CUSTOMER CONSENT FORM

EMP0WERBANK LIMITED

To provide you our esteemed client with our financial products and services, we need to collect, record, use, share and store personal and financial information about you ("Personally Identifiable Information"). Your information may include Personal Data and Sensitive Personal Data as defined in the Zimbabwe's Cyber and Data Protection Act of 2021, the Consumer Protection Act, Microfinance Act, Reserve Bank of Zimbabwe and any other law or regulation governing Data Protection in Zimbabwe. Our use of such information is governed by all applicable laws and regulations of Zimbabwe.

Client's Use of Data

I, [Client's Full Name], hereby acknowledge that I have read, understood, and agree to the terms stated in this Consent Form. I give my consent to Empowerbank Limited ("the Company"), a financial institution registered in Zimbabwe, for the collection, use, and processing of my personal data as described below:

1. Personal Data Collection and Purpose:

   a. EmpowerBank Limited may collect and process personal data provided by me while conducting business with the Company. This data may include but is not limited to:

   • Full name
   • Contact details (address, contact number, email)
   • Date of birth
   • National identification number or passport number
   • Financial information (income, sources of income, expenditure)
   • Employment details (occupation, employer, position)
   • Credit history
   • Other relevant information necessary for the provision of financial services.

   b. The purpose for collecting, using, and processing the personal data is to:

   • Assess my eligibility for financial products and services.
   • Process loan applications, credit checks, and related financial transactions.
   • Verify my identity and prevent fraud.
   • Provide customer support and services.
   • Analyze and improve the Company's products and services.
   • Comply with legal and regulatory requirements.
2. Data Sharing and Disclosure:

   a. EmpowerBank Limited may share my personal data with third parties as required to fulfil the purposes mentioned above or as mandated by law. These third parties may include:

   • Credit reference agencies
   • Regulatory bodies, governmental or judicial authorities
   • Service providers engaged by the Company (e.g., IT service providers, debt collection agencies)
   • Financial institutions involved in transactions or related services.

   b. The sharing of my personal data will be done in accordance with applicable laws and regulations, ensuring appropriate safeguards for the protection of my data.

3. Data Retention:

   a. EmpowerBank Limited will retain my personal data for as long as necessary to fulfil the purposes mentioned above or as required by applicable laws and regulations.

   b. Upon the expiration of the retention period, the Company will securely dispose of or anonymize my personal data unless further retention is necessary for legal or regulatory obligations.

4. Data Security:

   a. EmpowerBank Limited will implement reasonable technical and organizational measures to ensure the security, integrity, and confidentiality of my personal data.

   b. I acknowledge that the Company cannot guarantee absolute security of data transmitted over the internet or stored in electronic systems, and I accept any associated risks.

5. Rights of Access, Correction, and Erasure:

   a. I have the right to request access to or correction of my personal data held by Empowerbank Limited. I understand that the Company may require reasonable verification of my identity before providing access or making corrections.

   b. I have the right to request the deletion of my personal data held by the Company, subject to any legal or regulatory obligations that mandate the retention of certain data.

By signing below, I acknowledge that I have voluntarily provided my personal data to Empowerbank Limited and consent to the collection, use, and processing of my personal data as described in this Consent Form.