Data Protection & Privacy Policy (Ver. 1, 2023)

1. Privacy Statement

This Statement provides information on how Progressive Credit Limited
(hereinafter “PCL” approaches processing your personal data. Our focus and
commitment to respecting your privacy and safeguarding your personal data
remains stronger than ever.

1.1 Terms used in this Statement

1.1.1 Personal Data

Information that directly or indirectly identifies or says something about
you is referred to as personal data. Examples include your name and address,
and information such as your income. Information relating to a sole trader,
commercial partnership or professional partnership is also considered
personal data.

1.1.2 Processing Data

Processing means anything that can be done with personal data. This includes
the collection, storage, use, transfer and removal of data.

1.2 Whose Personal Data does PCL Process?

We process personal data if we have, want to have, or have had a business
relationship with you, or if we have had contact with you.

The people whose personal data we process includes:

  • Existing clients both domestic and foreigners
  • Potential customers
  • People who show an interest in the PCL’s products and services
  • People who are connected in one way or another with a business or
    organization with which we have, want to have, or have had a business
    relationship, such as third-party participants
  • Security providers and guarantors

2. Which Data does PCL Process?

Types of DataWhat kind of data might be involvedExamples of how PCL will use the data
Information that allows an individual to be identified directly or indirectlyName, address, telephone number, e-mail address, information provided in
your identity documents to fulfil PCL’s Know Your Customer (KYC)
requirements
For identification purposes, to draw up an agreement / contract or to
contact you
Information relating to or used for agreements / contracts or financial statementsInformation about your financial situation, the products you have.
Information used for obtaining finance
To assess creditworthiness, or to assess whether a product is suitable
for you
Payment and transaction dataWhen a payment is made, information about the person who paid, when the
payment took place and what the loan balance remaining
To ensure correct / timely processing of funds is performed. Also, for
anti-money laundering / counter terrorism financing and sanctions
monitoring. For your security and ours.
Special categories of personal data / Criminal dataInformation concerning your health, information about criminal records,
data which reveal your ethnic origin or political inclinations,
biometric data
We process biometric data for identification purposes and criminal data
in the context of Anti-Money Laundering
Data we receive from Third PartiesData obtained from Credit Reference Bureaus and Company RegistryWe use this information to check Directors and credit rating details

3. How does PCL collect your Personal Data?

We receive your personal data when you provide it to PCL, when getting into
a contract with us, and from services provided by businesses we engage such
as lawyers or property valuers.

4. How long does the PCL Retain your Data?

We generally retain data for seven years following termination of the
business relationship unless there is a legal obligation to preserve it
longer.

5. Processing of special category of Data at PCL

We process special categories of personal data where permitted by law and
where consent is acquired. Consent may be withdrawn at any time.

6. Does PCL use Automated Individual Decision-making including Profiling?

We do not envisage that any decisions will be taken about you that produce
legal effects or significantly affect you.

7. Who at PCL has access to your Data?

Within PCL your personal data can be accessed only by individuals who need
to have access owing to their role and for official business purposes.

8. Does PCL use your Personal Data for any other Purpose?

If there is no sufficiently strong correlation between purposes, we will ask
for your consent.

9. Does PCL Transfer your data to other countries outside Kenya?

Where data is transferred outside Kenya, additional safeguards are applied
to protect your personal data.

10. Customer Data Rights at the PCL

10.1 Right to Access

You may ask through the branch or relationship officer to access all the
information that we have and process in relation to you. The data
protection office shall respond within 30 days.

10.2 Right to be Forgotten

You may request that we erase data concerning yourself that we have
captured, provided your interest outweighs PCL’s interest.

10.3 Right to Data Portability

You have the right to request PCL to supply you with data in a structured,
machine-readable format or transfer it to another party where feasible.

10.4 Right to Rectification

You may request correction or supplementation of incorrect or incomplete
personal data.

10.5 Right to restriction of processing

You may request that we restrict the personal data relating to you that we
process.

10.6 Right to object to Direct Marketing

You have the right to request PCL to stop sending marketing communication.

11. Whom to contact to place a complaint or log in an inquiry regarding Personal Data?

If you have any questions concerning the processing of personal data by us,
please contact your Relationship Officer or Branch with which you do
business.

 

Permission Statement 

Overview 
To provide secure and reliable financial services, our application may request access to certain 
features of your device. These permissions allow us to verify your identity, detect fraud, process loan 
applications, and improve service security. 
All collected data is transmitted securely using encrypted HTTPS protocols and handled in 
accordance with our Privacy Policy and applicable data protection regulations. 
We only request permissions that are necessary for the core functionality of the application. 
Permissions We Request 
Camera Permission 
We request access to your device camera to enable identity verification and document submission 
during the loan application process. 
This permission is used to: 
Capture photos of identification documents for KYC verification 
Capture a selfie photo for identity confirmation 
Upload verification documents required for loan processing 
The camera is only activated when you choose to capture a photo within the application. 
Location Permission 
We request access to your device location to help verify your location during loan application and 
detect suspicious activity that may indicate fraud. 
Location data helps us: 
Confirm that the application originates from a valid region 
Improve fraud detection and account security 
Enhance service availability in supported areas 
Location data is used only during loan application and security verification processes. 
Phone State Permission 
We request access to limited device information to help identify the device used to access the application and prevent fraudulent activities. 
This information may include: 
Device model and operating system 
Network information 
Device identifiers necessary for security verification 
This data is used solely for security and fraud prevention purposes. 
Contacts Permission 
We request access to your contacts only when necessary to support customer verification and 
improve fraud prevention measures. 
The application: 
Does not modify or upload your contacts without your consent 
Does not contact your contacts directly 
Does not share contact information with third parties for marketing purposes 
Contact information is used only to support identity verification and risk assessment. 
Call Log Permission 
We may request access to limited call log information (30 days) to assist in fraud detection and 
credit risk analysis. 
This permission allows the application to analyze call history metadata such as call timestamps and 
call frequency. 
Important: 
The application does not record or listen to phone calls 
The application does not access call audio or conversation content 
Call log information is used only for automated fraud detection and credit assessment. 
External Storage Permission 
We request access to device storage to allow you to upload required documents and download 
account statements. 
This permission allows the application to: 
Upload identification documents 
Store temporary files needed during loan processing 
Download statements or loan documents for your records 
The application only accesses files necessary for these functions. 
Data Protection 
We implement strict security measures to protect your data, including: 
End-to-end encrypted data transmission 
Secure server infrastructure 
Access control and monitoring 
Compliance with data protection regulations 
Your personal data is used strictly for providing and improving our financial services. 
User Consent 
By selecting “Agree”, you confirm that: 
You understand the permissions requested by the application 
You consent to the collection and processing of data as described. 
You accept our Privacy Policy and Terms of Service. 
If you select “Disagree”, certain features of the application may not function properly.