Privacy Policy

BNET Credit Ltd respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and safeguard personal information when you visit our website, contact us, apply for a loan, or use any of our credit services.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree, please do not use our services.

We process personal data in accordance with the Data Protection Act, 2019 of Kenya, the regulations made thereunder, and any other applicable laws.

We collect information that is necessary to provide our credit services, comply with legal obligations, and manage risk. The information we collect may include:

• Identity and contact information: name, national ID or passport number, date of birth, address, phone number, email address, and photograph.
• Financial and employment information: income, employment status, employer details, bank account or M-Pesa details, credit history, and transaction records.
• Business information: business registration details, ownership, directors, and trading history, where you apply on behalf of a business.
• Website and usage data: device identifiers, IP address, browser type, pages visited, and interactions with our website.
• KYC and verification documents: copies of ID, PIN certificate, passport photos, utility bills, and other documents used to verify identity and address.
• Third-party information: data obtained from credit reference bureaus, fraud prevention agencies, government registries, mobile network operators, payment providers, employers, referees, and other publicly or lawfully available sources.

We use your personal data for the following purposes:

• To assess and process loan applications and determine creditworthiness;
• To verify identity, income, and other information provided by you;
• To manage your loan, disburse funds, and process repayments;
• To communicate with you about your application, loan, or enquiry, and to provide customer support;
• To detect, prevent, and investigate fraud, money laundering, and other unlawful activity;
• To comply with legal, regulatory, and court requirements, including reporting to credit reference bureaus and regulators;
• To enforce our rights, recover outstanding debts, and protect our interests;
• To improve our products, services, and security; and
• To send you promotional communications where you have consented to receive them.

You may opt out of promotional communications at any time by following the unsubscribe instructions in the message or by contacting us.

We process your personal data on one or more of the following legal grounds under Kenyan data protection law:

• Consent: where you have given clear consent for us to process your data for a specific purpose, such as receiving marketing communications.
• Performance of a contract: processing necessary to provide the credit services you have requested, including assessing your application and managing your loan.
• Legal obligation: processing required to comply with laws, regulations, court orders, or regulatory directives.
• Legitimate interests: processing necessary for our legitimate business interests, such as preventing fraud, recovering debts, and improving security, provided your rights and freedoms are not overridden.
• Protection of vital interests: processing necessary to protect your life or the life of another person in an emergency.

We do not sell your personal information. We may, however, share your data with the following categories of recipients where necessary and lawful:

• Credit reference bureaus and fraud prevention agencies to assess credit risk and prevent fraud;
• Service providers such as payment processors, cloud hosting providers, IT support, debt collection agents, and customer service partners who process data on our behalf under strict confidentiality and security obligations;
• Regulators and government bodies such as the Central Bank of Kenya, the Office of the Data Protection Commissioner, law enforcement, and tax authorities, when required by law;
• Professional advisers such as auditors, lawyers, and insurers, in the course of their services to us;
• Business successors or assignees in the event of a merger, acquisition, restructuring, or sale of assets, provided the recipient agrees to protect your data;
• Any other person with your consent or as required to enforce our rights or protect our interests.

Where we share data with third parties, we take steps to ensure they handle it securely and only for the purposes we specify.

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, firewalls, secure facilities, staff training, and incident response procedures.

However, no method of transmission or storage over the Internet is completely secure. If you believe your personal information has been accessed or used without authorization, please notify us immediately.

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to service your loan, comply with legal and regulatory obligations, resolve disputes, prevent fraud, and enforce our agreements.

Once the retention period expires and the data is no longer needed, we will securely delete, destroy, or anonymize it in accordance with applicable law. Anonymized data may be retained for statistical, research, or business improvement purposes.

Under the Data Protection Act, 2019, you have the following rights in relation to your personal data:

• The right to be informed about how your data is processed;
• The right to access the personal data we hold about you;
• The right to request correction of inaccurate or incomplete data;
• The right to request deletion or erasure of your data in certain circumstances;
• The right to restrict or object to processing of your data;
• The right to data portability, where technically feasible;
• The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; and
• The right to lodge a complaint with the Office of the Data Protection Commissioner.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before processing your request and may charge a reasonable fee where permitted by law.

We use cookies and similar tracking technologies to keep our website functioning, remember your preferences, analyze how our website is used, and improve security. Some cookies are essential for the operation of our website, while others may be disabled through your browser settings.

You can manage cookie preferences through your browser or device settings. Please note that disabling certain cookies may affect the functionality of our services.

Your personal data is primarily stored and processed in Kenya. Where we transfer data outside Kenya, we will ensure that appropriate safeguards are in place in accordance with the Data Protection Act, 2019, such as ensuring the destination country provides adequate protection, entering into standard contractual clauses, or obtaining your consent where required.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or service offerings. Material changes will be posted on this page and, where appropriate, communicated to you through this website or the contact details you have provided. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

For more information, please visit our Terms of Service.