How we collect, use, store, protect, and disclose personal information when you use the FinEra Inclusive Credit Marketplace.
Shield Point Capital (Private) Limited (“Shield Point Capital”, “we”, “us”, or “our”) is committed to protecting the privacy and security of personal information entrusted to us by users of the FinEra Inclusive Credit Marketplace (“FinEra”, “the Platform”, or “the Service”).
FinEra is a digital financial technology platform that connects borrowers seeking financing opportunities with licensed financial institutions and lenders. The Platform enables users to submit financing requests, communicate with lenders, exchange relevant documents, and access suitable financing opportunities.
This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when individuals use our Platform and related services.
By accessing or using FinEra, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.
This Privacy Policy applies to:
To provide, secure, and improve our services, Shield Point Capital may collect different categories of personal information depending on how you use FinEra.
Borrowers may provide the following information:
Financial institutions and lenders may provide:
When users access FinEra, we may automatically collect technical information, including:
This information helps us maintain platform security, improve user experience, detect fraud, and ensure reliable service delivery.
Shield Point Capital collects and processes personal information to operate, maintain, secure, and improve the FinEra Inclusive Credit Marketplace. We only process personal information for legitimate business purposes and in accordance with applicable data protection laws.
We collect and use personal information for the following purposes:
To verify the identity of borrowers, lenders, and authorised users, prevent impersonation, and ensure that users accessing the Platform are properly identified.
To detect, prevent, investigate, and respond to fraudulent activities, unauthorised access, misuse of the Platform, and other security risks.
To analyse borrower financing requests, match borrowers with suitable lenders, and enable financial institutions to evaluate potential financing opportunities.
To facilitate secure communication between borrowers and lenders, including messaging, sharing of relevant documents, and updates relating to financing applications.
To comply with applicable laws, regulatory requirements, reporting obligations, and requests from authorised regulatory authorities.
To respond to user enquiries, provide technical assistance, resolve disputes, and improve the overall user experience.
To analyse platform usage, monitor performance, identify areas for improvement, and develop better services and features.
To protect user information, maintain platform integrity, monitor suspicious activities, enforce security controls, and safeguard against cyber threats.
Shield Point Capital respects the privacy of users and does not sell, rent, or trade personal information to advertisers or unrelated third parties.
We may share personal information only where necessary for providing FinEra services, complying with legal obligations, protecting users, or maintaining the security and functionality of the Platform.
Personal information may be shared with the following categories of recipients:
Information may be shared with licensed banks, microfinance institutions, and other authorised financial service providers selected or matched through FinEra for the purpose of evaluating financing requests and providing loan opportunities.
We may share relevant information with authorised identity verification providers to verify user identities, prevent fraud, and support compliance requirements.
Personal information may be disclosed to regulatory bodies and government authorities where required by law, regulation, court order, or official request.
We may disclose personal information to law enforcement authorities where necessary to investigate fraud, illegal activities, security incidents, or where disclosure is legally required.
We may share information with authorised professional advisers, including legal, accounting, auditing, and compliance advisers, where necessary for business operations and regulatory compliance.
We may engage trusted third-party service providers that assist us with technology infrastructure, cloud hosting, cybersecurity, communications, analytics, and other operational services. Such providers are required to process information only for authorised purposes and maintain appropriate security safeguards.
Shield Point Capital does not sell users’ personal information to advertisers or third parties for marketing purposes unrelated to the operation of FinEra.
Shield Point Capital retains personal information only for as long as necessary to provide FinEra services, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and maintain appropriate business records.
The period for which personal information is retained depends on factors including:
Where personal information is no longer required for legitimate business or legal purposes, Shield Point Capital will securely delete, anonymise, or dispose of such information in accordance with applicable data protection requirements.
Certain information may be retained for longer periods where required by law, regulatory authorities, financial compliance obligations, or where necessary to protect the rights and interests of Shield Point Capital, users, and authorised partners.
Users may request information about the retention of their personal data or request deletion where permitted by applicable laws. However, deletion requests may be limited where retention is required for legal, regulatory, security, or legitimate business purposes.
Shield Point Capital is committed to protecting personal information collected through the FinEra Inclusive Credit Marketplace. We implement appropriate technical and organisational security measures designed to prevent unauthorised access, disclosure, alteration, loss, or misuse of personal information.
Our security measures include:
We use encryption and other security measures to protect sensitive information during transmission and storage, including personal, financial, and identity-related information.
User information is stored and processed using secure systems and infrastructure designed to maintain confidentiality, integrity, and availability of data.
Access to personal information is restricted to authorised individuals who require such information to perform their responsibilities.
We apply role-based access controls to ensure that employees, administrators, and authorised users can only access information relevant to their roles.
We maintain system logs and monitoring mechanisms to track access, detect suspicious activities, support investigations, and improve platform security.
We regularly review and improve our security practices to address emerging risks, vulnerabilities, and changes in technology.
While we take reasonable measures to protect personal information, no digital system can guarantee complete security.
Users are encouraged to protect their account credentials and notify us of any suspected unauthorised access.
Shield Point Capital respects the rights of individuals regarding their personal information and provides users with control over how their information is processed in accordance with applicable data protection laws.
Users may exercise the following rights:
Users have the right to request access to the personal information we hold about them and receive information about how their data is being processed.
Users have the right to request correction or updating of inaccurate, incomplete, or outdated personal information.
Users may request deletion of their personal information where it is no longer necessary for the purpose it was collected. However, deletion requests may be limited where we are required to retain information for legal, regulatory, security, financial, or legitimate business purposes.
Where processing is based on consent, users have the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before consent was withdrawn.
Users may request a copy of their personal information held by Shield Point Capital, subject to applicable verification and legal requirements.
Users have the right to raise concerns or complaints regarding the processing of their personal information. Users may contact Shield Point Capital directly, and where applicable, may lodge complaints with the relevant data protection authority.
To protect user privacy and security, we may require identity verification before processing requests relating to personal information.
FinEra uses cookies and similar technologies to improve platform functionality, enhance security, analyse usage, and provide a better user experience.
Cookies are small data files stored on a user’s device when they access a website or digital platform. They help us recognise users, maintain secure sessions, and understand how the Platform is used.
We may use the following types of cookies:
These cookies are essential for the operation of FinEra. They enable core functions such as user authentication, account access, secure sessions, and platform navigation.
These cookies help protect user accounts and the Platform by supporting security measures such as fraud detection, authentication verification, and prevention of unauthorised access.
These cookies help us understand how users interact with FinEra, monitor platform performance, identify improvements, and enhance user experience.
Users may manage or disable cookies through their browser settings. However, disabling certain cookies may affect the functionality and availability of some Platform features.
A fuller explanation of how we use cookies is available on our Cookies page.
Shield Point Capital primarily processes and stores personal information within Zimbabwe. However, in certain circumstances, personal information may be transferred, stored, or processed outside Zimbabwe where necessary for the operation of FinEra.
Such transfers may occur when we use trusted third-party service providers, technology infrastructure providers, cloud hosting services, security providers, or other authorised partners located in other jurisdictions.
Where personal information is transferred outside Zimbabwe, Shield Point Capital will ensure that such transfers are conducted only where legally permitted and that appropriate safeguards are implemented to protect personal information.
We take reasonable steps to ensure that third parties processing personal information maintain appropriate security and confidentiality standards consistent with applicable data protection requirements.
FinEra processes personal information in accordance with applicable Zimbabwean data protection laws, including the Cyber and Data Protection Act [Chapter 12:07], together with any applicable regulations and lawful requirements.
Where FinEra expands into other jurisdictions, it will comply with the applicable privacy and data protection laws of those countries.
For questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact:
FinEra Inclusive Credit Marketplace
business@shieldpointcapital.co.zw
+263 776 492 182
Bulawayo, Zimbabwe
8AM – 5PM (Mon – Sun)
