1.0 Scope of this Policy

The policy applies but is not limited to:

• Customers and prospective customers;
• Website visitors;
• Mobile banking users;
• Loan applicants;
• Employees and job applicants;
• Agents and business partners;
• Vendors and service providers;

2.0 Data We Collect

We may collect the data/ information from you personally or from authorised third parties. The kinds of data we collect include:

2.1 Personal Identification Information

We collect information about you through various website visits, applications, and interactions with our services, including your full name, date of birth, gender, nationality, residential and postal addresses, telephone numbers, email addresses, National Identification Numbers, passport information, and Tax Identification Numbers (where applicable), spending lifestyle, etc.

2.2 Financial Information

We also collect financial information, including your bank account details, transaction records, loan application information, credit history, income and employment details, savings and investment information, and financial references.

2.3 Biometric Information

Where applicable and as permitted by law, we may collect biometric information, including photographs, signatures, fingerprints, or facial recognition data, for customer verification.

2.4 Technical Information

When you access our website or digital channels, we may collect technical information, including your IP address, device information, browser type, operating system, location data, login information, and usage and analytics data.

3.0 CCTV and Communication Records

For security and service quality purposes, we may collect CCTV and communication records, including CCTV footage from our branches as well as Head Office facilities, telephone recordings, email communications, and customer service interactions.

4.0 How We Collect Information

The mediums through which we collect information include:

• Account opening forms
• Loan applications
• Online registrations from our website
• Mobile banking platforms
• Customer service interactions
• Branch visits
• ATM and agent banking transactions
• Publicly available sources
• Credit reference bureaus
• Regulatory authorities
• Third-party service providers

5.0 Legal Basis for Collecting and Processing Data

The legal basis upon which we collect and process personal and other data includes:

1. The necessity of the data to the provision of banking services;
2. The necessity of the data to the performance of a contract;
3. Legal requirement to process data; and
4. Prevention of fraud, security and risk management purposes.

6.0 Rules of Compliance with Data Protection Laws

The following rules shall be adhered to in the collection, processing and usage of personal data to ensure compliance with data protection laws:

• 6.1 Data Collection Mechanism: Personal data will be obtained fairly, lawfully and with the consent of the data owner;
• 6.2 Purpose: Personal data will be obtained only for one or more specified and lawful purposes and will not be further used in any manner incompatible with the specified purpose(s);
• 6.3 Adequacy of Data: Personal data will be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed;
• 6.4 Duration of Data Retention: Personal data processed for any lawful purpose or purposes will not be kept for longer than is necessary for that purpose or those purposes;
• 6.5 Protection from unauthorised sources: Appropriate technical and organisational measures will be taken against unauthorised or unlawful processing of personal data and the protection of children. Collected personal data will be rigorously protected from unauthorised access by any Parties.

7.0 Data Usage

• 7.1 Data collected shall be used for banking operations, including opening and managing accounts, processing transactions, facilitating deposits and withdrawals, providing digital banking services, and administering loans and credit facilities.
• 7.2 Data collected shall also be used for customer relationship management, including verifying your identity, responding to inquiries, managing customer relationships, and improving your overall customer experience.
• 7.3 To comply with legal and regulatory obligations, data collected shall be used to conduct Know Your Customer (KYC) procedures, comply with Anti-Money Laundering (AML) requirements, prevent and detect fraud, report to regulatory authorities, and perform risk assessments and monitoring.
• 7.4 We use your personal information to support business improvement by improving our products and services, conducting research and analytics, enhancing our digital platforms, and developing new financial products.
• 7.5 With your consent and where permitted by law, we may use your personal information to inform you about new products, promotions, financial education programs, and service updates. You may opt out of receiving marketing communications at any time.

8.0 Sharing of Personal Information

Personal data collected shall be shared in the following manner when it becomes necessary:

• 8.1 Personal information shall be shared with regulatory authorities, including the Central Bank of Liberia, the Financial Intelligence Unit, tax authorities, courts, and law enforcement agencies, where required by law or regulation.
• 8.2 We may also share your personal information with service providers, including payment processors, IT service providers, cloud-hosting providers, security vendors, and credit reference bureaus, to support the delivery of our services.
• 8.3 We may disclose your personal information to professional advisers, including auditors, lawyers, and consultants, as well as to business partners where necessary to provide financial services.

All third parties that receive your personal information are required to maintain appropriate confidentiality and implement adequate security safeguards.

9.0 Cookies and Website Technologies

Our website may use cookies and similar technologies to improve website functionality, remember user preferences, analyse website traffic, enhance user experience and strengthen security. You may modify your browser settings to reject cookies; however, some website functions may not operate properly.

10.0 International Data Transfers

Where operationally necessary, personal information may be stored or processed outside Liberia.

When transferring personal data internationally, Diaconia MDI will implement appropriate safeguards to ensure adequate protection consistent with applicable data protection laws.

11.0 Your Rights

Subject to applicable law, data owners will have the right to:

Requests may be submitted using the contact information provided below.

12.0   Third-Party Websites

Our website may contain links to external websites operated by third parties.

Diaconia MDI is not responsible for the privacy practices, security, or content of third-party websites. Users should review the privacy policies of those websites before providing personal information.

13.0   Marketing Communications

We may send service notifications and promotional communications through:

• SMS
• Email
• Telephone calls
• Mobile applications

You may unsubscribe from promotional messages at any time, although essential service notifications may still be sent.

14.0   Updates to this Privacy Policy

Diaconia Microfinance may update this Privacy Policy periodically to reflect:

• Changes in law
• Regulatory requirements
• Technological developments
• Operational changes

Updated versions will be published on our website and become effective immediately upon publication unless otherwise stated.

15.0   Contact Us

For questions, requests, or complaints regarding this Privacy Policy or the processing of personal information, please contact:

Data Protection Officer

Diaconia Microfinance Deposit-Taking Institution (Diaconia MDI)

Website: https://diaconiamdi.com

Email: info@diaconiamdi.com

Telephone: +231881161213

Monrovia, Liberia

Last Updated: 16/08/2026