This website uses cookies to improve your experience. By continuing, you consent to their use. View Cookie Consent | Data Privacy Statement

Off Shell Petrol Station, Behind Chief's Camp (Embu) info@bimaskenya.com info@bimaskenya.com

Data Privacy Statement

DATA PRIVACY STATEMENT

Introduction

This Privacy Statement relates to the collection, use and disclosure of personal data, including sensitive personal data, by Bimas Kenya Limited (hereinafter “BKL”).

This privacy statement aims to give you complete and transparent information on how BKL processes your personal data. We are committed to ensure that your personal data is processed in a way that is compatible with the specified, explicit, and legitimate purpose of data collection.

The personal data includes any information used to identify directly or indirectly, a natural person or a legal person. Examples include your name and address, and information such as your income.

Sensitive personal data includes data revealing your race, health status, ethnic origin, conscience, belief, genetic data, biometric data.

Processing data means anything that can be done with personal data. This includes the collection, storage, use, transfer, and removal of data.

Collection of data.

BKL will only collect personal data with your knowledge and consent with exception to cases where processing of the data is permitted by law.

The people whose personal data we collect include:

  • Existing customers.
  • Customers who show an interest of BKL products and services through online, or any of our branches or with any of our agents.
  • Security providers and guarantors
  • Next of kin or beneficiary of our customer or employee.
  • People who visit, access or use any of our websites.
  • Subscribers to any of our online services, Short Message Service (SMS), email or social media sites.

We may also collect your information from other organizations including credit reference bureaus, government agencies and fraud prevention agencies.

We may also collect sensitive personal data as per Data Protection Lawful basis.

The information we collect.

From our customers we may collect personal data that includes but is not limited to the following:

  • Identity information, including title, name, passport, marital status, nationality, occupation, residence, address, location, phone number, identity document type and number, date of birth, age, gender, email address.
  • Estimated monthly income levels.
  • Name of employer.
  • Information relating to bank account and other bank details.
  • Financial information to asses credit worthiness.
  • Family details, age, profiling information such as level of education.
  • Information as required by Know Your Client and/or Anti Money Laundering regulations and as part of our client intake procedures.
  • When you visit our websites, we collect your ID type information: cookie ID, mobile ID, IP address which is used for real-time processing in order to generate a visitor ID.

Purpose of data collected.

We may use personal data provided to us for any of the following purposes but not limited to:

  • Verifying your identity information through publicly available and/or restricted government databases to comply with applicable Know Your Customer (KYC) requirements.
  • Assessing the purpose and nature of your business or principal activity, your financial status and the capacity in which you are entering into the business relationship with us.
  • Identifying your source of income and similar information.
  • Creating a record of you on our system to verify your identity, provide you with the products and/or services you have applied for from us.
  • Communicate with and keep you informed about the products and/or services you have applied for.
  • Carrying out credit checks and credit scoring.
  • Fraud prevention, detection and investigation.
  • Keeping you informed generally about new products and services and contacting you with offers or promotions based on how you use our products and services unless you opt out of receiving such marketing messages.
  • For employees including contracted ones, we create an employment record of you on our system to facilitate continuous monitoring during your employment or contract with us.
  • For suppliers, we process personal data for due diligence, risk assessment, administrative and payment purposes.

Data Access.

Your personal data can be accessed only by individuals who need to have access owing to their role and for official business purposes. All these people are bound by a duty of confidentiality.

Data Retention.

BKL shall not preserve any personal information it holds beyond the period prescribed for preservation requirements, no matter the medium used.

Data Transfer.

BKL may transfer your personal data for the purpose of effecting, implementing, administering, and/or securing any product or service that you have applied for or for other purpose set out in this privacy statement. We also share data to comply with regulatory requirements, and to protect the rights and property of BKL and its customers.

Customer Data Rights

In line with the Data Protection Act 2019 and other applicable laws, regulations, industry guidelines, you have the following rights regarding your personal data:

a. Right to Access

You may ask through the branch manager to access all the information that we have and process in relation to you. The data protection office shall respond to such requests as stipulated by the law.

b. Right to restriction of processing

You may request that we restrict the personal data relating to you that we process. This means that we will process fewer personal data relating to you.

c. Right of erasure

You may request that we erase data concerning yourself that we have captured, for example, if you object to the processing of your personal data. Your interest must also be greater than the BKL’s interest in processing the data.

d. Right to Rectification

If you believe your personal data has been processed incorrectly or incompletely, you may request that we change or supplement the data.

e. Right to Data Portability

You have the right to request the BKL to supply you with data that you previously provided to BKL in the context of a contract with us or with your consent, in a structured, machine-readable format, or that we transfer such data to another party. If you ask us to transfer data directly to another party, we can do this only if this is technically feasible.

Third Party Data Sharing

BKL may share your personal data with the following third parties and such disclosures will be done in accordance with the law and, where necessary, with your consent:

a. Credit Rating Bureaus: Your credit information may be shared with licensed Credit Rating Bureaus.

b. Service Providers: Your personal information may be disclosed to our service providers where necessary to provide certain services to you or to protect the legitimate interests of BKL.

c. The Government and Government Agencies: Your personal data may be shared with law enforcement agencies, revenue collection agencies and other regulatory bodies where such disclosure is mandated by the law.

BKL will not, under any circumstances share with, or sell your personal data to, any third party for marketing purposes and you will not receive offers from other companies or organizations as a result of sharing your personal data with us.

How to Contact Us

If you have any questions concerning the processing of personal data by us, please contact your Branch Manager or Branch with which you do business. In the case of matters concerning the exercising of your rights and other questions about the processing of your personal data kindly contact us on dataprotection@bimaskenya.com or through our official communication channels.

Changes to our Privacy Statement

We reserve the right to amend this privacy statement at any time. All amendments to this privacy statement will be posted on the website. Unless otherwise stated, the current version shall supersede and replace all previous versions of this privacy.