Privacy Policy

Overview

Prograte Finance Limited (“Prograte,” “we,” “us,” or “our”) operates the Prograte Finance platform, a comprehensive loan management and credit sales solution designed for microfinance institutions, money lenders, SACCOs, and credit sales businesses across East Africa.

This Privacy Policy describes how we collect, use, store, share, and protect personal information when you use our web application, mobile applications (iOS and Android), and related services (collectively, the “Platform”). It applies to all users of our Platform, including company administrators, staff members, and the clients whose information is processed through our system.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our services.

Regulatory Compliance: Prograte Finance operates in accordance with the Data Protection and Privacy Act, 2019 of Uganda, and adheres to internationally recognized data protection principles including those outlined in the General Data Protection Regulation (GDPR) where applicable.

1. Data Protection Officer

In compliance with the Data Protection and Privacy Act, 2019, Prograte Finance has appointed a Data Protection Officer (DPO). If you have any questions regarding your data, please contact:

• Name/Title: Compliance Manager
• Email: privacy@progratefinance.com
• Address: Plot 2 Kachi Road, Jinja, Uganda

2. Processing of Special Personal Data

As a lending platform, we process “Special Personal Data,” including financial records and credit histories. We process this data based on:

• Contractual Necessity: To enable the lending process between you and the Microfinance Institution.
• Legal Obligation: To comply with the National Payment Systems Act and Anti-Money Laundering regulations of Uganda.

3. Information We Collect

Company & Business Information

When a business registers on Prograte Finance, we collect information necessary to establish and maintain the account:

• Legal business name, trading name, and registration number
• Business address, email address, and telephone numbers
• Tax identification numbers and regulatory license details
• Company logo and branding assets for white-label customization
• Bank account details for payment settlement
• Subscription tier selection and billing preferences
• Branch locations and operational structure

User Account Information

For individuals who access the Platform as employees or representatives of a registered company:

• Full legal name, job title, and department
• Work email address and mobile phone number
• Profile photograph (optional)
• Login credentials (passwords are cryptographically hashed)
• Role assignments and permission levels
• Branch assignments and access restrictions

4. How We Use Your Information

We process personal information only for legitimate business purposes and in accordance with applicable data protection laws.

Platform Operations & Service Delivery

• Provisioning and maintaining your company account
• Processing loan applications and credit sales
• Generating financial reports and analytics
• Facilitating payment processing
• Managing multi-branch operations

Communications & Notifications

• Sending account invitations and credentials
• Delivering push notifications for payments
• Providing SMS notifications for alerts
• Sending subscription renewal reminders

Security & Compliance

• Authenticating users and preventing unauthorized access
• Detecting and preventing fraud and abuse
• Maintaining audit logs for compliance
• Monitoring system performance

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share data only in specific circumstances.

Multi-Tenant Data Isolation

Prograte Finance employs a schema-based multi-tenancy architecture that ensures complete data separation between companies:

• Each company's data is stored in a dedicated database schema
• Company A cannot access Company B's data
• Database-level row security policies prevent data leakage
• API authentication enforces company-specific boundaries

6. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction.

• 256-bit SSL encryption for data in transit
• Role-based permissions and authentication
• 24/7 security monitoring and alerts
• Daily automated backups with encryption

7. Your Rights and the PDPO

Under Ugandan law, you have the right to access, correct, or request the deletion of your data. You also have the following rights regarding your personal information:

• Access your personal data
• Correct inaccurate information
• Request data deletion
• Object to processing
• Data portability
• Withdraw consent

If you feel your data concerns have not been addressed, you have the legal right to lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda via their website at www.dataprotection.go.ug or email info@dataprotection.go.ug.

8. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@progratefinance.com
• Address: Plot 2 Kachi Road, Jinja, Uganda