Privacy Notice
How your information is used, what you can ask us to do, and where to get help.
Who this notice covers
Kingdom First Capital Ltd is responsible for the personal information it controls in its Malawi lending activities. This notice covers website visitors, people making enquiries, applicants, customers, guarantors and business contacts. Information about staff and recruitment should be covered by separate notices suited to those activities.
Your first online enquiry
Your initial enquiry stays in this page until you select Send enquiry to KFC. After you confirm your contact request and complete the security check, the website sends your name, preferred contact details and enquiry to KFC by email. This is not a complete loan application or a lending decision. The form does not create an enquiry record in the website database; KFC’s email and service providers may retain the message to handle it.
Google reCAPTCHA helps prevent automated submissions. It loads when you select Load security check, which connects your browser to Google. Google uses the _GRECAPTCHA cookie for security risk analysis. Read Google’s Privacy Policy and Terms of Service. You can call +265 880 759004 instead of using the online check.
Short-lived security counters use hashed identifiers to limit repeated attempts and duplicate messages. They are not enquiry records. Use the form for initial contact; do not send PINs, passwords, medical records, bank statements or identity documents.
Registered course accounts and saved progress
People registering for KFC Entrepreneur Business Training are also covered by this notice. KFC stores the registration name, email address, verification and approval status, and the worksheet answers, learning levels and milestones the learner chooses to save online. These records support course access, administration and agreed business support. Authorised KFC administrators can access account records for those purposes. Course registration does not subscribe a learner to marketing and does not determine eligibility for a loan.
Email verification links expire after 24 hours and can be used once. Registration and course access emails are sent through KFC’s website email service. Google reCAPTCHA is used when a learner loads the registration security check. Short-lived counters use hashed identifiers to limit repeated attempts. WordPress authentication cookies maintain a signed-in course session.
Saved course work is retained with the account until it is removed through an authorised account or privacy process; this feature does not automatically delete dormant course accounts. Learners can contact info@kingdomfirstcp.com to request access, correction or deletion of their course information. An erasure request can remove saved progress and suspend course access; the WordPress account is managed separately. Do not enter identity numbers, passwords, bank account details or private customer information into course worksheets. The separate self-assessment continues to operate locally unless the participant chooses to share its results.
Information relevant to lending
Depending on the stage and product, KFC may need contact details, identity verification, employment or business information, income, expenditure, existing commitments, guarantees and repayment records. Third-party information should be requested only where relevant and lawfully obtained. An ordinary service enquiry should not require an entire loan file.
Purposes and lawful grounds
Information may be needed to respond to your request, assess or administer a loan agreement, meet legal duties, prevent misuse or manage a dispute. Each use must have an appropriate lawful basis. Where consent is needed, the request must be specific and separate from unrelated choices. A marketing choice should not be hidden inside a loan application.
Sharing and transfers
Information may need to be shared with approved service providers, professional advisers, lawful credit-information recipients or public authorities. Sharing must be relevant to its purpose and subject to appropriate controls. You can ask which categories of recipients may receive your information and whether it is processed outside Malawi. Overseas processing requires an assessment of the applicable safeguards.
Retention and your choices
The approved retention schedule should explain how long each category is kept and why. Records subject to a legal hold must not be destroyed early. You can ask about access, correction, deletion or other rights available under Malawi law, and withdraw consent for processing based on consent. Some requests have lawful exceptions; KFC should explain any refusal and the available review route.
Requesting help
For a privacy question or request, email info@kingdomfirstcp.com with the subject “Privacy request”, or contact KFC by telephone or post using the Contact page. Explain what you need without attaching unnecessary sensitive information. Ask how to provide any identity evidence safely. You may also raise a concern with Malawi’s Data Protection Authority through www.dpa.mw.