Privacy Policy

KitBank Financial Services Limited ('KitBank', 'we', 'us', 'our') is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital banking platform, mobile applications, agent network, and any related services.

Please read this policy carefully. By using KitBank services, you acknowledge the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

This policy covers all KitBank services including banking accounts, loans, cards, insurance, crypto, wealth management, and Terms of Service, Cookie Policyagent-assisted transactions Security Policy.

KitBank Financial Services Limited is the data controller responsible for your personal information.

• Registered Address: KitBank Tower, Upperhill, Nairobi, Kenya
• For all data protection inquiries, please contact our Data Protection Officer: [email protected]
• Data Protection Officer: KitBank Financial Services Ltd, P.O. Box 12345-00100, Nairobi, Kenya [email protected]
• For general support: [email protected] Contact Us

We collect various types of personal data to provide and improve our services:

Identity Data

Full name, date of birth, national ID/passport number, KRA PIN, photograph, signature, and biometric data for KYC compliance.

Contact Data

Email address, phone number, residential address, and postal address.

Financial Data

Bank account details, transaction history, credit history, income sources, and asset information.

Technical Data

IP address, device identifiers, browser type, operating system, location data, cookies, and usage analytics.

Communications Data

Records of your interactions with our customer support, including call recordings and correspondence.

• Direct Interactions: When you open an account, apply for products, contact support, or use our services.
• Automated Technologies: Through cookies, device fingerprinting, and analytics when you use our platform.
• From Agent Networks: Data collected through authorized KitBank agents during transactions and customer onboarding.
• From Third Parties: Credit reference bureaus, identity verification services, fraud prevention agencies, and mobile money providers.

We use your personal data for the following purposes:

• To open, operate, and maintain your accounts and provide banking services.
• To verify your identity and comply with KYC/AML regulatory requirements.
• To process transactions, including transfers, payments, loans, and insurance policies.
• To detect and prevent fraud, money laundering, and other financial crimes.
• To improve our services, develop new products, and personalize your experience.
• To communicate with you about your accounts, products, and important service updates.
• To comply with legal and regulatory obligations, including tax reporting.
• To provide customer support and resolve disputes.
• To send marketing communications (with your consent, where required by law).

We process your personal data under the following legal bases in accordance with Kenya's Data Protection Act:

• Performance of a Contract: Processing necessary to provide banking services under our terms.
• Legal Obligation: Compliance with KYC, AML, tax, and other regulatory requirements.
• Legitimate Interests: Fraud prevention, service improvement, and network security.
• Consent: Marketing communications and optional data processing activities.

We may share your personal data with the following categories of recipients:

We require all third parties to respect the security of your personal data and treat it in accordance with the law.

• Service Providers: IT infrastructure, cloud hosting, payment processing, and analytics providers.
• Financial Partners: Banks, mobile money operators, insurance providers, and credit reference bureaus.
• Regulatory Bodies: Central Bank of Kenya, Kenya Revenue Authority, Financial Reporting Centre, and other regulators.
• Corporate Transactions: In connection with a merger, acquisition, or sale of assets.

Your data may be transferred to and processed in countries outside Kenya where our service providers operate. We ensure appropriate safeguards are in place through standard contractual clauses and data protection agreements.

We retain your personal data for as long as your account is active and for a period of at least seven years after account closure to comply with legal and regulatory requirements.

Some data may be retained longer for fraud prevention, legal proceedings, or technical backup purposes, after which it is securely deleted or anonymized.

We implement appropriate technical and organizational measures to protect your personal data:

These measures include 256-bit TLS encryption, multi-factor authentication, Security Policy regular security audits, and staff training on data protection.

Under the Data Protection Act, you have the following rights:

• Right to be informed about how your data is used.
• Right to access your personal data held by KitBank.
• Right to rectify inaccurate or incomplete data.
• Right to erasure ('right to be forgotten') in certain circumstances.
• Right to restrict processing of your data.
• Right to data portability to another service provider.
• Right to object to processing for direct marketing purposes.

To exercise any of these rights, contact our DPO at [email protected] or through your account settings. We will respond within 30 days.

KitBank services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware of such collection, we will take steps to delete the information.

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver relevant content. For detailed information, see our Cookie Policy.

You can manage cookie preferences through your browser settings. Essential cookies are required for core functionality and cannot be disabled.

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their policies.

If you use our insurance services, additional data such as health information, vehicle details, or property valuations may be collected and shared with underwriters and insurance partners.

When transacting through a KitBank agent, certain transaction data and verification information may be collected by the agent and transmitted to us for processing.

We may update this Privacy Policy from time to time. Material changes will be notified through our platform, via email, or through our agent network at least 30 days before taking effect.

If you have questions, concerns, or complaints about this Privacy Policy or our data practices: