal information covered by this notice is used.

Head Office:
Mbale Head Office Branch
Plot 007, Nabuyonga Rise Road
Behind Independent Baptist Church
Mbale, Uganda

Privacy enquiries: contact@washimicrofinance.com
Telephone: +256 749 306114

Please use these details for questions about your information or to exercise your privacy rights.

2. Information we collect: The information we collect depends on your interaction with WASHI. Browsing our website or sending an enquiry does not, by itself, require you to provide a complete loan application or identification documents.

Website enquiries and communications

When you contact us, we may collect your:

• Name and telephone number.
• Email address, if provided.
• District, town or other relevant location.
• Enquiry topic and message.
• Correspondence and information needed to respond to your request or complaint.

Please do not send national ID numbers, bank account details, PINs, passwords or sensitive financial documents through the public website enquiry form.

Loan applications and client services: During a formal application or an existing lending relationship, we may collect information necessary for the relevant product, including:

• Identity details and identification documents.
• Contact and residential information.
• Business activities, income, expenses and repayment capacity.
• Relevant household, business-visit and verification information.
• Application, agreement, disbursement and repayment records.
• Guarantor, nominee or emergency-contact information, where applicable.
• Group membership, attendance and meeting records for group-based products.

Our authorised representatives will explain the information required and how to provide it.

Recruitment and business enquiries: If you enquire about employment, partnerships or other business matters, we may collect your contact details, CV, qualifications, experience and information relevant to that enquiry.

Photographs and client stories: We may collect photographs, videos, testimonials or personal stories where appropriate permission and any required consent have been obtained.

Website technical information: Depending on the website features you use, technical information may include your IP address, browser and device information, access times and website activity. Cookies and similar technologies are explained in Section 10.

We seek to collect information that is relevant and necessary for a specified, lawful purpose.

3. Where information comes from: We generally collect information directly from you through enquiries, applications, meetings, business visits and communications.

Where necessary and lawful, we may also obtain relevant information from sources such as:

• Guarantors, nominees or references you provide.
• Group representatives involved in administering a group-based product.
• Authorised identity-verification sources.
• Payment service providers.
• Public records or competent authorities.

Where information is collected from another source, we will provide the information and notices required by law. If you provide another person’s details, please ensure you have appropriate authority to do so and make that person aware that WASHI may contact them. WASHI remains responsible for handling their information lawfully.

4. Why we use your information: We use personal information, as appropriate, to:

• Respond to enquiries and arrange callbacks.
• Assess applications and verify identity and eligibility.
• Understand business circumstances and repayment capacity.
• Prepare and administer loan agreements.
• Record disbursements, payments and outstanding balances.
• Organise groups, meetings and relevant client support.
• Respond to complaints and correct errors.
• Assess recruitment or business enquiries.
• Maintain financial records and carry out audits.
• Meet applicable legal and regulatory obligations.
• Prevent and investigate fraud, misconduct or security incidents.
• Maintain and improve website functions and services.
• Send permitted communications or publish material for which appropriate consent has been obtained.

We will not use information for an unrelated purpose without establishing a lawful basis and providing any required notice

5. Lawful grounds and your choices: We collect and process personal information where consent or another ground permitted by Ugandan law applies. Depending on the circumstances, this may include processing necessary to perform a contract with you or comply with a legal obligation. We will explain which information is required and which is optional. If information essential to verifying your identity, assessing an application or administering a service is not provided, we may be unable to proceed. Where processing depends on consent, we will request it clearly. You may withdraw that consent by contacting us. Withdrawal does not invalidate processing lawfully carried out beforehand, and information may still need to be retained where another lawful ground applies.

Reading this notice, using our website or accepting our Terms of Use does not constitute consent to every use of your personal information.

6. Who may receive your information: We share information only where necessary for a stated purpose and supported by an appropriate lawful basis.

Depending on the service or circumstances, recipients may include:

• Authorised WASHI personnel who need the information for their duties.
• Providers supporting hosting, email, software, storage, communications or other operational services.
• Payment providers involved in authorised transactions.
• Auditors, accountants, legal advisers and other professional advisers.
• Regulators, public authorities or courts where disclosure is required or lawfully authorised.
• Credit reference bureaux or verification providers, where an applicable lawful arrangement exists and required notices or consent have been provided.

We require service providers acting on our behalf to follow appropriate instructions and confidentiality and security requirements.

For group-based lending, limited information may need to be shared with group representatives or members to administer meetings and agreed guarantee arrangements. We will explain the relevant sharing before participation. Group membership does not authorise unrestricted disclosure of identification documents, household information or unrelated personal details.

We do not treat a general reference to “partners” as permission to share your information for unrelated purposes.

1. Information handled outside Uganda: Website hosting, email, software or storage services may involve processing information outside Uganda. Before using such arrangements, we must meet the applicable requirements for overseas processing, including the required protection or consent under Ugandan law. Where an overseas arrangement applies, we will provide the relevant information about its purpose and protections. You may contact us for details about where your information is handled.
2. Keeping information secure: We apply appropriate technical and organisational measures to protect information against unlawful access, disclosure, alteration, loss or destruction. These measures should reflect the sensitivity of the information and include appropriate access restrictions, secure handling of paper and electronic records, confidentiality requirements and oversight of service providers. No system can guarantee complete security. If a personal-data breach occurs, we will assess it, take appropriate corrective action and make notifications required by law. Please contact us promptly if you suspect that your information has been exposed or misused.
3. How long information is kept: We keep personal information only for as long as necessary for its purpose and applicable legal requirements.

The period depends on the record:

• Website enquiries: for responding to the enquiry, completing follow-up and meeting any relevant recordkeeping needs.
• Applications and loan records: for assessment, loan administration and applicable financial, regulatory and legal requirements.
• Complaints: for investigation, resolution and relevant accountability or legal requirements.
• Recruitment information: for the recruitment process and any separately explained, lawful retention.
• Photographs and testimonials: for the agreed purpose and period, subject to applicable consent and withdrawal arrangements.

Records may need to be retained longer where required by law or reasonably necessary for an unresolved dispute or investigation. When information is no longer required, we will securely destroy, delete or de-identify it, as appropriate. You may contact us to ask about the retention period applicable to your records.

10. Cookies and website technologies: Cookies are small files placed on your device. Similar technologies may also support website functions. Where used, these technologies may support essential functions, remember preferences or measure website performance. The website’s cookie information should identify the technologies actually used, their purposes and relevant duration.

Where consent is required for optional cookies or tracking, we will request it before activating them. You can manage available choices through the website’s cookie controls and your browser settings. Declining optional cookies should not prevent access to basic website information. Blocking essential cookies may affect some functions. Accepting these Terms of Use or submitting an enquiry does not automatically mean that you have agreed to optional tracking.

11. Communications and promotional material: We may contact you about your enquiry, application, loan, complaint or another service you have requested. Promotional communications will be handled separately, with consent where required and an appropriate way to stop receiving them.

You may ask us to stop using your information for direct marketing by emailing contact@washimicrofinance.com. This does not prevent necessary communications concerning an existing service or legal obligation.

For promotional photographs, videos and testimonials, we will explain the intended use and obtain informed consent where required. Refusing promotional participation will not, by itself, affect loan eligibility or client treatment. You may withdraw consent for future promotional use. We will stop further use and take appropriate steps regarding material we control, subject to lawful requirements. We cannot guarantee retrieval of printed material already distributed or copies independently held by third parties.

12. Your rights: Subject to applicable law and relevant exceptions, you may:

• Ask whether we hold personal information about you and request access.
• Request correction of inaccurate or incomplete information.
• Request deletion, blocking or destruction where legally available.
• Object to processing in circumstances recognised by law.
• Require us to stop using your information for direct marketing.
• Withdraw consent where processing relies on consent.
• Exercise applicable rights concerning decisions based solely on automated processing that significantly affect you.
• Complain about the handling of your information.

Send requests to contact@washimicrofinance.com or contact our branch. We may reasonably verify your identity before releasing or changing records.
We will respond within applicable legal time limits and explain any lawful reason why a request cannot be fully met. Please do not send identification documents through the public enquiry form; we will explain a suitable verification method.

13. Complaints and external websites

For privacy concerns, contact contact@washimicrofinance.com or +256 749 306114.
For grievance escalation, email hasan@washimicrofinance.com.
You may also complain directly to Uganda’s Personal Data Protection Office. You do not have to complete WASHI’s internal process before exercising a right available under law.
Personal Data Protection Office: https://pdpo.go.ug/

External websites linked from our website have their own privacy notices. Please review those notices before providing information. Linking to an external website does not remove responsibilities WASHI retains for information we share or services provided on our behalf.

14. Changes and contact details: We may update this notice to reflect changes in our services, technology or legal requirements. The current version will appear on our website with an updated date. Where required, we will provide additional notice or obtain new consent. Publishing a revised notice does not, by itself, authorise a new use of personal information.

WASHI Microfinance Uganda Limited

Mbale Head Office Branch
Plot 007, Nabuyonga Rise Road
Behind Independent Baptist Church
Mbale, Uganda

Privacy enquiries: contact@washimicrofinance.com
Telephone: +256 749 306114
Grievance escalation: hasan@washimicrofinance.com
Website: https://washimicrofinance.com/