How your application is handled

MARU Credit is a specialized Tier IV Financial Institution, licensed and regulated by the Uganda Micro-Finance Regulatory Authority. We are the data controller for the information described in this notice.

We handle personal data in line with the Data Protection and Privacy Act, 2019, and the guidance of Uganda's Personal Data Protection Office (PDPO).

• Your first name, last name, gender, email address and phone number
• Your date of birth, which we use to confirm you meet the minimum age to work with us
• Your National Identification Number (NIN), to verify your identity and prevent duplicate applications
• Your CV and any supporting documents you combine into it
• Your answers to the questions on the application form for the specific role, which vary by role and can include your years of experience, education, expected salary and other role-specific details
• The role you applied for and the date you applied
• Notes and assessments recorded by our hiring team as your application progresses

We do not ask for your religion, marital status or political affiliation as part of an application, and we don't ask for a fixed home district or residence on the form. Please don't include information of that kind in your CV or answers either.

• To assess your suitability for the role you applied for
• To confirm you meet the minimum age requirement
• To contact you about your application, including to confirm we received it and to tell you the outcome
• To keep a record of our hiring decisions, as good practice and to meet our obligations as a regulated business

We collect it on the basis of the consent you give when you submit your application (version maru-careers-consent-2026-09-27-v3), and our legitimate interest in filling the role. You can withdraw your consent at any time — see Your rights below.

Your application is visible only to MARU Credit staff involved in hiring for the role you applied to. Access is limited by role: not everyone who can sign in to our recruitment system can open a CV or see an applicant's contact details.

We do not share your application with anyone outside MARU Credit, we do not sell it, and we do not use it for marketing.

Application records are stored in our database, hosted by Neon. Your CV is held separately in private file storage, provided by Cloudflare R2, and is never publicly accessible — it can only be opened by an authorised member of the hiring team. Confirmation emails are sent through Resend. All three process your data only on our instructions and under contractual data-protection commitments.

Your CV is held in private storage and is never publicly accessible. It can only be opened by an authorised member of the hiring team, through a link that expires after a short period. Data is encrypted in transit and at rest.

If you arrive at our careers pages through a tracked link — for example, from a job board or a social post — we set a first-party cookie recording which link brought you here and a random session identifier, so we can tell our hiring team which source actually produces candidates. This is the same first-party tracker used on the rest of marucredit.com; see the main privacy notice for the full detail. If you go on to submit an application, that session identifier is stored against it.

We keep your application and your CV until you ask us to delete them, or until we decide to remove them ourselves. We don't delete anything automatically on a schedule.

If you join MARU Credit, your application becomes part of your employment record.

You can ask us to delete your application at any time by writing to hr@marucredit.com.

We do not make hiring decisions by automated means. Every application is read by a person.

Under the Data Protection and Privacy Act you have the right to:

• Ask what personal information we hold about you, and get a copy
• Ask us to correct anything that is wrong or incomplete
• Ask us to delete your application
• Withdraw your consent, at which point we stop considering your application and delete it

Write to us using the contact details below and we will respond. If you are not satisfied with how we have handled your request, you may complain to Uganda's Personal Data Protection Office (PDPO).

MARU Credit never charges candidates a fee at any stage of recruitment. We will never ask you to make a payment, and we will never ask for your bank details, card details or passwords as part of an application. If you receive a message claiming to be from MARU Credit and asking for money, it is not from us — please tell us using the contact details below.

For questions about this notice, or about how we handle your information, write to hr@marucredit.com or use the public contact page.