Privacy Policy

Effective date:

1) Who We Are

Controller: Loanika Loans. If you have questions about this policy or our data practices, contact us at support@loanika.co.ke or via our website loanika.co.ke.

2) What Data We Collect

We may collect the following categories of personal data when you use our services:

• Identification: full name, national ID/Passport, KRA PIN, date of birth.
• Contact: phone number, email address, physical address.
• Financial & Employment: income, employer details, bank details, M‑Pesa details for STK push and disbursement, credit history.
• CRB Information: data we obtain from licensed Credit Reference Bureaus for creditworthiness assessment.
• Device & Usage: IP address, device type, browser, pages visited, referring/exit pages, timestamps, cookies and similar technologies.
• Communications: records of calls, SMS (including one‑time passwords), emails, and in‑app messages.

3) How We Obtain Your Data

• Directly from you when you apply, create an account, or contact us.
• Automatically via cookies/analytics when you use our website.
• From third parties including CRBs, payment partners (e.g., Safaricom M‑Pesa), verification service providers, and publicly available sources, where lawful.

4) How We Use Your Data (Purposes & Lawful Basis)

• Loan assessment & onboarding (performance of a contract; legitimate interests).
• Identity, fraud & AML checks (legal obligation; legitimate interests).
• Credit checks with CRBs (consent; legitimate interests; legal obligation where applicable).
• Payments, disbursements & collections incl. M‑Pesa STK push (performance of a contract).
• Customer support & communications (performance of a contract; legitimate interests; consent for marketing).
• Analytics & service improvement (legitimate interests; consent for non‑essential cookies).
• Compliance & risk management (legal obligation; legitimate interests).

5) Sharing & Disclosure

We may share your information with:

• Service providers & processors (IT hosting, analytics, identity verification, payment processors).
• CRBs and other lenders as required or permitted by law.
• Regulators & law enforcement upon valid request or to comply with legal obligations.
• Business transfers in connection with mergers, acquisitions, or asset sales (subject to confidentiality safeguards).

We do not sell your personal data.

6) International Transfers

If we transfer data outside Kenya, we implement appropriate safeguards consistent with the Kenya Data Protection Act, including contractual clauses, and limit transfers to jurisdictions with adequate protection where feasible.

7) Data Retention

We keep personal data only as long as necessary for the purposes described above, including meeting legal, accounting, reporting, and regulatory requirements. Typical retention for loan records is up to seven (7) years after closure unless a longer period is legally required.

8) Security

We use administrative, technical, and physical safeguards to protect data, including encryption in transit (HTTPS), access controls, and periodic reviews. However, no method of transmission or storage is 100% secure.

9) Your Rights

Subject to legal limits, you may:

• Request access to your personal data.
• Request correction or deletion of inaccurate or unlawful data.
• Object to or restrict certain processing.
• Withdraw consent at any time where processing is based on consent.
• Request data portability where applicable.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

To exercise rights, contact support@loanika.co.ke. We may need to verify your identity.

10) Cookies & Analytics

We use cookies to enable core site functionality, remember your preferences, and perform analytics. Non‑essential cookies (e.g., marketing) are used only with your consent. You can manage cookies via your browser settings or our consent banner.

11) Marketing Communications

We may send you product updates and offers if you opt in or where permitted. You can opt out at any time via the unsubscribe link or by contacting us.

12) Automated Decision‑Making

Loan approvals may involve automated processing (e.g., credit scoring). You have the right to request human review, express your point of view, and contest a decision, subject to applicable law.

13) Children’s Data

Our services are not directed to persons under 18. We do not knowingly collect data from children. If you believe a minor has provided data, please contact us to delete it.

14) Third‑Party Links

Our website may contain links to third‑party sites. We are not responsible for their privacy practices. Review their policies before providing personal data.

15) Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page. We will indicate the Effective date at the top and, where appropriate, notify you through the website or email.