KwachaRise — Privacy Policy
Last updated: June 2025
Platform: kwacharise.com
Operated by: KwachaRise [Company Registration Number — insert PACRA number once issued]
Country of Operation: Republic of Zambia
1. Introduction and Legal Basis
KwachaRise ("we", "us", "our") is committed to protecting the privacy and personal data of all members in accordance with the laws of the Republic of Zambia.
This Privacy Policy is prepared and maintained in compliance with:
- The Data Protection Act No. 3 of 2021, the primary data protection law of Zambia
- Article 17 of the Constitution of Zambia Amendment Act No. 2 of 2016, which guarantees every Zambian the right to privacy
- The Electronic Communications and Transactions Act No. 4 of 2021
- The Cyber Security and Cyber Crimes Act No. 2 of 2021
Under the Data Protection Act No. 3 of 2021, KwachaRise operates as a data controller, meaning we determine the purposes and means by which your personal data is collected and processed. By registering on KwachaRise you consent to the collection and use of your information as described in this policy.
2. What Personal Data We Collect
In line with the data minimisation principle under the Data Protection Act No. 3 of 2021, we only collect information that is necessary for the operation of the platform.
2.1 Information you provide directly
- Full name as it appears on your NRC or passport
- Email address
- Phone number/mobile money number used for transactions
- Password, stored in encrypted, non-readable form
- National Registration Card NRC or passport photo submitted for KYC identity verification
- Payment screenshots uploaded as proof of deposit
- Messages submitted through the Support section
2.2 Information generated by your activity on the platform
- Deposit records including amounts, methods, references, and dates
- Withdrawal requests and pairing records
- Investment cycle history and tier status
- Referral activity and bonus records
- Login timestamps and session activity
- Notification and communication preferences
- Broadcast message read records
3. Why We Collect and Process Your Data
Under the Data Protection Act No. 3 of 2021, personal data must be collected for specific, legitimate purposes. We process your data for the following lawful purposes only:
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Creating and managing your account | Contractual necessity | Name, email, phone, password |
| Identity verification (KYC) | Legal obligation and anti-money laundering compliance | NRC or passport photo |
| Processing deposits | Contractual necessity | Payment details, screenshots, mobile number |
| Processing withdrawals and pairing | Contractual necessity | Name, mobile number, tier, withdrawal amount |
| Sending WhatsApp and email notifications | Consent (opt-in during registration) | Phone number, email address |
| Referral bonus tracking | Contractual necessity | Email, referral code activity |
| Fraud prevention and platform security | Legitimate interest and legal obligation | All account and transaction data |
| Compliance with Zambian law | Legal obligation | Identity and transaction records |
We do not process your personal data for any purpose other than those listed above without obtaining your explicit consent.
4. How We Share Your Data
KwachaRise does not sell, rent, or trade your personal information to any third party under any circumstances.
4.1 With other members during pairing
When you are matched for a withdrawal, your first name and registered mobile number are shared with the member who will be sending you payment. This sharing is strictly limited to what is necessary to complete the transaction. You consent to this by submitting a withdrawal request.
4.2 With platform administrators
Admins and the Super Admin can view member profiles, KYC documents, deposit records, and transaction history solely for the purpose of managing and operating the platform. Access is restricted to authorised personnel only.
4.3 With technology service providers
We use the following third party services to operate the platform. Each is bound by their own privacy and security obligations:
- Supabase — secure cloud database storage and authentication
- Resend — email delivery service for notifications and password resets
- Twilio — WhatsApp notification delivery
- Vercel — platform hosting and deployment
These providers are given access only to the minimum information necessary to perform their functions and are not permitted to use your data for their own purposes.
4.4 For legal and regulatory compliance
In compliance with Zambian law we may disclose member information to:
- The Financial Intelligence Centre of Zambia in cases of suspected money laundering or financial crime
- The Office of the Data Protection Commissioner if required under the Data Protection Act No. 3 of 2021
- Zambian courts or law enforcement authorities when required by a valid court order or legal process
We will notify you of any such disclosure where permitted by law.
5. Your Rights Under the Data Protection Act No. 3 of 2021
The Data Protection Act No. 3 of 2021 gives you the following rights regarding your personal data:
Right to Access — You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification — You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure — You have the right to request deletion of your personal data. This right is subject to our legal obligations to retain certain records under Zambian law.
Right to Restrict Processing — You have the right to request that we limit how we use your data in certain circumstances.
Right to Object — You have the right to object to the processing of your data where it is based on legitimate interests.
Right to Withdraw Consent — Where processing is based on your consent, such as WhatsApp notifications, you may withdraw that consent at any time through your account settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to Data Portability — You have the right to receive your personal data in a structured, commonly used format.
To exercise any of these rights please contact us through the Support section on the platform. We will respond within a reasonable timeframe and in accordance with the Data Protection Act No. 3 of 2021.
6. Data Storage, Security, and Cross-Border Transfers
6.1 All personal data is stored on secure cloud servers. Sensitive data including KYC documents and payment screenshots are stored in a private, access-controlled storage environment.
6.2 Passwords are hashed and encrypted at all times. They are never stored or visible in plain text to anyone including platform administrators.
6.3 We apply industry standard security measures including encrypted connections HTTPS, access controls, and regular security reviews to protect your data.
6.4 In accordance with the Data Protection Act No. 3 of 2021, personal data may be transferred to and stored on servers outside the Republic of Zambia where our service providers operate, including Supabase, Vercel, Resend, and Twilio. Such transfers are made only where the receiving country or organisation provides adequate data protection safeguards. By using KwachaRise you consent to these transfers where necessary for the provision of the service.
6.5 Despite our best efforts no digital system is entirely free from risk. We cannot guarantee absolute security of data transmitted over the internet and members use the platform at their own risk in this regard.
7. Data Retention
7.1 We retain your account information and transaction records for as long as your account is active and for a period of 5 years after account closure or expiry, in line with standard financial record-keeping practice and Zambian legal requirements.
7.2 KYC documents are retained for as long as required by applicable Zambian anti-money laundering and identity verification obligations.
7.3 Where you request deletion of your account, we will delete or anonymise your personal data except where we are required by law to retain certain records.
8. Cookies and Session Technology
KwachaRise uses session cookies and similar technologies solely to maintain your login session and ensure the security and functionality of the platform. These technologies do not track your activity outside of kwacharise.com and do not collect data for advertising purposes.
9. Children's Privacy
KwachaRise is strictly for users aged 18 years and above in compliance with Zambian law and our Terms and Conditions. We do not knowingly collect personal data from any person under the age of 18. If we become aware that a minor has registered on the platform the account will be immediately closed and all associated personal data deleted without delay.
10. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, KwachaRise will notify the Office of the Data Protection Commissioner of Zambia and affected members as required under the Data Protection Act No. 3 of 2021. Notification will be made without undue delay and will include the nature of the breach, the data affected, and the steps being taken to address it.
11. Future Bank Partnerships
KwachaRise intends to establish formal partnerships with licensed banking institutions in Zambia in future. When such partnerships are established, additional data sharing agreements and compliance requirements under the Banking and Financial Services Act No. 7 of 2017 may apply. Members will be notified of any material changes to this Privacy Policy before they take effect.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in Zambian law, platform operations, or data processing practices. Members will be notified of significant changes through the in-app broadcast notification system and by email. The date at the top of this document will always reflect when it was last updated. Continued use of the platform after an updated policy is published constitutes acceptance of the updated terms.
13. Contact and Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or how your personal data is handled, please contact us through the Support section on the platform at kwacharise.com.
If you are not satisfied with how we handle your request you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Zambia, which is the statutory supervisory authority established under the Data Protection Act No. 3 of 2021.
By creating an account on KwachaRise, you confirm that you have read and understood this Privacy Policy and freely consent to the collection, processing, and use of your personal data as described above, in accordance with the Data Protection Act No. 3 of 2021 of the Republic of Zambia.