Privacy Policy

LUMBIKA Microfinance Limited is the data controller for personal data processed in connection with its lending, asset-financing, customer-support and related operations, subject to applicable law.

• Identity and KYC information, including NIDA-related verification information where applicable.
• Contact information, mobile number, address and relevant demographic information.
• Loan/application, repayment, account and transaction information.
• Credit-reference and affordability information obtained for lawful lending purposes.
• Asset identifiers such as serial number, IMEI or vehicle identifiers where applicable.
• Customer communications, complaints and support records.
• Location/asset-monitoring information where lawfully enabled, disclosed and authorised.
• Technical and audit information generated by authorised LUMBIKA systems.

• Customer identification and verification.
• Credit assessment and responsible lending.
• Account administration, payment allocation and reconciliation.
• Asset allocation, security and authorised portfolio monitoring.
• Customer support, complaints handling and communications.
• Fraud prevention, risk management, audit, compliance and regulatory reporting.
• Establishment, exercise or defence of lawful contractual or legal rights.

Personal data may be shared only where necessary and lawful with authorised service providers, payment processors, credit-reference providers, regulators, professional advisers, courts or other persons where disclosure is legally required or permitted. LUMBIKA does not authorise service providers to use customer information for unrelated purposes.

LUMBIKA's platform is not designed to access customer contact lists, call logs, messages, photographs, social-media accounts, email accounts or installed applications as a delinquency-management technique. Any device permission requested must be limited to a specific legitimate purpose.

Where L-GAR or related functionality is used, location information is treated as personal data. Access is restricted to authorised personnel and must not be used to harass, shame or publicly expose a customer.

LUMBIKA applies role-based access, authentication, audit logging, controlled administrative privileges and encrypted communications where supported. Personal data will be retained only for periods justified by operational, contractual, legal, regulatory, audit or dispute-resolution requirements.

This website uses strictly necessary technologies required for the website to function and to remember privacy choices. The cookie named lumbika_consent is necessary for remembering privacy choices and is not an advertising cookie. It is not used for analytics.

• Name: lumbika_consent.
• Purpose: stores the visitor's cookie and privacy preference, including whether optional Analytics has been accepted or rejected.
• Duration: approximately 180 days.
• Type: first-party, necessary.

LUMBIKA uses Google Analytics 4 as an optional service to understand how visitors use the website and to improve website performance and content. Google Analytics is not loaded until a visitor grants Analytics consent through the website consent controls, including Accept All or enabling Analytics under Manage Preferences or Cookie Settings. Rejecting non-essential cookies, or declining Analytics, prevents Google Analytics from loading. Advertising consent remains denied.

• If Analytics consent is granted, measurement may include pages visited, website interactions, browser and device information, referral or source information, session or usage information, and approximate geographic information derived from network information.
• After Analytics consent, Google Analytics currently uses cookies including _ga and _ga_F0LFRMN9JE to distinguish usage and sessions for measurement. Retention periods for those cookies are set by Google Analytics and are not independently stated here.
• LUMBIKA does not treat this measurement as anonymous. Google Analytics is provided by Google.
• This website implementation is not used for Google Ads, remarketing or advertising personalization.
• Visitors may reopen Cookie Settings in the website footer and change the Analytics preference.
• If Analytics consent is later withdrawn, analytics storage is denied, future Google Analytics loading and measurement requests from this website are blocked, and subsequent page visits do not send new Analytics hits. Existing Google Analytics cookies may remain in the browser until they expire or the visitor deletes them. Changing the preference does not currently delete those cookies automatically.

This website currently loads the typefaces Manrope and Spectral from Google Fonts. The visitor's browser may connect to Google infrastructure, including fonts.googleapis.com and fonts.gstatic.com, to obtain those font resources. Google Fonts is not an analytics or advertising category in the website consent controls.

Information submitted through the website contact form is used to respond to the enquiry and to route it to the appropriate LUMBIKA team.

• The form may collect Full Name, Phone Number, Email Address, Enquiry Type and Message.
• General, Support and Partners enquiries are sent to info@lumbika.co.tz.
• Careers enquiries are sent to hr@lumbika.co.tz.

Customers may use LUMBIKA's designated support and complaints channels to raise privacy questions, request correction of inaccurate information, or exercise other rights available under applicable personal-data protection requirements.