Data Privacy Statement

Creditinfo Credit Reference Bureau Limited (“Creditinfo”) is committed to keeping your information private. By your information, we mean any information about you that you provide to us or that is provided to or acquired by us from third party sources. This statement relates to the privacy of your information with the bureau. The Creditinfo’s privacy principles (see below) explain how we will handle your information.

We only collect, process, and share your data so that we can provide you with the services and/or products that you are applying for. We will obtain your consent for any other processing that is not related to this purpose. Please refer to the terms and conditions to read our detailed privacy notice.

Table of Contents:

1. Commitment to Personal Information Protection

Creditinfo promises to treat all your personal information carefully and responsibly.

2. Definition of Personal Information

Personal information includes any information that lets Creditinfo identify you as a unique individual, such as your name/s and surname combined with your physical address, contact details and/or passport/identity number.

3. Identification of Legal Entities

Personal information also refers to information that uniquely identifies a legal entity, such as the trading name of a company combined with the company registration number.

4. Methods of Personal Information Collection

Personal information may be given to or collected by Creditinfo in writing as part of a written application form, electronically (email), telephonically, online (Creditinfo.co.ke) or via the Creditinfo channels.

5. Processing of Personal Information

Processing of personal information includes any initial processing that Creditinfo does when we first collect your personal information. It also includes any further and ongoing processing that Creditinfo is allowed to carry out legitimately in terms of the reasons listed in paragraph 7 (below). The term ‘processing’ includes collecting, using, altering, merging, linking, organising, disseminating, storing, retrieving, disclosing, erasing, archiving, destroying or disposing of personal information.

6. Purposeful Collection and Processing

Creditinfo will only collect and process your personal information for the reason you provided it to us, or to enable us to comply with the requirements of specific laws and/or regulations that we are governed by.

7. General Purposes for Processing

Creditinfo may process your personal information to protect your or our legitimate interests. Creditinfo will not collect and process personal information about you that we do not need. The general purposes for which Creditinfo collects and processes your personal information include, but are not limited to:

  • Creating a record of you on our system to verify your identity, provide you with the products and/or services you have applied for and then communicate with and keep you informed about these products and/or services;
  • Assessing your personal financial circumstances and needs before providing advice to you;
  • Any purpose related to the prevention of financial crime, including sanctions screening, monitoring of anti-money laundering and any financing of terrorist activities;
  • Further processing for historical, statistical or research purposes where the outcomes will not be published in an identifiable format;
  • Where you have applied for employment at Creditinfo, we perform applicant screening and background checks;
  • Where you are a Creditinfo employee (including contractors), we create an employment record of you on our system to facilitate continuous monitoring during your employment with us;
  • Where you are a Creditinfo director, we create a record of you as a director on our system;
  • Where you’ve been identified as a next of kin by an employee or customer, we create a record of you on our system; and
  • Where you are a supplier to Creditinfo, we process your personal information for due diligence, risk assessment, administrative and payment purposes.

8. Data Processing with Third Parties

We process your data or derivatives of your data with third party independent data controllers and processors, including resellers and distributors, for the purposes of identity verification. These third parties provide identity verification services, such as the verification and/or validation of the identity of individuals for the purposes of, but not limited to, anti-money laundering regulations, age verification, anti-fraud processes and pre-employment checks

9. Handling Special Personal Information

Furthermore, Creditinfo will not process your special personal information unless:

  • You have consented to Creditinfo processing it;
  • It is necessary to exercise or defend a right or obligation in law;
  • It is necessary to comply with a legal and/or regulatory obligation of public interest;
  • It is for certain historical, research or statistical purposes that would not adversely affect your privacy; or
  • Your information has been made public.

10. Requirement of Complete Personal Information

There are some personal information fields that you have to fill in if you want Creditinfo to provide you with any product and/or service or onboard you as an employee, supplier, director or job applicant. This information can be provided in writing, electronically or telephonically, but it must be accurate and complete. These fields are indicated by an asterisk (or as otherwise indicated) on the respective forms/websites. If Creditinfo does not receive the necessary personal information, we will not be able to continue with your application. If you are already a(n) customer/employee/supplier/director and Creditinfo asks you for this information and you do not provide it, Creditinfo will have to suspend the provision of the product and/or services for a period of time, or as the case may be, even terminate our relationship with you.

11. Collection from Various Sources

In most cases, personal information will be collected directly from you, but there may be other instances when Creditinfo will collect personal information from other sources. These may include public records, places where you may already have made your personal information public (for example, on social media), credit bureaus, or individuals/directors whom you have appointed as your representative, where you are a corporate entity. Creditinfo will only collect your personal information from other sources where we are legally entitled or obliged to do so, and you are entitled to ask Creditinfo which sources they used to collect your personal information.  

12. Internal and External Information Sharing

For the purposes outlined in paragraph 7 (above), Creditinfo will, in most instances, collect, share and process your personal information internally and with other affiliated companies of Creditinfo. However, there are times when Creditinfo needs to outsource these functions to third parties, either within Creditinfo or external to Creditinfo, including parties in other countries. Where your personal information is processed or shared internally within Creditinfo,  its subsidiaries or affiliates, such processing or sharing will be carried out only for the purposes outlined in paragraph 7 (above). Creditinfo may also need to share your personal information with external organisations, such as credit bureaus, tax authorities or other regulatory or industry bodies, so that we can meet our due diligence or regulatory requirements. We may need to share your personal information with our business partners or counter-parties, where we are involved in corporate transactions relating to the sale or transfer of any of our businesses, legal entities or assets. Creditinfo will not share your personal information with third parties who do not need your personal information, or where Creditinfo is not legally permitted to do so. When Creditinfo decides to transfer your personal information to third parties, we will only provide it to organisations that have the same data privacy policies as Creditinfo or those who are subject to laws relating to the processing of personal information that are similar to those that apply to Creditinfo. 

13. Automated Processing and Profiling

There may be instances where Creditinfo will process your personal information through a secure automated tool or perform profiling resulting in a decision that may affect you significantly. If you are unhappy about the outcome of such a decision, please contact:

  • Your relationship manager (for clients);
  • customer service team (for customers);
  • your resourcing consultant (for job applicants);
  • your people business partner (for employees);
  • your supplier relationship manager (for suppliers); or
  • Creditinfo’s Secretariat office (for directors).

14. Marketing Communications Policy

As a customer, if you have not opted in to receiving electronic marketing communications (on media such as SMS, email or automated calling machines), Creditinfo will not market to you using electronic media. If you have opted in to receiving marketing via electronic media, you have the right to opt out at any time by following the instructions on the marketing material received.

15. Rights Regarding Personal Information

As a non-customer, if you would like to receive marketing information from Creditinfo through electronic media, please submit your details to Creditinfo in writing.

16. Rights Under Local Legislation

To the extent that local legislation permits or if you are a resident of the European Union or United Kingdom, you have the following rights regarding your personal information:

  • The right to access your personal information that we have on record.
  • You have the right to ask Creditinfo to correct any of your personal information that is incorrect. These requests must be sent to us in writing using this form.
  • You can ask Creditinfo to delete or destroy your personal information. You can also object to Creditinfo processing your personal information. These requests must be sent to Creditinfo in writing using this form. However, the result of such a request will be that Creditinfo may have to suspend the provision of products and/or services for a period of time, or even terminate our relationship with you. Creditinfo’s records are subject to regulatory retention periods, which means that Creditinfo may not be able to delete or destroy your personal information immediately upon request.
  • You may also ask Creditinfo to port your personal information to another party in terms of applicable European Union and United Kingdom data privacy legislation.

17. Complaints and Contact Information

If you have a complaint relating to the protection of your personal information, including the way in which it has been collected or processed by Creditinfo, please contact us using the local contact details as listed below or send an email to cikinfo@creditinfo.com

Statement Amendment Clause

Creditinfo reserves the right to change this statement at any time. All changes to this statement will be posted on the website. Unless otherwise stated, the current version shall supersede and replace all previous versions of this statement.