Privacy Policy
KENELS BUREAU LTD
Effective Date: 01.01.2026

1. Introduction
   KENELS BUREAU LTD (“we,” “our,” or “the Company”) values your trust and is committed to
   protecting your personal information. This Privacy Policy explains how we collect, use, store,
   and safeguard your data when you interact with our lending services in Nairobi, Kenya.
   
2. Information We Collect
   We may collect the following categories of personal information:

• Identification Data: Full name, national ID/passport number, date of birth.
• Contact Information: Phone number, email address, postal and physical address.
• Financial Information: Bank account details, credit history, income records, loan
  repayment history.
• Employment Information: Employer details, job title, salary verification.
• Digital Data: IP address, device information, and usage data when accessing our website
  or digital platforms.

1. Legal Basis for Processing
   We process personal data in accordance with:

• The Data Protection Act, 2019 (Kenya).
• Applicable financial and lending regulations issued by the Central Bank of Kenya
  (CBK).
• Contractual obligations under loan agreements.
• Legitimate business interests, including fraud prevention and compliance.

1. How We Use Your Information
   Your personal data may be used for:

• Assessing loan applications and creditworthiness.
• Managing loan accounts and repayments.
• Communicating with you regarding services, updates, and compliance requirements.
• Preventing fraud, money laundering, and financial crime.
• Improving customer experience and service delivery.
• Meeting regulatory and legal obligations.

1. Data Sharing and Disclosure
   We may share your information with:

• Regulators: Central Bank of Kenya, Credit Reference Bureaus (CRBs).
• Service Providers: IT, payment processors, auditors, and legal advisors.
• Law Enforcement: When required by law or court order.
• Affiliates/Partners: For legitimate business purposes, subject to confidentiality
  agreements.
  We do not sell or rent customer data to third parties.

1. Data Retention

• Personal data is retained only as long as necessary to fulfill lending obligations, comply
  with legal requirements, and resolve disputes.
• Once retention periods expire, data is securely deleted or anonymized.

1. Data Security
   We implement strict technical and organizational measures to protect personal data, including:

• Encryption of sensitive information.
• Secure servers and restricted access.
• Regular audits and compliance checks.
• Staff training on data protection.

1. Your Rights
   Under Kenyan law, you have the right to:

• Access your personal data.
• Request correction of inaccurate information.
• Withdraw consent for non-essential processing.
• Request deletion of data, subject to legal and contractual obligations.
• Object to certain types of processing.
  Requests can be made in writing to our Data Protection Officer.

Contact Information
For questions, concerns, or to exercise your rights, contact:
Data Protection Officer
KENELS BUREAU LTD
Nairobi, Kenya
Email: info@kenelsbureau.co.ke

✅ 10. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in law, regulation, or
business practices. Updated versions will be published on our official website and made
available at our offices.nts may be checked through an automated spam detection service.