DigiFin Group (“DigiFin”, “we”) operates a Buy-Now-Pay-Later platform in Lesotho. This notice
summarises how we handle personal information. It is a plain-language overview for the dev preview
and not a substitute for the final legal notice issued at launch.
What we collect
Identity & contact: National ID number and image, full name, mobile number, address.
Affordability: employer, employment type, monthly income, and a credit-bureau score.
Transaction data: purchases, loan agreements, instalment schedules, repayments, and the
photo/e-signature captured at the point of sale.
How we use it
To assess eligibility and set a pre-approved spending limit.
To generate and execute loan agreements, settle merchants, and collect repayments.
To verify identity at point of sale and prevent fraud.
The three parties
The partner credit institution retains full KYC/AML responsibility and owns the
credit relationship. Merchants only initiate transactions and receive settlement.
DigiFin is the technology layer: we process transactions and store agreements
securely on the institution’s behalf.
How we protect it
Encrypted storage of identity documents, agreements, and signatures.
Role-based access control and full audit logging of every transaction.
Data minimisation and defined retention periods.
Your rights
You may request access to, or correction of, your personal information. We align to Lesotho’s
credit and data-protection regulations, applying South Africa’s POPIA as a best-practice benchmark.