Privacy & Cookies Notice

Website Privacy and Cookies Notice

 

1. Who we are

Fincredit SEZ Limited (“FinCredit®”, “we”) is a non-deposit taking credit provider regulated by the Central Bank of Kenya (Licence No. CBK/DCP/2025/167) with operations in Kenya, Uganda and Liberia. We are registered with the Office of the Data Protection Commissioner (ODPC), registration no. 347-435A-E16A, and we decide how and why your personal data is used (we are the “data controller”). More about us is on our About Us page (https://fincredit.co.ke/about-us/).

2. What this notice covers

This notice covers personal data you give us through this website and the cookies and similar technologies the website uses. If you apply for or take a loan, we also ask you to sign a separate Credit Processing Consent, and our general Privacy Notice explains how we handle loan data. This notice replaces our former Cookies Policy.

3. What we collect, why, and how long we keep it

Where	What we collect	Why	Our legal basis	How long we keep it
Contact-us form (https://fincredit.co.ke/contact-us/)	First name, last name, e-mail, phone number, your message	To answer your message and follow up on it	Our legitimate interest in answering enquiries	12 months after our last contact with you
Optional offers (tick-box on our forms)	Same details	To send you information about FinCredit products. Only if you tick the box	Your consent	Until you opt out, or 24 months without contact
Online loan application pages: asset finance, SME, logbook, employee loans, insurance premium financing, AAR medical insurance premium financing	Contact details, identity and loan details you enter	To receive your application, contact you about it and begin the assessment	Steps you request before a loan contract. You must also accept our Credit Processing Consent before you submit	Declined or withdrawn applications: 12 months. If you take a loan: 10 years after it ends, or longer if the law requires
Cookies and visit statistics (section 7)	A random visitor ID, pages viewed, time on site, device and browser type, approximate location from your IP address, and how you reached the site	To count visits and see which pages are useful, so we can improve the website	Your consent. We use these only if you accept them in the cookie banner	Cookies: up to 13 months. Statistics held by Google: [14 months, to be set in the Google Analytics property]
Your cookie choice	A record of whether you accepted or declined optional cookies	To respect your choice and not ask you again on every visit	Necessary for the site to work as you asked	12 months

Giving us this information is voluntary, but we cannot answer an enquiry or assess a loan application without the details the form asks for.

4. Who can see your data

Only FinCredit® staff who need it to deal with your message or application. Enquiries and applications are received in our credit mailbox, which is restricted to those staff. We also use service providers that host this website and run our email, who act only on our instructions. If you accept statistics cookies, Google (Google Analytics) receives the visit data described in section 3. For loan applications, we share data with licensed credit reference bureaus, identity and mobilenetwork providers, auditors and regulators where the law requires, as set out in our Privacy Notice and the Credit Processing Consent. We do not sell your data.

5. Where your data is stored

In Germany. Visit statistics are processed by Google, which may store them outside Kenya, and only if you accept statistics cookies. Where we send data outside Kenya, we do so only with the safeguards the law requires.

6. How we protect it

This website uses an SSL/TLS certificate to encrypt the information you send us. Access to our credit mailbox is limited to authorised staff. We keep data only for the periods above and then delete or anonymise it.

7. Cookies

A cookie is a small text file that a website stores on your device. It holds an identifier or a setting, not your name, address or passwords. Some cookies are needed for the site to work, so we set them without asking. Others help us count visits, so we set them only if you accept them in the cookie banner. We do not use advertising cookies and we do not track you across other websites.

Cookie	Set by	What it does	Lasts	Your choice
cmplz_banner-status, cmplz_consented_services, cmplz_functional, cmplz_preferences, cmplz_statistics, cmplz_marketing, cmplz_policy_id	FinCredit®, through our cookie-banner tool (first party)	Remember whether you accepted or declined cookies	12 months	Necessary: always on
_ga, _ga_Z7H6911NMR	Google Analytics (Google)	Counts visits and pages viewed using a random ID, so we can see which pages are useful	About 13 months	Statistics: only if you accept
burst_uid	FinCredit, through our visit-statistics tool, Burst Statistics (first party)	Recognises a returning browser so a repeat visit is counted once	30 days	Statistics: only if you accept

How to change your mind. Use “Manage consent” at the bottom of any page to accept or decline statistics cookies at any time. Withdrawing consent is as easy as giving it, and the site works the same without them. You can also block or delete cookies in your browser:

1). Chrome (https://support.google.com/accounts/answer/32050),

2). Microsoft Edge (https://support.microsoft.com/microsoft–edge),

3).   Firefox (https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored), and

4).   Safari (https://support.apple.com/guide/safari/manage–cookies–and–website–data–sfri11471/mac).

You can stop Google Analytics on all sites with Google’s browser add-on (https://tools.google.com/dlpage/gaoptout). If you block necessary cookies, the cookie banner will ask you again on each visit.

8. Your rights

You may ask us to give you a copy of your data, correct it, delete it, restrict or stop using it, send it to another provider, or stop marketing messages. You may withdraw any consent at any time without giving a reason. We respond to access requests within 7 days, to correction, deletion, restriction and objection requests within 14 days, and to transfer requests within 30 days. There is no charge. We may keep data that the law requires us to keep, such as loan and antimoney-laundering records.

To make a request, e-mail our Data Protection Officer or use the request forms at any branch. We may ask you to confirm your identity first.

9. Questions and complaints

Data Protection Officer: Denis Njoroge Githuka, denis.njoroge@fincredit.co.ke, 0709 478300. Complaints: complaintsresolution@fincredit.co.ke, 0709 000390 – 0709 000399, or P.O. Box 101267 – 00101 Nairobi or WhatsApp: 0709000399. Office: Two Rivers Mall, North Tower, 2nd Floor, Limuru Road, Nairobi. Making a complaint is free and will not affect how we treat you. If we do not resolve it within 30 days, or you are not satisfied with our response, you may complain to the Central Bank of Kenya (Haile Selassie Avenue, Nairobi; +254 20 286 0000; comms@centralbank.go.ke). Complaints about your personal data may be made to the Office of the Data Protection Commissioner (www.odpc.go.ke), complaints about unfair or misleading trade practices to the Competition Authority of Kenya, and you may also seek remedies in court.

10. Changes

We will update this page when our practices change and show the date at the top.