Introduction

NeuAfrik Limited (Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data in line with the Kenya Data Protection Act and applicable data protection regulations.

This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal data relating to visitors to our website, prospective customers, customers, representatives of corporate customers, suppliers, service providers and other individuals who interact with us (together, “you”).

This Privacy Policy applies to personal data collected through our website, digital platforms, loan application processes, customer service channels and any other interactions with us.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect

Information You Provide Directly

To enable us provide our Services, we may collect personal information such as:

 

1. Identification data (including full name, national identification number, passport details, date of birth, gender and employment details);
2. Contact details (including mobile phone number, email address and physical address);
3. Financial and transactional data (including mobile money transaction history, bank account information, loan repayment history and income-related data)

Choosing not to provide this information may prevent you from accessing some of our services.

Information Collected Automatically

We may collect the following information automatically when you interact with our website or platforms:

• Device and Technical data (including IP address, browser type, device identifiers, and interaction data from our website or platforms.
• Cookies and Similar Technologies: We may use cookies and other technologies to enhance user experience, remember user preferences, enhance security and analyze website traffic. You can manage cookies via your browser settings.

Information from Third Parties

Subject to applicable law, we may receive information about you from:

• Mobile network operators;
• Credit Reference Bureaus;
• Business partners and service providers such as identity verification service providers;
• Government agencies and registries;
• Any referees or contacts expressly provided by you in your application for our products;
• Publicly available sources.

By submitting an application for our products or services or otherwise providing your personal information to us, you expressly authorise such third parties to disclose relevant information about you to us and authorise us to receive, use and process such information in accordance with this Privacy Policy and applicable law.

How We Use Your Personal Information

We use the personal data we collect for the following purposes:

• Provision of Financial Services: Assessing eligibility for credit facilities, credit scoring, loan decisioning, verifying customer identity, disbursing and recovering loans, managing loan accounts and providing customer support.
• Improve and Develop Services: Internal risk modelling, enhance user experience, service & system improvement and develop new products.
• Marketing and Communication: Send you relevant updates, promotions, and servicerelated messages where you have provided your consent or where permitted by applicable law. You may opt out of receiving marketing communications at any time by reaching out to us through the contacts provided or through the relevant platforms/channels
• Security and Compliance: Prevent, detect & investigate fraud, Know Your Customer (KYC) verification, and comply with legal & regulatory requirements.

Lawful Basis for Processing Personal Information

We process personal data where:

• You have provided consent;
• Processing is necessary to perform a contract with you;
• Processing is necessary to comply with a legal obligation;
• Processing is necessary for our legitimate business interests;
• Processing is necessary to establish, exercise or defend legal claims;
• Compliance with legal obligations imposed on us under applicable law.

How We Share Your Personal Information

We may share your personal information with:

• Service Providers and Vendors: We may share your personal information with carefully selected third-party service providers, agents, contractors and vendors who support the delivery, administration, security and improvement of our products and services including credit reference bureaus, identity verification providers, payment service providers, cloud hosting providers, IT and cybersecurity vendors, professional advisers, auditors and debt collection agencies. Such parties are required to protect your personal information and may only process it for authorised purposes and in accordance with applicable law.
• NeuAfrik’s affiliates and group entities; We may share personal data with our affiliates, subsidiaries, and group entities for purposes consistent with this Privacy Policy, including service delivery, operational support, risk management, product development. Such sharing will be subject to strict confidentiality obligations and compliance with applicable data protection laws.
• Legal and Regulatory Authorities: Including regulators, government agencies, Courts and tribunals and law enforcement agencies where required to comply with applicable laws or protect our legal interests.

We do not sell or share personal data to third parties for their own marketing or commercial purposes.

Where We Store Information

The data that we collect from you is stored securely on cloud servers which may be located within or outside Kenya. Where data is transferred or stored abroad, we ensure compliance with the Kenya Data Protection Laws by applying lawful transfer mechanisms, contractual safeguards, and confidentiality obligations so that your information is secured and safeguarded. By submitting your personal data, you agree to this transfer, storing or processing of data. 

Credit Reporting and Sharing

To the extent permitted by applicable law, you authorize us to:

1. obtain your credit information and credit reports from licensed credit reference bureaus and other lawful sources for purposes of identity verification, credit assessment, risk management, fraud prevention, debt recovery and regulatory compliance;
2. submit and update your credit information, including positive and negative credit information, to licensed credit reference bureaus in accordance with applicable law; and
3. share and receive credit information relating to you through licensed credit reference bureaus as permitted by law.

You acknowledge that such processing may continue throughout your relationship with us and thereafter where required or permitted by law.

How long we keep your information

We keep your personal information for at least seven (7) years after you finish repaying your loan or end your relationship with us. Sometimes we may need to keep it longer where necessary if:

1. Required by law, regulatory directives, or supervisory authorities or necessary for compliance with applicable law, tax or reporting obligations.
2. Needed for legal claims including the establishment, exercise, or defence of contractual or statutory rights.
3. Audit purposes supporting governance, accountability, or risk management. After this period, we will either delete your information securely, anonymise it or otherwise dispose it in accordance with applicable laws and our internal data destruction protocols.

Your Rights

You have a right to:

1. access or know the personal data we hold about you;
2. request correction of inaccurate data;
3. object to processing on legitimate grounds. We may continue to process if we have a legitimate or legal reason to do so.
4. request deletion of your data, subject to legal and contractual limitations, including obligations relating to credit reporting and record retention;
5. Opt out of marketing communications. Transactional messages will still be sent. You may exercise your rights by contacting us through the contacts provided in this Privacy Policy.

Your Obligations

You are responsible for ensuring that the personal data you provide is accurate, complete, and up to date. You must safeguard your account credentials, devices, and communication channels, and promptly notify us of any unauthorized access, suspected misuse, or changes to your contact details. You are expected to use our services lawfully, refrain from fraudulent or misleading conduct, and comply with all applicable contractual and regulatory requirements. By continuing to use our services, you acknowledge that effective data protection requires both institutional safeguards and responsible customer practices.

Children’s Data

Our services are not intended for individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal information, please contact us so we can delete it.

Our services are intended for adults and not directed at persons under eighteen (18). We do not knowingly collect or process children’s personal data. If you believe a minor has submitted such data without parental or guardian consent, parents or guardians may contact us to request removal of any child’s information.

Security Measures

We are committed to maintaining the confidentiality, integrity, and availability of personal data. To achieve this, we apply appropriate technical and organizational measures designed to protect information against unauthorized access, unlawful processing, accidental loss, destruction, or damage. These measures are continuously reviewed and updated to reflect legal requirements, regulatory guidance, industry standards, and evolving risks.

While we take all reasonable steps to secure personal data, we also require you to maintain safe practices such as:

• Protecting login credentials by keeping usernames, passwords, and PINs confidential.
• Using secure networks and devices and avoiding access through public or shared computers or networks.
• Updating contact details to ensure timely communication on account activity or security alerts.
• Avoiding unsafe links such as phishing emails, fraudulent websites, or suspicious downloads.

Third-Party Websites and Links

Our website and mobile application may contain links to third-party websites, platforms, or services. Please note that these websites operate independently and are not under our control. We are not responsible for their content, security, or privacy practices. Any personal data you provide through such third-party sites will be governed by their own privacy policies, not ours. The inclusion of a link does not imply endorsement of the site, its operators, or its services. We encourage you to exercise caution and review the privacy policies and terms of any third-party websites you visit.

Contact Information

If you have any questions about this Privacy Policy, need assistance, or wish to exercise your rights, please contact:

Email: info@neuafrik.com 

Address: 80 West Building Thika

Telephone: +254 112811072

We thank you for choosing NeuAfrik. Your privacy remains our priority.