Privacy Policy
Learn how Swift Loan collects, uses, and protects your personal information
Last Updated: 3rd September , 2025
Quick Navigation
1. Privacy Policy Overview
Swift Loan is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile lending services.
We comply with the Kenya Data Protection Act, 2019, and other applicable privacy laws to ensure your personal data is handled with the utmost care and security.
🔒 Your Privacy Matters: We are transparent about our data practices and give you control over your personal information.
2. Information We Collect
Personal Information
- Full name and date of birth
- National ID number
- Phone number and email address
- M-Pesa account details
- Employment information and income details
- Bank account information (when provided)
- Contact list and SMS data (with permission)
Technical Information
- Device information (model, operating system)
- IP address and location data
- App usage patterns and preferences
- Transaction history and repayment behavior
📱 Mobile Permissions: We only access device features necessary for loan processing and fraud prevention.
3. How We Use Your Information
We use your personal information for the following purposes:
Loan Services
- • Process loan applications
- • Assess creditworthiness
- • Disburse and collect loans
- • Customer support
Security & Compliance
- • Fraud prevention
- • Identity verification
- • Legal compliance
- • Risk management
Communication Purposes
- Send loan status updates and notifications
- Provide customer support and assistance
- Share important account information
- Send promotional offers (with consent)
4. Information Sharing & Disclosure
We may share your information in the following circumstances:
Authorized Sharing
- Credit Reference Bureaus: For credit assessment and reporting
- M-Pesa/Safaricom: For payment processing and verification
- Government Agencies: When required by law or regulation
- Collection Agencies: For debt recovery purposes (overdue accounts only)
Legal Requirements
- Compliance with court orders or legal processes
- Prevention of fraud or criminal activity
- Protection of our rights and property
- National security or public safety requirements
🚫 No Sale of Data: We never sell your personal information to third parties for marketing purposes.
5. Data Security & Protection
We implement comprehensive security measures to protect your personal information:
Technical Safeguards
- 256-bit SSL encryption for data transmission
- Secure cloud storage with encryption at rest
- Multi-factor authentication systems
- Regular security audits and penetration testing
- Firewall protection and intrusion detection
Administrative Controls
- Role-based access controls
- Employee background checks and training
- Data handling policies and procedures
- Incident response and breach notification protocols
🛡️ Bank-Level Security: Our security measures meet or exceed banking industry standards.
6. Your Privacy Rights
Under the Kenya Data Protection Act, you have the following rights:
Access Rights
- • View your personal data
- • Request data copies
- • Understand data processing
Control Rights
- • Correct inaccurate data
- • Delete certain data
- • Restrict processing
How to Exercise Your Rights
To exercise any of these rights, contact us at:
- Email: privacy@swiftloan.ke
- In-app support chat
⏱️ Response Time: We will respond to your privacy requests within 30 days as required by law.
7. Cookies & Tracking Technologies
We use cookies and similar technologies to improve your experience:
Types of Cookies
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Core website functionality | Session |
| Security | Fraud prevention | 30 days |
| Analytics | Service improvement | 2 years |
Managing Cookies
You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.
8. Third-Party Services
We work with trusted third-party service providers who may process your data:
Service Categories
- Payment Processors: M-Pesa/Safaricom for transactions
- Credit Bureaus: TransUnion, Metropol for credit checks
- Cloud Providers: Secure data storage and processing
- Analytics Services: App performance and user experience
- Customer Support: Communication and support tools
Third-Party Safeguards
- Contractual data protection requirements
- Regular security assessments
- Limited data access and usage rights
- Compliance with applicable privacy laws
🤝 Partner Responsibility: All third parties must meet our strict data protection standards.
9. Data Retention & Deletion
We retain your personal information only as long as necessary:
Retention Periods
Active Loan Data: Duration of loan term plus 7 years for regulatory compliance
Credit Information: 5 years from last transaction (industry standard)
Identity Verification: 5 years for anti-money laundering compliance
Marketing Preferences: Until you withdraw consent
Technical Logs: 90 days for security and troubleshooting
Automatic Deletion
- Data is automatically deleted when retention periods expire
- Secure deletion methods prevent data recovery
- Regular data purging schedules
- Documentation of deletion activities
🗂️ Data Minimization: We only keep data that is necessary for our legitimate business purposes.
10. Privacy Policy Updates
We may update this Privacy Policy to reflect changes in our practices or legal requirements:
How We Notify You
- Email notifications to registered users
- SMS alerts for significant changes
- In-app notifications and banners
- Website announcements
Your Options
- Review changes within 30 days of notification
- Contact us with questions or concerns
- Request account closure if you disagree
- Continued use implies acceptance of changes
📧 Stay Informed: We recommend reviewing this policy periodically for updates.
External Complaints
If you're not satisfied with our response, you may file a complaint with:
- Office of the Data Protection Commissioner
- Website: www.jkc.go.ke
- Email: info@jkc.go.ke
- Phone: +254 (0) 65 2628 900
Privacy Commitment
Your privacy and data security are fundamental to our business. We are committed to maintaining the highest standards of data protection.
This Privacy Policy is effective as of August 2, 2025, and applies to all Swift Loan services.