Jamboo ("we," "our," or "us") is committed to safeguarding the privacy of your information. This Privacy Policy explains when and why we collect personal information about you, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.
By "your data," "your personal data," and "your information," we mean any personal data about you that you or third parties provide to us.
We may change this Policy from time to time, so please check this page regularly to ensure that you're happy with any changes.
1. Who Are We?
Jamboo Limited is a financial technology company registered as a private limited company in the United Kingdom (Company Registration Number 14541056). Our registered office address is 307 Euston Road, London, NW1 3AD.
Jamboo is the Data Controller for all personal data you provide to us when using our services, including money transfer services, airtime top-ups, and bill payment services.
2. How Do We Collect Your Personal Data?
We collect information from you in several ways:
Directly: When you register on our website or mobile application, use our services, or contact our customer support.
Automatically: When you use our website or mobile application, we collect data such as IP address, browser type, operating system, device information, access times, and pages viewed.
From Third Parties: We may receive information about you from third parties, such as fraud prevention agencies and identity verification service providers.
When we process your personal data, we rely on legal bases in accordance with data protection law and this privacy policy.
3. On What Legal Basis Do We Process Your Personal Data?
Contract: Processing your personal data is necessary to fulfill our contract with you or to take steps at your request before entering into a contract. If you fail to provide the personal data which we request, we cannot enter into a contract to provide services to you or may need to terminate any contract which we have entered into with you.
Legal/Regulatory Compliance: We process your personal data to comply with our legal or regulatory obligations, including anti-money laundering, counter-terrorism financing, and financial crime prevention requirements.
Legitimate Interests: We or a third party may have legitimate interests to process your personal data, such as:
- Analyzing and improving the security of our services
- Preventing fraud and financial crime
- Improving our services and user experience
- Creating anonymized data for analytical purposes
4. What Type of Personal Data Is Collected From You?
We collect the following information:
Personal Identification Information:
- Full name
- Physical address
- Email address
- Mobile phone number
- Date of birth
- Gender
- Login details (username)
- Identity verification documents (passport, driver's license, national ID card)
- Selfie photograph for identity verification
Financial Information:
- Transaction history (money transfers, airtime purchases, bill payments)
- Payment details
- Source of funds information
- Recipient details for money transfers
- Mobile numbers for airtime top-ups
- Bill payment account numbers
Usage Data:
- IP address
- Device details (type, model, operating system)
- Information on how you use our services
- App usage patterns
- Transaction patterns
5. How Is Your Personal Data Used?
We use your personal data to:
Account Management:
- Set up and manage your account
- Process your application and verify your identity
- Authenticate you when you access our services
- Maintain and administer your account
Service Delivery:
- Process money transfers to your chosen recipients
- Purchase airtime and mobile data on your behalf
- Process bill payments to service providers
- Send transaction confirmations and receipts
- Provide customer support
Security and Fraud Prevention:
- Monitor your account for fraud and suspicious activity
- Ensure a secure environment for your transactions
- Prevent money laundering and terrorist financing
- Comply with sanctions screening requirements
Service Improvement:
- Improve our services and user experience
- Create anonymized data for analytical purposes
- Conduct research and development
- Test and develop new features
Communications:
- Send you service-related notifications
- Provide customer support responses
- Send important account updates
- Inform you of changes to our terms or policies
Legal and Regulatory Compliance:
- Comply with anti-money laundering obligations
- Fulfill regulatory reporting requirements
- Respond to legal requests and court orders
- Prevent and detect financial crime
6. Who Do We Share Your Information With?
We may share your information with the following categories of recipients:
Service Providers: Third parties who perform services on our behalf, including:
- Payment processing providers
- Identity verification agencies
- Fraud prevention and transaction monitoring agencies
- Cloud hosting and data storage providers
- Customer support software providers
- IT infrastructure and security providers
- Software and platform developers
Recipients of Your Transfers: When you send money, we share necessary information (your name and reference message) with the recipient or their financial institution to complete the transaction.
Mobile Network Operators: When you purchase airtime, we share necessary information with the relevant mobile network operator to process the top-up.
Bill Payment Service Providers: When you pay bills, we share necessary information with the service provider to process your payment.
Regulatory Authorities: We may share your information with:
- Law enforcement agencies
- Financial regulators
- Tax authorities
- Courts and legal authorities
- Anti-money laundering agencies
We share information when required by law or to prevent financial crime, whether within or outside the United Kingdom.
Business Transfers: In connection with any merger, sale of company assets, acquisition, or corporate restructuring, provided that any recipient uses your information for the same purposes as originally supplied to us.
Professional Advisors: Lawyers, accountants, auditors, and other professional advisors who assist us in running our business.
When we use third-party service providers, we ensure there is a contract in place that requires them to keep your information secure and confidential and to process it only in accordance with our instructions.
7. Sending Personal Data Overseas
We may transfer your personal data to countries outside the United Kingdom for the purposes of delivering services to you, including:
- When you send money to recipients in other countries
- When our service providers are located outside the UK
- When processing international transactions
We will ensure that any such transfers comply with UK data protection law and that your personal information has an adequate level of protection.
How We Protect International Transfers:
- We transfer data to countries that the UK Government has deemed to provide adequate protection
- Where no adequacy decision exists, we use Standard Contractual Clauses approved by the UK Government or other appropriate safeguards
- We implement additional security measures for international data transfers
For more information about our international data transfers, please contact us at support@jamboo.app.
8. How Long Do We Store Your Personal Data?
We will store your personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.
Standard Retention Period:
- We typically retain your personal data for **six (6) years** after the end of our business relationship
- This allows us to comply with our obligations under applicable legislation, including anti-money laundering and anti-fraud regulations
Specific Retention Requirements:
- Transaction records: 6 years from the date of the transaction
- Identity verification documents: 6 years from account closure
- Communications: 6 years from the date of communication
- Marketing consents: Until you withdraw consent or for 3 years of inactivity
If any applicable legislation requires us to retain your data for a longer or shorter period of time, we shall retain it for that period. We will not retain your data for longer than is necessary.
9. Your Rights Regarding Your Personal Data
Under UK data protection law, you have the following rights regarding your personal data:
**Right of Access:** Request a copy of your personal data that we hold about you.
**Right to Rectification:** Request correction of any inaccurate or incomplete personal data.
**Right to Erasure:** Request deletion of your personal data where:
- It is no longer necessary for the purposes for which it was collected
- You withdraw consent (where processing is based on consent)
- You object to processing and there are no overriding legitimate grounds
- It has been unlawfully processed
- It must be erased to comply with a legal obligation
Please note that we may not be able to delete your data if we are required to retain it for legal or regulatory purposes.
**Right to Restriction of Processing:** Request that we restrict processing of your personal data in certain circumstances.
**Right to Object:** Object to the processing of your personal data where we are relying on legitimate interests as our legal basis, and you believe your rights override our legitimate interests.
**Right to Data Portability:** Request the transfer of your personal data to you or to another service provider in a structured, commonly used, and machine-readable format (where technically feasible).
**Right to Withdraw Consent:** Where we process your data based on consent, you have the right to withdraw that consent at any time.
How to Exercise Your Rights:
To exercise any of these rights, please contact us at support@jamboo.app. We will respond to your request within one month, though this may be extended by two additional months if the request is complex.
We may need to verify your identity before processing your request to ensure we are disclosing information only to the correct person.
10. How Is Your Information Protected?
We take the security of your personal data seriously and use a variety of security measures to protect it:
Physical and Technical Measures:
- Secure storage of data with restricted physical access
- Encryption of data at rest and in transit
- Secure backup and disaster recovery systems
- Multi-factor authentication for system access
- Regular security testing and vulnerability assessments
IT Security Controls:
- Identity and Access Management systems
- Firewalls and intrusion detection systems
- Virtual Private Networks (VPN) for secure remote access
- Advanced antivirus and anti-malware protection
- Advanced email threat protection
- Regular security patches and updates
Organizational Measures:
- Detailed information security and data protection policies
- Staff training on data protection and information security
- Background checks for employees with access to sensitive data
- Confidentiality agreements with staff and contractors
- Incident response and breach notification procedures
Compliance and Audits:
- Regular security audits and assessments
- Compliance with industry standards (e.g., PCI-DSS where applicable)
- Third-party security certifications
- Ongoing monitoring and improvement of security measures
Data Protection by Design:
- Privacy considerations built into all new systems and processes
- Data minimization – we only collect what we need
- Pseudonymization and anonymization where appropriate
- Regular data protection impact assessments
While we take all reasonable steps to ensure that your personal data will be kept secure from unauthorized access, we cannot guarantee absolute security during transmission over the internet. However, once we receive your information, we use appropriate technical and organizational measures to ensure its security on our systems.
11. Opt-Out Options
You can control certain aspects of how we process your personal data:
Marketing Communications:
- You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email
- You can adjust your communication preferences in your account settings
- Contact us at support@jamboo.app to opt out of all marketing communications
Service Communications:
Please note that you cannot opt out of service-related communications (such as transaction confirmations, security alerts, and important account updates) as these are necessary for the provision of our services.
Cookies and Tracking:
- You can adjust your browser settings to refuse cookies or alert you when cookies are being sent
- Please see our Cookie Policy for more information
Please note that opting out of certain processing activities may impact your ability to use some features of our services.
12. Automated Decision-Making and Profiling
We may use automated decision-making, including profiling, for the following purposes:
Fraud Prevention:
- Automated systems monitor transactions for suspicious patterns
- Machine learning models assess transaction risk
- Automated blocking of high-risk transactions
Identity Verification:
- Automated checks against identity verification databases
- Document verification using automated systems
You have the right to:
- Request human intervention in automated decisions
- Express your point of view regarding automated decisions
- Contest automated decisions
If you wish to exercise these rights, please contact us at support@jamboo.app.
13. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@jamboo.app, and we will take steps to delete such information.
14. Dispute Resolution and Complaints
If you have any concerns about our use of your personal information, please contact us at support@jamboo.app. We will investigate and attempt to resolve any complaints regarding the use of your personal data in accordance with this Privacy Policy.
Right to Lodge a Complaint:
If you are not satisfied with our response, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
You can also make a complaint online at: https://ico.org.uk/make-a-complaint/
15. Third-Party Websites and Services
Our website and mobile application may contain links to other websites and services. This Privacy Policy applies only to our website and services, so we encourage you to read the privacy policies of other websites you visit.
We cannot be responsible for the privacy practices of other sites, even if you access them using links from our website or app. We have no control over how third parties collect, use, or disclose your information.
16. Cookies Policy
We use cookies and similar tracking technologies on our website and mobile application. Please see our separate Cookie Policy (available at www.jamboo.app) for detailed information about:
- What cookies we use
- Why we use them
- How to control or delete cookies
- How cookies affect your privacy
17. Changes to Our Privacy Policy
We keep our Privacy Policy under regular review and will update it to reflect changes in our practices, technology, or legal requirements.
**How We Notify You of Changes:**
- We will post the updated policy on our website and in our mobile app
- For material changes, we will notify you via email or in-app notification
- The "Last Updated" date at the bottom of this policy will be revised
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
**This Privacy Policy was last updated on February 7, 2026.**
18. Your Consent
By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your personal data as described herein.
If you do not agree with this Privacy Policy, please do not use our services.
19. Contact Information
If you have any questions about this Privacy Policy or the personal information we hold about you, please contact us:
General Inquiries:
Email: support@jamboo.app
Website: www.jamboo.app
Data Protection Inquiries:
Email: privacy@jamboo.app
Postal Address:
Jamboo Limited
307 Euston Road
London, NW1 3AD
United Kingdom
Company Details:
Company Name: Jamboo Limited
Company Registration Number: 14541056
Registered in: England and Wales
---
Summary of Key Points
For your convenience, here is a summary of the key points of our Privacy Policy:
✓ Who we are: Jamboo Limited, a UK-registered fintech company providing money transfer, airtime top-up, and bill payment services
✓ What we collect: Personal identification information, financial transaction data, and usage information
✓ Why we collect it: To provide our services, prevent fraud, comply with legal obligations, and improve our services
✓ Who we share it with: Service providers, transaction recipients, mobile operators, bill payment providers, and regulatory authorities (when required)
✓ How we protect it: Using encryption, secure systems, access controls, staff training, and regular security audits
✓ How long we keep it: Generally 6 years after our relationship ends, to comply with legal requirements
✓ Your rights: Access, correction, deletion, restriction, objection, portability, and withdrawal of consent
✓ How to contact us: support@jamboo.app or privacy@jamboo.app
---
**Thank you for trusting Jamboo with your personal information. We are committed to protecting your privacy and handling your data responsibly.**
