Privacy Notice

1. Who we are and the scope of this notice

This notice applies when you visit our website, contact us, submit an enquiry or complaint, use the loan calculator, apply for a loan online, attend GreenPath training, engage us for advisory services, or otherwise interact with GreenPath.

GreenPath processes personal information in accordance with applicable Tanzanian laws, including the Personal Data Protection Act, 2022, and other requirements relevant to financial services, records management, fraud prevention, and regulatory reporting.

2. Personal information we collect

The information we collect depends on the service you request and may include:

• Identity information such as your name, date of birth, gender, photograph, identification number, and copies of identification documents.
• Contact information such as your telephone number, email address, physical address, region, district, and preferred branch.
• Financial and affordability information including income, expenses, bank or mobile-money information, requested loan amount, repayment history, and information about assets or security.
• Employment, business, farming, group, education, and professional information relevant to an application, training, or advisory engagement.
• Application documents, supporting evidence, invoices, contracts, receipts, references, guarantor information, and communications with GreenPath.
• Technical information such as IP address, device and browser information, website activity, security logs, and cookie preferences.
• Complaint, grievance, enquiry, customer support, and feedback records.

If you provide information about another person, such as a guarantor, referee, employee, or group member, you should ensure that you are permitted to provide that information and that the person understands how GreenPath may use it.

3. How we collect personal information

We collect information directly from you through online and paper forms, telephone calls, email, meetings, branch visits, training registrations, complaints, and service delivery. We may also receive information from employers, guarantors, referees, credit reference or identity-verification providers, payment providers, public registers, partners, and lawful authorities where permitted.

4. How and why we use personal information

We may process personal information to:

• Assess eligibility, identity, affordability, credit risk, security, and suitability for a requested financial product.
• Open and administer client records, process payments, manage repayments, provide statements, and maintain transaction and accounting records.
• Contact applicants and clients, verify submitted information, request documents, and communicate decisions or service updates.
• Deliver training, advisory, technology, grievance-management, and partnership services.
• Prevent and investigate fraud, money laundering, misuse, security incidents, and other unlawful activity.
• Meet legal, regulatory, audit, tax, risk-management, reporting, and recordkeeping obligations.
• Improve our services, website, operations, client experience, inclusion outcomes, and social impact reporting using appropriately protected information.
• Send service messages and, where permitted or with your consent, information about relevant GreenPath products, training, or opportunities.

Our processing may be based on your consent, steps taken at your request before entering a contract, performance of a contract, compliance with a legal obligation, protection of legitimate interests, or another lawful basis recognized by applicable law.

5. When we share personal information

We do not sell personal information. We may share information only where necessary and lawful with:

• GreenPath employees, branches, directors, accountants, and authorized service teams who need it for their work.
• Identity, credit, payment, banking, mobile-money, insurance, document-verification, hosting, email, SMS, audit, legal, and technology service providers.
• Guarantors, employers, partners, or institutions involved in an application or service, where appropriate and permitted.
• Regulators, courts, law-enforcement bodies, tax authorities, auditors, or other public authorities where required by law or a lawful request.
• A successor organization in connection with a lawful restructuring, merger, acquisition, or transfer, subject to appropriate safeguards.

Service providers are expected to protect information, use it only for authorized purposes, and comply with contractual and legal confidentiality requirements.

6. International transfers

Some technology or communication providers may process information outside Tanzania. Where this occurs, GreenPath will take reasonable steps to ensure that the transfer is permitted and that appropriate contractual, technical, and organizational safeguards protect the information.

7. Retention and security

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide services, resolve disputes, enforce agreements, and meet legal, regulatory, audit, and reporting requirements.

GreenPath uses access controls, role-based permissions, authentication, secure infrastructure, audit logs, backups, staff confidentiality measures, and other proportionate safeguards. No electronic system is completely risk-free, but we continuously work to reduce unauthorized access, loss, alteration, or disclosure.

8. Cookies and website information

Our website may use essential cookies and similar technologies to maintain sessions, protect forms, remember preferences, understand performance, and improve usability. You can control non-essential cookies through browser settings where available. Blocking essential cookies may prevent some website functions from working correctly.

9. Your data protection rights

Subject to applicable law and appropriate identity verification, you may ask GreenPath to:

• Confirm whether we process your personal information and provide access to it.
• Correct information that is inaccurate, incomplete, or out of date.
• Delete or restrict information where there is no lawful reason to continue processing it.
• Object to certain processing or withdraw consent where processing depends on consent.
• Provide eligible information in a portable format where the law requires it.
• Review a concern about automated processing or a decision that significantly affects you.

Some rights may be limited where GreenPath must retain information to comply with financial, legal, regulatory, fraud-prevention, or contractual obligations.

10. Children's information

Our public website and loan application services are not intended for children acting independently. Where a service concerns a child, such as education financing, information should be provided by a parent, guardian, or other authorized adult and will be handled only as necessary for that purpose.

11. Changes to this Privacy Notice

We may update this notice when our services, technology, or legal obligations change. The latest version will be published on this page with its effective date. Material changes may also be communicated through appropriate GreenPath channels.

12. Questions, requests, or complaints

To ask a privacy question, exercise a right, or raise a concern, contact GreenPath using the details below. Please provide enough information for us to identify the relevant record and respond securely.

If you remain dissatisfied, you may have the right to lodge a complaint with the Personal Data Protection Commission or another competent authority in Tanzania.