Sika Prime Privacy Policy

Last Updated: 25 May 2026

INTRODUCTION

This Privacy Policy, together with our Terms of Use, applies to your use of:

• The Sika Prime website at sikaprime.com (the "Website")
• The Sika Prime web-based application at app.sikaprime.com (the "App")
• Any services accessible through the Website and App, including loan applications, account management, and customer support (collectively, the "Services")

This policy explains how we collect, use, store, and protect your personal information when you use our Services.

IMPORTANT INFORMATION AND WHO WE ARE

Sika Prime Financial Services Limited is the data controller responsible for your personal data (collectively referred to as "Sika Prime," "the Company," "we," "us," or "our" in this policy).

We are registered with the Patents and Companies Registration Agency (PACRA) in Zambia and operate in compliance with the Data Protection Act No. 3 of 2021 of the Republic of Zambia.

If you have any questions about this Privacy Policy, please contact us using the details below.

Contact Details

Full Legal Name: Sika Prime Solutions Limited
Email Address: info@sikaprime.com
Office Address: University of Zambia, Great East Road Campus, Lusaka, Zambia
Telephone: +260 975138481
Website: sikaprime.com

Changes to This Privacy Policy

We keep our Privacy Policy under regular review to ensure it remains compliant with applicable laws and reflects our current practices. This version was last updated on 25 May 2026.

If we make changes to this policy, we will:

• Post the updated policy on this page
• Notify you via SMS, email, or WhatsApp where appropriate
• Display the updated policy when you next log into the App

The new policy may be displayed on-screen, and you may be required to read and accept the changes to continue using our Services.

Your Duty to Inform Us of Changes

It is important that the personal data we hold about you is accurate and current. Please notify us immediately if your personal information changes during your relationship with us, including changes to your:

• Phone number
• Residential address
• Email address
• Employment or student status
• Next of kin details

THE DATA WE COLLECT ABOUT YOU

We may collect, use, store, and transfer different kinds of personal data about you, including:

1. Identity Data

• First name, last name, middle name
• National Registration Card (NRC) number or passport number
• Date of birth
• Gender
• Student ID number (for student borrowers)
• Photograph or facial image (for identity verification)

2. Contact Data

• Residential address
• Email address
• Mobile phone number
• WhatsApp number
• Campus residence or faculty location (for student borrowers)

3. Financial Data

• Mobile money account details (MTN Money, Airtel Money)
• Bank account details (if applicable)
• Employment or bursary income information
• Guarantor financial information
• Loan repayment history

4. Transaction Data

• Details of loan applications submitted
• Loan amounts borrowed and repaid
• Payment dates and amounts
• Outstanding balances
• Late payment records
• Collateral items held and returned

5. Student and Employment Data

• University or college enrollment status
• Program of study and year of study
• Student ID card details
• Employer name and contact details (for employed borrowers)
• Bursary or scholarship details

6. Guarantor and Next of Kin Data

• Full name, contact details, and relationship to you
• National Registration Card (NRC) number
• Verification records

7. Collateral Data

• Description, make, model, and serial number of collateral items
• Photographs of collateral items
• Condition assessment records
• Storage location and tracking information

8. Device Data

• Type of mobile device you use
• Unique device identifier (IMEI number, MAC address)
• Mobile network information
• Operating system and browser type
• IP address and location data
• Time zone settings

9. Usage Data

• Details of your use of the Website and App
• Pages visited, time spent on pages
• Links clicked and features accessed
• Login times and session duration

10. Marketing and Communications Data

• Your preferences for receiving marketing communications
• Your communication preferences (SMS, WhatsApp, email, phone)
• Feedback, survey responses, and customer service interactions

11. Credit and Risk Data

• Credit history and credit score (where available)
• Repayment behavior and trends
• Default history with other lenders (where disclosed)
• Risk assessment scores calculated by Sika Prime

Aggregated Data

We may also collect, use, and share Aggregated Data such as statistical or demographic data for business analysis and reporting purposes. Aggregated Data may be derived from your personal data but does not directly or indirectly identify you.

For example, we may aggregate repayment data to calculate the percentage of borrowers who repay on time. However, if we combine Aggregated Data with your personal data in a way that directly or indirectly identifies you, we will treat the combined data as personal data under this Privacy Policy.

Special Categories of Personal Data

We do not collect Special Categories of Personal Data, including:

• Race or ethnicity
• Religious or philosophical beliefs
• Political opinions
• Trade union membership
• Health information
• Genetic or biometric data (except facial images for identity verification)
• Sexual orientation

We also do not collect information about criminal convictions or offenses unless required by law or regulation.

HOW WE COLLECT YOUR PERSONAL DATA

We collect personal data through the following methods:

1. Information You Provide Directly

You provide personal data when you:

• Register for an account on the App
• Complete a loan application form
• Submit supporting documents (NRC, student ID, guarantor details)
• Communicate with us via email, WhatsApp, SMS, or phone
• Provide feedback or complete surveys
• Update your account information

2. Information We Collect Automatically

When you use our Website or App, we automatically collect:

• Device Data (device type, operating system, IP address)
• Usage Data (pages visited, features used, session duration)
• Location Data (with your permission)

We collect this data using cookies, web beacons, and similar tracking technologies.

3. Information from Third Parties

We may receive personal data about you from:

• Credit reference agencies (where applicable)
• Mobile network operators (MTN, Airtel) for mobile money transactions
• Universities and colleges for student verification
• Guarantors who provide information to support your loan application
• Employers who verify your employment status
• Other financial institutions for credit checks (with your consent)

4. Information from Collateral Agents

Our Collateral Agents collect information when they:

• Conduct physical collateral assessments at your residence or campus
• Photograph and document collateral items
• Verify your identity and guarantor details in person
• Conduct follow-up visits for overdue loan repayments

FACIAL RECOGNITION AND BIOMETRIC DATA

Sika Prime may use facial recognition technology to verify your identity and prevent fraud.

Collection of Facial Data

We may capture your facial image or photograph through:

• In-app photo capture during account registration
• Physical verification by Collateral Agents during loan assessment
• Identity verification checks during loan application

We will only collect facial data with your explicit consent, which you may withdraw at any time.

Use of Facial Data

Facial data is used exclusively for:

• Identity Verification: Confirming your identity during account registration and loan applications
• Fraud Prevention: Detecting and preventing identity fraud and unauthorized access
• Loan Processing: Matching your identity to loan applications and repayment records

Disclosure of Facial Data

We do not share facial data with third parties except:

• Service Providers: Trusted technology providers who assist with identity verification and are bound by confidentiality agreements
• Legal Compliance: If required by law, court order, or regulatory authority

Retention and Deletion of Facial Data

Facial data is retained only as long as necessary for identity verification and fraud prevention, and as required by law. You may request deletion of your facial data by contacting us at info@sikaprime.com. We will honor such requests promptly, subject to legal and regulatory requirements.

Data Security for Facial Data

All facial data is encrypted and stored securely using industry-standard protocols. Access is restricted to authorized personnel only.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to:

• Distinguish you from other users
• Remember your preferences and login details
• Analyze how you use the Website and App
• Improve the functionality and user experience of our Services

You can control cookie settings through your browser, but disabling cookies may affect your ability to use certain features of the App.

HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

1. With Your Consent: Where you have explicitly agreed to the processing
2. To Perform a Contract: Where we need to process your data to provide Services under our loan agreement with you
3. For Legitimate Interests: Where it is necessary for our business operations and does not override your rights
4. Legal Compliance: Where we need to comply with legal or regulatory obligations

Purposes for Which We Use Your Personal Data

We will not share your personal data with third parties for marketing purposes without your explicit opt-in consent.

WHO WE SHARE YOUR PERSONAL DATA WITH

We may share your personal data with the following third parties:

1. Service Providers

• Technology providers who host and maintain our Website and App
• Payment processors (MTN, Airtel) for mobile money transactions
• Cloud storage providers for secure data storage
• Identity verification services for facial recognition and fraud prevention
• SMS and email service providers for customer communications

All service providers are required to keep your data secure and confidential and may only use it for the purposes we specify.

2. Credit Reference Agencies

With your consent, we may share your loan repayment history with credit reference agencies to help you build a credit record in Zambia.

3. Legal and Regulatory Authorities

We may disclose your personal data to:

• Bank of Zambia (BoZ) for regulatory compliance
• Zambia Information and Communications Technology Authority (ZICTA) for data protection compliance
• Law enforcement agencies if required by law or court order
• Legal advisors in connection with debt recovery or legal proceedings

4. Business Transfers

If Sika Prime is acquired, merges with another company, or sells part of its business, your personal data may be transferred to the new owners. The new owners will use your data in accordance with this Privacy Policy.

5. Guarantors and Next of Kin

With your consent, we may contact your guarantor or next of kin if:

• You default on loan repayments
• We are unable to contact you
• It is necessary to recover collateral items

INTERNATIONAL TRANSFERS

Currently, all personal data is stored and processed within Zambia. If we transfer your data outside Zambia in the future (for example, to cloud service providers or technology partners), we will:

• Ensure the recipient country has adequate data protection laws
• Use contractual safeguards to protect your data
• Notify you of the transfer and obtain your consent where required

DATA SECURITY

We take data security seriously and have implemented appropriate technical and organizational measures to protect your personal data, including:

Technical Measures

• Encryption: All sensitive data (including passwords and mobile money details) is encrypted using industry-standard SSL/TLS technology
• Secure Servers: Data is stored on secure servers with restricted access
• Firewalls and Antivirus Software: Protect against unauthorized access and malware
• Regular Security Audits: To identify and address vulnerabilities

Organizational Measures

• Access Controls: Only authorized employees and service providers can access your data
• Staff Training: All employees are trained on data protection and confidentiality
• Confidentiality Agreements: All staff and service providers sign confidentiality agreements
• Data Breach Response Plan: We have procedures in place to respond to data breaches and will notify you and the relevant authorities as required by law

Your Responsibility

You are responsible for:

• Keeping your account password and login details confidential
• Not sharing your password with anyone
• Logging out of the App after each session, especially on shared devices
• Notifying us immediately if you suspect unauthorized access to your account

Despite our security measures, no system is 100% secure. If we become aware of a data breach, we will notify you and the relevant authorities in accordance with the Data Protection Act.

DATA RETENTION

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

Active Customer Data

• While your account is active and you have an outstanding loan or may apply for future loans
• For a period of six (6) years after you cease to be a customer, as required by Zambian tax and financial record-keeping laws

Specific Retention Periods

• Loan Application Records: 6 years after loan closure
• Repayment Records: 6 years after final repayment
• Collateral Records: 6 years after collateral return
• Marketing Consents: Until you withdraw consent
• Customer Service Communications: 3 years

Anonymized Data

We may anonymize your personal data (so it can no longer identify you) for research, statistical analysis, and business planning purposes. Anonymized data may be retained indefinitely.

Your Right to Request Deletion

You may request deletion of your personal data by contacting us. However, we may be unable to delete data if:

• We are required by law to retain it (e.g., for tax purposes)
• It is necessary to establish, exercise, or defend legal claims (e.g., debt recovery)

YOUR LEGAL RIGHTS

Under the Data Protection Act No. 3 of 2021, you have the following rights:

1. Right of Access (Data Subject Access Request)

You have the right to request a copy of the personal data we hold about you. We will provide this free of charge within 30 days of your request.

2. Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

3. Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data where:

• It is no longer necessary for the purposes for which it was collected
• You withdraw your consent (where consent was the basis for processing)
• We have processed your data unlawfully
• We are required by law to erase it

We may not be able to honor your request if we are legally required to retain the data or if it is necessary for legal claims.

4. Right to Object to Processing

You have the right to object to processing of your personal data where:

• We are relying on legitimate interests as the legal basis
• We are processing your data for direct marketing purposes

If you object to direct marketing, we will stop processing your data for that purpose immediately.

5. Right to Restriction of Processing

You have the right to request that we suspend processing of your personal data if:

• You contest the accuracy of the data
• The processing is unlawful but you do not want the data erased
• We no longer need the data but you need it to establish, exercise, or defend legal claims
• You have objected to processing and we are verifying whether our legitimate grounds override your rights

6. Right to Data Portability

You have the right to request that we transfer your personal data to you or to another service provider in a structured, commonly used, machine-readable format. This right applies where:

• The processing is based on your consent or a contract
• The processing is carried out by automated means

7. Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

If you withdraw consent, we may not be able to provide certain Services to you.

8. Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

Zambia Information and Communications Technology Authority (ZICTA)
Data Protection Commissioner
Email: [ZICTA data protection email]
Website: [ZICTA website]

HOW TO EXERCISE YOUR RIGHTS

To exercise any of your rights under this Privacy Policy, please contact us at:

Email: info@sikaprime.com
Phone: +260 975138481
Office: University of Zambia, Great East Road Campus, Lusaka

We will respond to your request within 30 days. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

MARKETING COMMUNICATIONS

With your consent, we may send you marketing communications about:

• New loan products and services
• Special offers and promotions
• Tips for managing your finances and building credit
• Sika Prime updates and news

How We Communicate

We may contact you via:

• SMS
• WhatsApp
• Email
• Phone call

Opting Out

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any email
• Replying "STOP" to any SMS
• Contacting us at info@sikaprime.com
• Updating your preferences in the App

Even if you opt out of marketing, we will still send you important service messages about your loan, repayments, and account.

CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 18 years. We do not knowingly collect personal data from anyone under 18.

If you are under 18, please do not use our Services or provide any personal data to us.

If we become aware that we have collected personal data from someone under 18 without parental consent, we will delete that information immediately.

LINKS TO OTHER WEBSITES

Our Website and App may contain links to third-party websites, such as:

• MTN Mobile Money
• Airtel Money
• Social media platforms (Facebook, Instagram, TikTok)

We are not responsible for the privacy practices or content of these third-party websites. We encourage you to read the privacy policies of any website you visit.

AUTOMATED DECISION-MAKING AND PROFILING

We may use automated systems to:

• Assess your creditworthiness and loan eligibility
• Calculate your credit risk score
• Determine loan amounts, interest rates, and repayment terms
• Flag suspicious transactions for fraud prevention

These automated decisions are based on factors including:

• Your repayment history with Sika Prime
• Your student or employment status
• Your guarantor's information
• Your collateral value

You have the right to:

• Request human review of any automated decision
• Provide additional information to support your loan application
• Challenge the decision if you believe it is incorrect

To request human review, contact us at info@sikaprime.com.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in:

• Our business practices
• Legal or regulatory requirements
• Technology and security standards

When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via SMS, email, or in-app notification
• Request your acceptance of the updated policy where required by law

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your data.

GLOSSARY

Lawful Bases for Processing

• Consent: You have given clear permission for us to process your personal data for a specific purpose
• Performance of Contract: Processing is necessary to provide Services under our loan agreement with you
• Legitimate Interests: Processing is necessary for our business operations and does not override your fundamental rights
• Legal Compliance: Processing is required to comply with Zambian laws and regulations

Third Parties

• Service Providers: Companies that provide technology, payment, storage, and communication services to support our business
• Credit Reference Agencies: Organizations that collect and share credit information about borrowers
• Regulators: Government authorities such as Bank of Zambia (BoZ) and ZICTA

CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Sika Prime Financial Services Limited

Email: info@sikaprime.com
Phone: +260 975138481
WhatsApp: +260 975138481
Office Address: University of Zambia, Great East Road Campus, Lusaka, Zambia
Website: sikaprime.com
App: app.sikaprime.com

Office Hours:
Monday to Friday: 08:00 – 17:00
Saturday: 09:00 – 13:00
Sunday: Closed

YOUR ACCEPTANCE OF THIS POLICY

By using our Website, App, or Services, you acknowledge that you have read, understood, and agree to this Privacy Policy.

If you do not agree with this policy, please do not use our Services.

Sika Prime Financial Services Limited
PACRA Registered
Lusaka, Zambia
sikaprime.com

This Privacy Policy is compliant with the Data Protection Act No. 3 of 2021 of the Republic of Zambia.