Rever-Bridge Financial Services Ltd (“Rever-Bridge”, “the Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal and business information.

This Privacy Policy explains how we collect, use, process, store, disclose, protect, and manage information submitted through our website, loan applications, digital systems, electronic platforms, mobile communications, and related services.

This Policy is intended to align with applicable laws of the Republic of Zambia, including principles relating to privacy, confidentiality, lawful processing, fraud prevention, digital transactions, financial compliance, and data protection.

1. INFORMATION WE COLLECT

We may collect personal, financial, business, technical, and operational information including but not limited to:

• Full names
• NRC or passport details
• Date of birth
• Gender and marital status
• Phone numbers
• Email addresses
• Residential and business addresses
• Employment information
• Payroll information
• Business information and registration details
• Bank account information
• Mobile money details
• Collateral information
• Financial statements and bank statements
• Payslips and proof of income
• Uploaded documents and images
• Selfie verification images
• Digital signatures
• Loan application records
• Repayment records
• Communication records
• IP addresses and browser/device information
• Website activity and usage information
• Location-related information where permitted
• Credit history and CRB information

2. HOW WE COLLECT INFORMATION

Information may be collected through:

• Online application forms
• Website submissions
• Mobile communication platforms
• Phone calls and interviews
• Email correspondence
• Physical documentation
• Third-party verifications
• Employers and payroll offices
• Banks and financial institutions
• Business visits and field verification
• Collections and recovery interactions
• Digital uploads and electronic submissions
• Cookies and website analytics technologies

3. PURPOSE OF DATA COLLECTION

Your information may be collected and processed for purposes including:

• Processing loan applications
• Identity verification
• Affordability assessment
• Fraud detection and prevention
• Risk analysis and credit assessment
• Communication and customer support
• Collections and recoveries
• Compliance with legal obligations
• Business administration and operations
• Reporting and audit requirements
• Service improvement and analytics
• Managing customer relationships
• Security monitoring and system protection
• Regulatory and compliance obligations

4. CONSENT

By submitting an application, using our systems, uploading documents, signing digitally, or communicating with us, you consent to the collection, processing, storage, and use of your information in accordance with this Privacy Policy and applicable laws.

The Company may rely on:

• Electronic signatures
• Checkbox confirmations
• Digital acknowledgements
• Electronic communications
• Uploaded documents
• Online submissions

as valid forms of consent and authorization.

5. INFORMATION SHARING AND DISCLOSURE

The Company may share information where reasonably necessary with:

• Employers and payroll departments
• Banks and financial institutions
• Mobile money service providers
• Credit reference bureaus
• Debt collection agencies
• Legal advisors and auditors
• Technology service providers
• Cloud hosting providers
• Government institutions and regulators
• Law enforcement agencies
• Business partners involved in financing arrangements
• Insurance providers
• Third-party verification agents

The Company shall not sell personal information to unauthorized third parties.

6. CREDIT REFERENCE BUREAUS

The Applicant authorizes the Company to:

• Conduct credit checks
• Access CRB records
• Verify repayment history
• Share repayment and default information
• List adverse information where legally permitted

7. DIGITAL RECORDS AND DOCUMENT STORAGE

Documents, uploaded files, signatures, images, communications, application records, and electronic approvals may be stored electronically on secure systems, cloud infrastructure, servers, backups, or third-party hosting environments.

The Company may retain records for operational, legal, compliance, audit, regulatory, recovery, and business continuity purposes.

8. DATA SECURITY

The Company implements reasonable administrative, operational, and technical safeguards intended to protect information against:

• Unauthorized access
• Fraud and misuse
• Loss or destruction
• Unauthorized disclosure
• Cybersecurity threats
• Operational compromise

While reasonable safeguards are maintained, no electronic system, website, internet transmission, cloud service, or digital platform can guarantee absolute security.

9. COMMUNICATION CONSENT

The Applicant consents to communication through:

• Phone calls
• SMS
• Email
• WhatsApp
• Mobile messaging platforms
• Website notifications
• Physical correspondence
• Collections communication

Such communication may relate to:

• Applications
• Approvals
• Repayments
• Collections
• Marketing
• Service updates
• Compliance requirements
• Operational notices

10. COOKIES AND WEBSITE TECHNOLOGIES

Our website and digital systems may use cookies, analytics tools, tracking technologies, session tools, and related technologies for:

• Improving website functionality
• Security monitoring
• Fraud prevention
• User experience optimization
• Website analytics
• System administration

11. RETENTION OF INFORMATION

Information may be retained for as long as reasonably necessary for:

• Operational purposes
• Legal compliance
• Debt recovery
• Audit requirements
• Regulatory obligations
• Business continuity
• Dispute resolution
• Fraud prevention

12. APPLICANT RESPONSIBILITIES

The Applicant agrees:

• To provide accurate information
• Not to submit fraudulent documents
• To protect account and communication access
• To notify the Company of material changes
• To cooperate with verification processes

13. THIRD-PARTY SERVICES

The Company may use third-party platforms, software providers, cloud systems, communication services, payment processors, plugins, analytics tools, and technology infrastructure providers in the course of business operations.

14. LIMITATION OF LIABILITY

The Company shall not be liable for losses resulting from:

• Internet interruptions
• System downtime
• Third-party failures
• Cyberattacks beyond reasonable control
• Incorrect information supplied by Applicants
• Delays caused by external institutions
• Unauthorized access caused by Applicant negligence

15. POLICY UPDATES

The Company reserves the right to amend, revise, update, or replace this Privacy Policy at any time. Updated versions may be published on the Company website or related systems.

16. GOVERNING LAW

This Privacy Policy shall be governed by the laws of the Republic of Zambia.