Your privacy is important to us. U&I Microfinance Bank Limited is committed to keeping your personal data private. This privacy notice explains the personal data U&I Microfinance Bank Limited collects, how it is processed, for what purposes and how you can exercise your rights in relation to processing of personal data.
This privacy notice should be read together with the terms and conditions.
Where there is a conflict between this Privacy Notice and the Terms and Conditions, this Privacy Notice shall prevail.
Purpose
- We established this Privacy Notice for the purposes of compliance with the applicable data protection laws in Kenya.
- This Privacy Notice sets our standards towards the access and use of any personal data, or any other information provided from you or any other sources to us.
- Please also read Terms and Conditions (“Terms”), which describe the terms under which you access and use our Services.
Definitions
- “U&I MFB”, “We,” “our,” and “us,” means U&I Microfinance Bank Limited and includes its successors in title and assigns, its affiliates and/or its subsidiaries as may from time to time be specified by the Bank to you.
- “You” means: Customer — (which includes personal representatives and assigns) operating an Account held with us and includes (where appropriate) any person you authorise to give us instructions, the person who uses any of our products and services or accesses our websites; any agent, dealer and/or merchants who has signed an agreement with us; and any visitor who gains access to U&I Microfinance Bank Limited premises.
Collecting information from you
We may collect and process your personal data through information you provide when you fill forms, use our website, or communicate with us.
Our Privacy Notice does not apply when you leave our website to third-party sites.
The kind of information we hold about you
We may collect:
- Personal contact details
- Identification information
- Financial information
- Technical data
- Transaction data
- Profile data
- Usage data
- Marketing data
- Customer support data
4.1 How your data is processed
We collect data from:
- Information you provide directly
- Information collected automatically
- Information from third parties such as KRA, NTSA, and government registries
Legal basis for collecting information
We process personal data:
- To fulfill contracts
- For KYC compliance
- To prevent fraud
- For regulatory compliance
- To improve services
- To communicate with you
Retention of information
We retain data for as long as required by law (minimum 7 years for financial records).
Data involving children
We do not knowingly collect data from children under 18 without parental consent.
Disclosure and information sharing
We may disclose data to:
- Regulators and courts
- Subsidiaries and agents
- Credit reference agencies
- Debt collectors
Change of purpose
We will only use data for original purposes unless legally required otherwise.
Data sharing with third parties
Data may be transferred outside Kenya with safeguards.
Your rights
You have rights to access, correct, erase, restrict, and transfer data.
International data transfers
Data may be stored in Kenya and abroad with safeguards.
Data security
We implement appropriate security measures to protect your data.
Exceptions
Processing may occur without consent where legally required.
Right to lodge complaint
You may complain to the Kenyan Data Protection Authority.
Changes
We may update this policy from time to time.