Effective Date: 31/12/2024
This Privacy Policy is issued in accordance with the Data Protection Act, 2019 (Kenya) and applicable regulations. It explains how Zilla Capital Limited (“Zilla Capital”, “we”, “our”, “us”) collects, uses, processes, stores, and protects personal data.
By accessing our website, applying for financing, or using our services, you consent to the practices described in this Privacy Policy.
1. Scope of This Policy
This Privacy Policy applies to:
- Customers and prospective customers
- Website and digital platform users
- Business partners, guarantors, and suppliers
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Identification Data
- Full name
- National ID / Passport number
- Date of birth
- Photograph (where required)
2.2 Contact Information
- Phone number
- Email address
- Physical and postal address
2.3 Financial & Credit Information
- Bank and mobile money statements
- Income and employment/business details
- Credit history and repayment records
- Credit Reference Bureau (CRB) data
2.4 Technical & Usage Data
- IP address
- Device and browser information
- Website usage data and cookies
3. Legal Basis for Processing
We process personal data based on one or more of the following lawful grounds:
- Consent provided by the data subject
- Performance of a contract
- Compliance with legal or regulatory obligations
- Legitimate business interests
- Prevention of fraud and financial crime
4. Purpose of Data Processing
Personal data is processed to:
- Assess loan and financing applications
- Perform credit risk analysis
- Disburse funds and manage repayments
- Communicate with customers
- Comply with CBK, CRB, and statutory requirements
- Improve products and customer experience
- Prevent fraud, misuse, and unlawful activity
5. Data Sharing & Disclosure
We do not sell personal data.
Data may be shared with:
- Credit Reference Bureaus
- Banks, mobile money providers, and payment processors
- Regulatory and law enforcement authorities
- Professional advisors and service providers under confidentiality obligations
All disclosures are conducted lawfully and securely.
6. Cross-Border Data Transfers
Where personal data is transferred outside Kenya, Zilla Capital ensures adequate safeguards are in place in accordance with the Data Protection Act, 2019.
7. Data Security Measures
We implement appropriate:
- Administrative safeguards
- Technical controls
- Physical security measures
to protect personal data from unauthorized access, loss, or misuse.
8. Data Retention
Personal data is retained only for as long as necessary to:
- Fulfill contractual and legal obligations
- Meet regulatory requirements
- Resolve disputes
Thereafter, data is securely deleted or anonymized.
9. Data Subject Rights
Under Kenyan law, you have the right to:
- Be informed about data processing
- Access your personal data
- Request correction or deletion
- Object to processing
- Withdraw consent
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)
10. Data Subject Access Request (DSAR)
You may formally request access to, correction of, or deletion of your personal data by submitting a Data Subject Access Request (DSAR).
How to Submit a DSAR
Please provide:
- Full name
- National ID or Passport number
- Nature of request (access, correction, deletion)
- Supporting identification documents
Requests should be sent to:
Email: info@zilla.co.ke
Phone: +254 785 400 800
Zilla Capital will respond within the statutory timeframe as prescribed under Kenyan law.
11. Cookies & Tracking Technologies
We use cookies to improve website functionality and analytics. Users may manage cookie preferences through their browser settings.
12. Amendments
Zilla Capital reserves the right to amend this Privacy Policy at any time. Updated versions will be published on our website.
13. Contact Information
Zilla Capital Limited
Email: info@zilla.co.ke
Phone: +254 785 400 800
Address:Western Heights, Karuna Rd Westlands, Nairobi Kenya