Company Name: Ricebro Technology Uganda Limited
Brand Name: FastPay
Effective Date: 05/09/2025
Governing Law: Data Protection and Privacy Act, 2019 (Uganda)
Introduction
Ricebro Technology Uganda Limited, trading under the brand name FastPay ("the Company"), is committed to protecting the privacy and confidentiality of customer information. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Data Protection and Privacy Act, 2019 of Uganda. By applying for and using our mobile installment services, you consent to the practices described in this Policy.
Information We Collect:
To provide our services, we collect personal information that identifies you and helps us assess your eligibility for credit. This includes your full name, date of birth, National ID or passport details, and contact details such as phone number, email, and residential address. We may also collect employment and financial details, including workplace, income, guarantor or referee details, and your credit history. In addition, we collect information related to the financed mobile device, such as IMEI, brand, and model, as well as records of your payments, outstanding balances, and repayment performance.
Legal Basis for Processing
Your personal data is processed on lawful grounds as required under Ugandan law. First, we obtain your consent when you apply for installment services. Second, processing is necessary to perform our contractual obligations, such as managing your account and repayments. Third, in certain cases, we process your data to comply with legal obligations, for example, reporting to Credit Reference Bureaus (CRBs) as required by the Tier 4 Microfinance Institutions and Money Lenders Act, 2016. Finally, we may process your data under our legitimate interest in preventing fraud, recovering financed devices, and safeguarding the Company’s assets.
If you contact our technical support, we may process other data required to help you with any queries or support matters, such as login and password administrator pnael, FTP access, data collected in crash logs that are gathered by your CMS or the technical parameters of the server you use.
How We Use Your Information
Your information is used strictly for purposes related to providing installment financing services. This includes verifying your identity, processing your loan application, managing your account, and monitoring repayment behavior. We also use your details to send reminders, repayment notices, and important service updates. To protect both you and the Company, your information may also be used to prevent fraud, repossess devices in case of default, and report repayment history to Credit Reference Bureaus as required by law.
Sharing of Information
We may share your personal information with authorized third parties where it is necessary and lawful to do so. This includes Credit Reference Bureaus (CRBs) for the purpose of reporting repayment history, payment service providers such as banks and mobile money operators to process transactions, and regulatory authorities when disclosure is legally required. We may also share information with service providers such as IT support firms, SMS providers, legal advisors, and debt recovery agents, all of whom are bound by confidentiality agreements. The Company does not sell, rent, or trade personal data to third parties.
Data Security
The Company applies strict technical, administrative, and physical security measures to protect your personal data against unauthorized access, loss, or misuse. These measures include encryption of sensitive data, limited staff access, secure storage systems, and monitoring of information systems. While we take every reasonable step to secure your information, you acknowledge that no system is entirely immune from security risks.
Customer Rights
As a customer, you have several rights under the Data Protection and Privacy Act, 2019. You have the right to request access to the personal data we hold about you and to request correction of inaccurate or incomplete information. You also have the right to withdraw consent for receiving marketing communications. In certain cases, you may object to the processing of your personal data. If you believe your data rights have been violated, you may file a complaint with the National Information Technology Authority of Uganda (NITA-U), which is the regulatory body responsible for data protection.
Data Retention
Your personal information will be retained only for as long as necessary to fulfill the purposes for which it was collected. We also retain data where it is required for compliance with financial regulations, for record-keeping under Ugandan law, and for the collection of outstanding debts. Once data is no longer required, it will be securely destroyed or anonymized.
Breach Notification
In the event of a data breach that compromises your personal information, the Company will take immediate steps to contain the breach, notify affected customers, and report the incident to the National Information Technology Authority of Uganda (NITA-U) as required by law.
Updates to this Policy
The Company may revise this Privacy Policy from time to time to reflect changes in law, regulations, or business practices. Customers will be informed of significant updates through SMS, email, or notices on our official platforms. Continued use of FastPay services after such updates constitutes acceptance of the revised Policy.
Contact Information
If you have any questions, requests, or complaints concerning this Privacy Policy or how your personal data is handled, you may contact us at:
Email: ricebrouganda@gmail.com
Phone: +256 707332115
Address: Janani Luwum church house, 10th floor, kampala road, Uganda.