Last updated: 8 June 2026
Website: loan-ke.com
This Privacy Policy explains how Loan KE collects, uses, discloses, and protects your personal information when you use our website, mobile services, and loan products.
loan-ke.com (“we”, “us”, “our”) is a licensed digital lender and loan comparison platform operating in Kenya. We are committed to protecting your privacy and handling your personal data in accordance with the Kenya Data Protection Act, 2019 (DPA) and the Central Bank of Kenya (Digital Credit Providers) Regulations, 2022.
By accessing or using our website (loan-ke.com), applying for a loan, or interacting with our services, you consent to the collection and processing of your personal data as described in this Privacy Policy.
1. Information We Collect
We collect different types of information to provide and improve our services:
1.1 Personal Identification Information
- Full name (as it appears on your National ID)
- Kenyan National ID number and copy/photo of ID
- Date of birth and gender
- Phone number (M-Pesa registered number)
- Email address
- Physical/residential address
- Employment status, employer details, and income information
- Bank account or M-Pesa transaction history (for credit assessment)
1.2 Device and Technical Information
- Device type, operating system, and unique identifiers (IMEI, device ID)
- IP address, browser type, and language settings
- Location data (with your consent)
- Cookies and usage data (how you interact with our site and app)
1.3 Credit and Financial Information
- Credit history and credit score from Credit Reference Bureaus (CRBs)
- Existing loan obligations and repayment history
- Information obtained through IPRS (Integrated Population Registration System) verification
2. How We Use Your Information
We use your personal data for the following purposes:
- To verify your identity — through National ID and IPRS checks
- To assess your creditworthiness — by querying CRBs and analyzing your financial profile
- To process loan applications and determine appropriate loan limits and terms
- To disburse funds directly to your M-Pesa wallet
- To manage repayments and send payment reminders
- To prevent fraud and comply with anti-money laundering (AML) requirements
- To improve our services and develop new features
- To communicate with you about your loan, offers, and important updates
- To comply with legal and regulatory obligations (CBK, DPA, tax authorities)
3. Legal Basis for Processing
Under the Kenya Data Protection Act, 2019, we process your personal data on the following lawful bases:
- Consent — You explicitly consent when registering and applying for a loan
- Contract performance — Processing is necessary to perform our loan agreement with you
- Legal obligation — We are required to process data under CBK regulations and other laws
- Legitimate interests — To prevent fraud, improve services, and protect our business (balanced against your rights)
4. Sharing Your Information
We may share your personal data with the following parties:
4.1 Partner Lenders & Service Providers
We work with licensed digital lenders and financial institutions to offer you loan products. Your data may be shared with them for loan processing.
4.2 Credit Reference Bureaus (CRBs)
We share and receive information from registered CRBs (such as Metropol, TransUnion, Credit Info) as required for credit assessment and reporting.
4.3 Government & Regulatory Bodies
We may share data with the Central Bank of Kenya, IPRS, Kenya Revenue Authority, or law enforcement when legally required.
4.4 Technical Service Providers
We use trusted third-party providers for hosting, analytics, SMS/M-Pesa integration (Safaricom), payment processing, and security services. These providers are contractually bound to protect your data.
We do not sell your personal data to third parties for marketing purposes.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep you logged in and remember your preferences
- Analyze website traffic and improve user experience
- Detect and prevent fraudulent activity
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our website.
6. Data Security
We implement robust technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:
- Encryption of sensitive data in transit (TLS) and at rest
- Regular security audits and penetration testing
- Strict access controls and staff training on data protection
- Secure data centers and cloud infrastructure
While we take every reasonable precaution, no system is 100% secure. In the unlikely event of a data breach, we will notify affected users and the Office of the Data Protection Commissioner as required by law.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:
- During the life of your loan and for a reasonable period afterward for record-keeping and dispute resolution
- To comply with regulatory requirements (typically 5–7 years for financial records)
- To maintain credit history with CRBs as per their policies
When data is no longer needed, it is securely deleted or anonymized.
8. Your Rights Under the Kenya Data Protection Act, 2019
You have the following rights regarding your personal data:
- Right to be informed — About how your data is processed
- Right of access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate or incomplete data
- Right to erasure (“right to be forgotten”) — Request deletion of your data (subject to legal obligations)
- Right to restrict processing
- Right to data portability — Receive your data in a structured, commonly used format
- Right to object to processing (including direct marketing)
- Rights related to automated decision-making — You may request human review of decisions made solely by automated means
To exercise any of these rights, please contact us using the details below. We will respond within the timelines prescribed by law (generally 14 days, extendable in complex cases).
9. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor without verifiable parental consent, we will take steps to delete that information promptly.
10. International Data Transfers
Your personal data is primarily processed and stored in Kenya. In limited cases where we use international service providers (e.g., cloud hosting), we ensure appropriate safeguards are in place in accordance with the Data Protection Act.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a new “Last updated” date. We encourage you to review this policy periodically.
12. Contact Us / Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
Loan KE
Westlands, Muthithi Road, 5th Floor, Delta Towers
P.O. Box 12345-00100, Nairobi, Kenya
Email: info@loan-ke.com
Data Protection Officer: dpo@loan-ke.com
You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been violated.
This Privacy Policy forms part of our Terms and Conditions. By using Loan KE services, you acknowledge that you have read and understood this policy.
Borrow responsibly. Terms and conditions apply.