Legal

Privacy Policy

How we collect, use and protect your information across our website, client portal and the Laven Solutions mobile app.

Effective 2 October 2026

1. Who we are

Laven Solutions Microfinance Limited(“Laven Solutions”, “we”, “us”) is a Tier 4 microfinance institution in Arua, Uganda. This policy explains how we handle personal information when you use our website, our client web portal and the Laven Solutions mobile app (together, the “Services”). We are responsible for your information under the Data Protection and Privacy Act, 2019 of Uganda.

2. What we collect

We only collect what we need to provide your loans and savings services:

  • Identity and contact details: your name, member number, email address, phone number, National ID Number (NIN), gender, address, business name and profile photo, as recorded when you open an account at a branch.
  • Financial information: your loans, repayment schedules, payments, savings accounts, balances, transactions, and deposit or withdrawal requests, including the transaction references and payment slips you attach.
  • Documents: copies of KYC documents (such as your National ID) that you provide to us.
  • Sign-in information: your email and password (stored only in encrypted, hashed form) and one-time verification codes.
  • Device information from the app: a push notification token so we can send you alerts, your phone’s make and model, and the app version, so we can keep your sign-in secure and tell you when an update is required.

The mobile app does not access your location, contacts, SMS messages, call logs or photo gallery. It only opens a file you choose yourself when you attach a payment slip. We do not use advertising or third-party analytics.

3. How we use your information

  • To open and run your accounts, process loans, record payments, deposits and withdrawals, and show you your balances and history.
  • To verify your identity and keep your account secure, including sign-in verification and preventing fraud.
  • To send you service messages by email, SMS and push notification, such as payment confirmations, request approvals and repayment reminders.
  • To meet our legal and regulatory obligations, including record keeping and reporting to regulators.
  • To answer your questions and resolve complaints.

4. Who we share it with

We do not sell your personal information. We share it only where necessary:

  • Service providers who run parts of our Services for us under confidentiality obligations: our web hosting provider, email and SMS delivery services, and Google Firebase Cloud Messaging, which delivers push notifications to your phone.
  • Regulators, credit reference bureaus and authorities where Ugandan law requires it, such as the Uganda Microfinance Regulatory Authority.
  • Mobile money providers (MTN Mobile Money and Airtel Money), only to the extent needed to process payments you make.

5. How we protect it

All data between the app, the portal and our servers travels over encrypted connections (HTTPS). Passwords are stored hashed, never in plain text. Access to client records is limited to authorised Laven Solutions staff, and changing your password signs you out of the app on every device.

6. How long we keep it

We keep your information for as long as you are a client and afterwards for as long as the law requires us to keep financial records. When it is no longer needed, we delete it or make it anonymous. Push notification tokens are removed as soon as you sign out of the app.

7. Your rights and choices

Under the Data Protection and Privacy Act, 2019 you may ask us to:

  • give you a copy of the personal information we hold about you;
  • correct information that is wrong or out of date;
  • delete your information or close your account, except where we must keep records by law or while a loan is outstanding;
  • stop non-essential messages.

To make a request, email support@lavensolutions.co.ug, call +256 703 190460, or visit your branch. We may ask you to confirm your identity first. You can turn off push notifications at any time in your phone’s settings.

8. Children

Our Services are for adults aged 18 and over. We do not knowingly collect information from children.

9. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it last changed, and we will tell you about significant changes through the app or by email.