Swift Loan
Data Protection

Privacy Policy

Learn how Swift Loan collects, uses, and protects your personal information

Last Updated: 3rd September , 2025

1. Privacy Policy Overview

Swift Loan is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile lending services.

We comply with the Kenya Data Protection Act, 2019, and other applicable privacy laws to ensure your personal data is handled with the utmost care and security.

🔒 Your Privacy Matters: We are transparent about our data practices and give you control over your personal information.

2. Information We Collect

Personal Information

  • Full name and date of birth
  • National ID number
  • Phone number and email address
  • M-Pesa account details
  • Employment information and income details
  • Bank account information (when provided)
  • Contact list and SMS data (with permission)

Technical Information

  • Device information (model, operating system)
  • IP address and location data
  • App usage patterns and preferences
  • Transaction history and repayment behavior

📱 Mobile Permissions: We only access device features necessary for loan processing and fraud prevention.

3. How We Use Your Information

We use your personal information for the following purposes:

Loan Services

  • • Process loan applications
  • • Assess creditworthiness
  • • Disburse and collect loans
  • • Customer support

Security & Compliance

  • • Fraud prevention
  • • Identity verification
  • • Legal compliance
  • • Risk management

Communication Purposes

  • Send loan status updates and notifications
  • Provide customer support and assistance
  • Share important account information
  • Send promotional offers (with consent)

4. Information Sharing & Disclosure

We may share your information in the following circumstances:

Authorized Sharing

  • Credit Reference Bureaus: For credit assessment and reporting
  • M-Pesa/Safaricom: For payment processing and verification
  • Government Agencies: When required by law or regulation
  • Collection Agencies: For debt recovery purposes (overdue accounts only)

Legal Requirements

  • Compliance with court orders or legal processes
  • Prevention of fraud or criminal activity
  • Protection of our rights and property
  • National security or public safety requirements

🚫 No Sale of Data: We never sell your personal information to third parties for marketing purposes.

5. Data Security & Protection

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

  • 256-bit SSL encryption for data transmission
  • Secure cloud storage with encryption at rest
  • Multi-factor authentication systems
  • Regular security audits and penetration testing
  • Firewall protection and intrusion detection

Administrative Controls

  • Role-based access controls
  • Employee background checks and training
  • Data handling policies and procedures
  • Incident response and breach notification protocols

🛡️ Bank-Level Security: Our security measures meet or exceed banking industry standards.

6. Your Privacy Rights

Under the Kenya Data Protection Act, you have the following rights:

Access Rights

  • • View your personal data
  • • Request data copies
  • • Understand data processing

Control Rights

  • • Correct inaccurate data
  • • Delete certain data
  • • Restrict processing

How to Exercise Your Rights

To exercise any of these rights, contact us at:

  • Email: privacy@swiftloan.ke
  • In-app support chat

⏱️ Response Time: We will respond to your privacy requests within 30 days as required by law.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience:

Types of Cookies

Cookie Type Purpose Duration
Essential Core website functionality Session
Security Fraud prevention 30 days
Analytics Service improvement 2 years

Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

8. Third-Party Services

We work with trusted third-party service providers who may process your data:

Service Categories

  • Payment Processors: M-Pesa/Safaricom for transactions
  • Credit Bureaus: TransUnion, Metropol for credit checks
  • Cloud Providers: Secure data storage and processing
  • Analytics Services: App performance and user experience
  • Customer Support: Communication and support tools

Third-Party Safeguards

  • Contractual data protection requirements
  • Regular security assessments
  • Limited data access and usage rights
  • Compliance with applicable privacy laws

🤝 Partner Responsibility: All third parties must meet our strict data protection standards.

9. Data Retention & Deletion

We retain your personal information only as long as necessary:

Retention Periods

Active Loan Data: Duration of loan term plus 7 years for regulatory compliance

Credit Information: 5 years from last transaction (industry standard)

Identity Verification: 5 years for anti-money laundering compliance

Marketing Preferences: Until you withdraw consent

Technical Logs: 90 days for security and troubleshooting

Automatic Deletion

  • Data is automatically deleted when retention periods expire
  • Secure deletion methods prevent data recovery
  • Regular data purging schedules
  • Documentation of deletion activities

🗂️ Data Minimization: We only keep data that is necessary for our legitimate business purposes.

10. Privacy Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements:

How We Notify You

  • Email notifications to registered users
  • SMS alerts for significant changes
  • In-app notifications and banners
  • Website announcements

Your Options

  • Review changes within 30 days of notification
  • Contact us with questions or concerns
  • Request account closure if you disagree
  • Continued use implies acceptance of changes

📧 Stay Informed: We recommend reviewing this policy periodically for updates.

External Complaints

If you're not satisfied with our response, you may file a complaint with:

  • Office of the Data Protection Commissioner
  • Website: www.jkc.go.ke
  • Email: info@jkc.go.ke
  • Phone: +254 (0) 65 2628 900

Privacy Commitment

Your privacy and data security are fundamental to our business. We are committed to maintaining the highest standards of data protection.

This Privacy Policy is effective as of August 2, 2025, and applies to all Swift Loan services.