Last Updated: June 2026

1. Introduction

Fincorp Credit Limited (“Fincorp”, “we”, “our”, or “us”) is committed to protecting your privacy and handling your personal data responsibly, transparently, and in accordance with applicable laws.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you:

• Visit our website;
• Apply for a loan, insurance premium financing, trade finance, Islamic finance, or any other financial product;
• Contact us through our branches, website, telephone, email, or social media channels;
• Use any of our services.

This Policy is intended to comply with the Kenya Data Protection Act, 2019 and other applicable laws and regulations.

2. Who We Are

Fincorp Credit Limited is a Kenyan financial services provider offering:

• Personal loans
• Salary loans (Mshahara Loans)
• SME financing
• Insurance premium financing
• Trade finance solutions
• Islamic finance solutions
• Related financial services

For privacy-related inquiries, contact us at:
Email: customercare@fincorpcredit.co.ke
Telephone: +254 706 355 355

3. Personal Data We Collect

We may collect the following categories of personal data:

Identification Information

• Full name
• National ID or passport number
• KRA PIN
• Date of birth
• Gender
• Passport photographs

Contact Information

• Mobile phone numbers
• Email addresses
• Physical and postal addresses
• Next of kin information

Employment and Business Information

• Employer details
• Employment status
• Salary information
• Business registration information
• Business financial records

Financial Information

• Bank account details
• Bank statements
• Mobile money transaction information
• Loan repayment history
• Credit information
• Financial references

Credit Assessment Information

• Credit Reference Bureau (CRB) records
• Affordability assessments
• Credit scores and risk assessments

Technical Information

When you visit our website, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Website usage data
• Cookies and analytics data

Communications

• Customer service interactions
• Email correspondence
• Call recordings where permitted by law
• Complaints and feedback

4. How We Collect Your Data

We collect personal data:

• Directly from you during applications and inquiries;
• Through our website forms;
• Through branch visits;
• Through telephone and email communications;
• From employers with your authorization;
• From Credit Reference Bureaus where permitted by law;
• From public records and government agencies where legally permitted;
• From business partners and service providers.

5. Why We Process Your Data

We process personal data for the following purposes:

Service Delivery

• Processing loan applications
• Processing insurance premium financing applications
• Processing trade finance applications
• Processing Islamic finance applications
• Managing customer accounts

Credit Assessment

• Verifying identity
• Conducting affordability assessments
• Evaluating creditworthiness
• Preventing fraud

Regulatory Compliance

• Know Your Customer (KYC) requirements
• Anti-Money Laundering (AML) obligations
• Counter-Terrorism Financing (CTF) requirements
• Reporting obligations under applicable laws

Customer Service

• Responding to inquiries
• Providing support
• Managing complaints
• Communicating account information

Business Operations

• Internal administration
• Risk management
• Auditing
• Service improvement
• Analytics and reporting

Marketing

Subject to applicable laws and your communication preferences, we may use your personal data to:

• Send promotional SMS messages;
• Send marketing emails;
• Deliver personalized offers and product recommendations;
• Notify you of new financial products and services;
• Conduct customer surveys and market research;
• Communicate through USSD campaigns and digital channels;
• Display relevant advertisements and promotional content.

You may opt out of marketing communications at any time by following the unsubscribe instructions provided in the communication or by contacting us directly.

6. Legal Basis for Processing

We process your personal data based on:

• Your consent;
• Performance of a contract;
• Compliance with legal obligations;
• Protection of legitimate interests;
• Protection of vital interests where applicable.

7. Sharing of Personal Data

We may share personal data with:

Regulatory and Government Authorities

Where required by law, including:

• Courts and tribunals;
• Law enforcement agencies;
• Government regulators;
• Tax authorities.

Credit Reference Bureaus

Where permitted by law and applicable regulations.

Service Providers

We may engage third parties for:

• IT services;
• Cloud hosting;
• Customer communication services;
• Payment processing;
• Professional advisory services.

These providers are required to protect your data and use it only for authorized purposes.

Business Partners

Where necessary to provide financial products and services.

We do not sell personal data to third parties.

8. Cookies, Analytics and Digital Channels

Our website and digital platforms may use cookies, analytics tools, live chat software, and similar technologies to:

• Maintain website functionality;
• Improve user experience;
• Analyze website performance;
• Understand customer interactions;
• Provide customer support through live chat services;
• Monitor and improve service delivery;
• Enhance security and fraud prevention;
• Support marketing and advertising activities.

Live Chat Services

When you use our live chat services, including Tawk.to or similar platforms, we may collect:

• Your name;
• Email address;
• Phone number;
• IP address;
• Device information;
• Chat conversation history;
• Website pages visited before and during the chat session.

USSD Channels

When you access our services through USSD channels, we may collect:

• Mobile phone number;
• USSD session information;
• Transaction and application details;
• Service requests and responses;
• Device and network information where available.

Additional Digital Channels

We may process your personal data when you interact with us through our digital communication channels, including:

• Website contact forms;
• Live chat services such as Tawk.to or similar customer support platforms;
• USSD services and applications;
• SMS communications;
• WhatsApp and social media messaging channels;
• Email communications.

This information may include your name, phone number, email address, chat transcripts, inquiry details, device information, and any information you voluntarily provide during such interactions.

We use this information to:

• Respond to inquiries and service requests;
• Provide customer support;
• Process applications initiated through digital channels;
• Improve customer experience and service quality;
• Monitor service performance;
• Maintain records of customer interactions;
• Comply with legal and regulatory obligations.

We may use third-party analytics and communication service providers to help us understand website usage, customer behavior, and service performance. Such providers are required to protect personal data in accordance with applicable laws and contractual obligations.

You may control cookies through your browser settings; however, disabling certain cookies may affect website functionality.

9. Data Retention

We retain personal data only for as long as necessary to:

• Provide services;
• Comply with legal obligations;
• Resolve disputes;
• Enforce agreements;
• Meet regulatory requirements.

When retention is no longer necessary, personal data is securely deleted or anonymized.

10. Data Security

We implement reasonable technical and organizational safeguards to protect personal data, including:

• Access controls;
• Encryption where appropriate;
• Secure storage systems;
• Staff confidentiality obligations;
• Security monitoring.

While we take reasonable measures to protect personal data, no system can guarantee absolute security.

11. Your Rights

Subject to applicable law, you may have the right to:

• Be informed about the collection and use of your data;
• Access your personal data;
• Request correction of inaccurate data;
• Request deletion of data where legally permissible;
• Object to processing;
• Restrict processing;
• Withdraw consent;
• Request data portability where applicable.

To exercise these rights, contact us using the details provided below.

12. Children’s Privacy

Our products and services are intended for persons aged 18 years and above.

We do not knowingly collect personal data from children.

13. International Data Transfers

Where personal data is transferred outside Kenya, we will implement appropriate safeguards and comply with applicable data protection requirements.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

Changes will be posted on our website and become effective upon publication.

15. Contact Us

For privacy-related inquiries, requests, or complaints, contact:

Fincorp Credit Limited
Email: customercare@fincorpcredit.co.ke
Telephone: +254 706 355 355
Website: https://fincorpcredit.co.ke

16. Complaints

If you believe your personal data has been handled improperly, you may contact us first so that we can address your concerns.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.