Privacy Policy

1. Who We Are

OnePay Credit Limited is a licensed financial services provider registered and operating in Kenya. We provide the following financial products and services:

• Logbook Loans: Secured loans using your vehicle logbook as collateral
• Asset/Car Financing: Financing solutions for vehicle purchases
• Loan Buy-Offs: Refinancing of existing loans from other lenders

Head Office:
Adlife Plaza, 2nd Floor, Nairobi, Kenya

Branch Office:
Nation Center, 7th Floor, Kimathi Street, Nairobi, Kenya

2. Information We Collect

We collect the following types of information:

2.1 Personal Identification Information

• Full name
• National ID number
• KRA PIN
• Date of birth
• Gender
• Passport-size photograph

2.2 Contact Information

• Phone number(s)
• Email address
• Physical/residential address
• Workplace address

2.3 Financial Information

• Bank account details
• M-Pesa statements
• Bank statements
• Income information
• Employment details
• Existing loan information

2.4 Vehicle Information

• Vehicle logbook details
• Vehicle registration number
• Vehicle make, model, and year
• Vehicle valuation
• Insurance details

2.5 Technical Information

• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited on our website
• Time and date of visits

2.6 Information from Lead Generation Forms

When you submit an inquiry through our social media advertising (Facebook, Instagram), we collect:

• Name (as provided or from your social media profile)
• Phone number
• Email address
• Service interest (Logbook Loan, Car Financing, or Loan Buy-Off)
• Vehicle ownership status
• Loan amount required
• Any other information you voluntarily provide

3. How We Collect Information

We collect information through the following methods:

3.1 Direct Collection

• Loan application forms (online and physical)
• Phone calls with our customer service team
• In-person visits to our offices
• Email correspondence
• WhatsApp communication

3.2 Social Media and Advertising Platforms

• Facebook Lead Forms (Instant Forms)
• Instagram Lead Forms
• WhatsApp Business inquiries
• Social media messages and comments

3.3 Automated Collection

• Cookies on our website
• Analytics tools (e.g., Google Analytics, Meta Pixel)
• Server logs

3.4 Third-Party Sources

• Credit Reference Bureaus (where applicable)
• Vehicle valuation services
• Identity verification services
• Other financial institutions (for buy-off services)

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Service Delivery

• Process and evaluate your loan application
• Verify your identity and eligibility
• Assess your creditworthiness
• Disburse approved loan funds
• Manage your loan account
• Process repayments

4.2 Communication

• Contact you regarding your inquiry or application
• Send loan-related notifications (statements, reminders)
• Respond to your questions and requests
• Provide customer support

4.3 Marketing (With Your Consent)

• Send promotional offers about our products
• Inform you about new services
• Share relevant financial tips and information

You can opt out of marketing communications at any time by contacting us or clicking "unsubscribe" in our emails.

4.4 Legal and Regulatory Compliance

• Comply with applicable laws and regulations
• Report to regulatory authorities as required
• Prevent fraud and money laundering
• Enforce our terms and conditions

4.5 Business Operations

• Improve our products and services
• Analyze trends and user behavior
• Train our staff
• Conduct internal audits

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: When you submit an inquiry or application, you consent to our processing of your data.
• Contract: Processing is necessary to fulfill our loan agreement with you.
• Legal Obligation: We are required by law to collect and retain certain information.
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as fraud prevention and service improvement.

6. Information Sharing and Disclosure

We respect your privacy and do not sell your personal information. However, we may share your information with:

6.1 Service Providers

• Vehicle valuers
• Insurance providers
• Payment processors
• SMS and communication service providers
• IT and cloud service providers

6.2 Regulatory and Legal Authorities

• Central Bank of Kenya (where applicable)
• Kenya Revenue Authority
• Law enforcement agencies (when legally required)
• Courts of law (in case of legal proceedings)

6.3 Credit Reference Bureaus

We may share your loan performance data with licensed Credit Reference Bureaus in Kenya as required by law.

6.4 Business Partners

In the case of loan buy-offs, we may communicate with your existing lender to facilitate the transfer of your loan.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure servers and encrypted data transmission
• Access controls limiting who can view your data
• Regular security assessments and audits
• Staff training on data protection
• Secure physical storage of documents
• Password protection and authentication systems

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practical standards.

8. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Retention Periods:

• Loan records: 7 years after loan closure (as required by Kenya law)
• Unsuccessful applications: 2 years
• Marketing inquiries: 1 year (unless you become a customer)
• Website analytics: 26 months

9. Your Rights

Under the Kenya Data Protection Act, 2019, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal obligations).
• Right to Restrict Processing: Request limitation on how we use your data.
• Right to Data Portability: Request transfer of your data to another provider.
• Right to Object: Object to processing for marketing purposes.
• Right to Withdraw Consent: Withdraw your consent at any time.

To exercise any of these rights, please contact us using the details in Section 15.

10. Cookies and Tracking Technologies

Our website and advertising use cookies and similar technologies:

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements

10.2 Meta (Facebook) Pixel

We use Meta Pixel to:

• Measure the effectiveness of our advertising
• Understand actions taken on our website
• Build targeted audiences for future ads

You can control ad preferences through your Facebook/Instagram settings or opt out through the Digital Advertising Alliance.

10.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

11. Third-Party Links

Our website and advertisements may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.

13. International Data Transfers

Your information is primarily stored and processed in Kenya. If we transfer data internationally (e.g., to cloud service providers), we ensure appropriate safeguards are in place to protect your information in compliance with the Kenya Data Protection Act.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on our website
• Update the "Last Updated" date
• Notify you of significant changes via email or SMS (where possible)

We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: