Mountfin Finance - Privacy Policy

Mountfin Finance — Privacy Policy

1. Who We Are (Data Controller)

  • Company Name: Mountfin Finance
  • Physical Address:123 Borrowdale Road,Gunhill, Harare, Zimbabwe
  • Data Protection Officer (DPO): Tafadzwa Machi, Appointed and registered with POTRAZ pursuant to S.I. 155 of 2024
  • DPO Contact: dpo@mountfin.co.zw | +263 775 644 872

2. Personal Data We Collect

We collect and process personal and financial data necessary to provide financial services, including:

  • Identity & Contact Data: Full name, national ID number, passport number, physical address, phone number, and email address.
  • Financial & Transaction Data: Bank account details, transaction history, credit checks, income declarations, and loan repayment records.
  • Biometric & Technical Data: Biometric authentication data (where applicable for digital security), IP address, browser type, and device information.

3. Purpose of Processing and Lawful Basis

We process your personal data under lawful grounds for the following purposes:

  • Account Creation & KYC: To verify your identity in compliance with Know-Your-Customer (KYC) and anti-money laundering (AML) regulations.
  • Loan and Financial Services: To assess creditworthiness, disburse funds, manage billing, and service your account.
  • Security & Fraud Prevention: To protect your account, run role-based access audits, and maintain network security.
  • Legal Obligations: To comply with Zimbabwean financial laws and POTRAZ regulatory mandates.

4. Disclosure and Sharing of Data

  • We do not sell your personal data.
  • We may share data with licensed Data Processors (such as cloud hosting providers, IT service bureaus, and payment gateways) strictly under binding written data processing agreements pursuant to Section 10 of S.I. 155 of 2024.
  • We may disclose information to law enforcement or regulatory authorities (including POTRAZ) only when legally required to do so.

5. Data Security and Retention

  • Security Measures: We implement technical and organisational measures (encryption, role-based access controls, and secure storage) to protect your data from loss, alteration, or unauthorized access.
  • Retention Period: We retain your personal and transaction data only for as long as necessary to fulfill the purposes for which it was collected or to comply with statutory financial retention periods. Once no longer required, data is securely deleted or anonymized.

6. Your Rights as a Data Subject

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate, outdated, or incomplete data.
  • Erasure / Objection: Request the deletion of your data or object to certain processing activities, subject to legal retention obligations.
  • Withdraw Consent: Withdraw consent for marketing or non-essential processing at any time by messaging our DPO.

To exercise these rights, contact our Data Protection Officer at dpo@mountfin.co.zw | +263 775 644 872.

7. Data Breaches

In the event of a personal data security breach, Mountfin Finance will notify:

  • POTRAZ (the Data Authority): Within 24 hours
  • Affected Data Subjects: Within 72 hours if the breach poses a high risk to your rights and freedoms.
Return Home Cookies