Privacy Policy
Last updated: 1 January 2026
Your privacy matters to us. Linkage Loans Agency is committed to protecting your personal data and complying with the Kenya Data Protection Act 2019. This policy explains what we collect, why we collect it, how we use it, and your rights as a data subject.
1. Who We Are
Linkage Loans Agency ("we", "us", "our") is a loan intermediary operating in Kenya. We act as a data controller for the personal information you provide to us when applying for a logbook loan through our website, WhatsApp channel, or directly through our agents.
Contact for data queries: info@linkageloans.co.ke | +254 794 795 290
2. What Personal Data We Collect
We collect the following categories of personal data:
| Category | Examples | How Collected |
|---|---|---|
| Identity data | Full name, National ID number, Passport number, KRA PIN, photograph | Application form, WhatsApp, in-person |
| Contact data | Phone number, email address, physical address | Application form, WhatsApp |
| Financial data | Bank account details, M-Pesa statements, payslips, employment status | Documents submitted with application |
| Vehicle data | Car make, model, year, registration number, logbook details | Application form, logbook document |
| Transaction data | Loan amount, repayment history, dates | Generated during loan processing |
| Technical data | IP address, browser type, pages visited (website analytics only) | Automatically via website cookies |
3. How We Use Your Data
We use your personal data for the following purposes:
- Loan processing: To assess your eligibility, verify your identity and vehicle ownership, and facilitate the loan agreement with our Lender partners.
- Communication: To contact you about your application status, repayment schedules, and any account matters.
- Legal compliance: To meet obligations under the Kenya Data Protection Act 2019, the Central Bank of Kenya guidelines, and anti-money laundering (AML) requirements.
- Credit assessment: To submit information to or retrieve information from the Credit Reference Bureau (CRB) as permitted by law.
- Service improvement: Anonymised, aggregated data may be used to improve our services. This data cannot identify you.
We do not use your data for unsolicited marketing, nor do we sell your data to third parties for their own commercial use.
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance: Processing necessary to assess and fulfil your loan application.
- Legal obligation: Processing required to comply with Kenyan law (e.g. AML, CRB reporting).
- Consent: Where you have given explicit consent, such as for sending you follow-up communications. You may withdraw consent at any time.
- Legitimate interests: For fraud prevention and business analytics, where such interests are not overridden by your rights.
5. Who We Share Your Data With
We may share your personal data with the following parties:
- Lender partners: Licensed financial institutions who provide the actual loan funds. They process data under their own privacy policies.
- Vehicle valuation providers: Professional valuers engaged to assess your vehicle. They receive only the information necessary for valuation purposes.
- NTSA (National Transport and Safety Authority): To verify logbook ownership and vehicle details.
- Credit Reference Bureaus (CRB): As required by law for credit assessment and reporting of defaults.
- Legal or regulatory authorities: Where required by law, court order, or regulatory request.
We do not transfer your personal data outside Kenya except where strictly necessary for the services above and with appropriate safeguards in place.
6. How Long We Keep Your Data
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
- Loan application data (successful): 7 years from loan closure (in line with Kenyan financial record-keeping requirements).
- Loan application data (unsuccessful/declined): 12 months from the date of decision.
- Communications (WhatsApp, email): 3 years from last contact.
- Website analytics data: 12 months on a rolling basis (anonymised).
After these periods, data is securely deleted or anonymised.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:
- Encrypted storage of digital records.
- Access controls limiting data access to authorised personnel only.
- Secure disposal of physical documents.
- Regular review of our data security practices.
While we take all reasonable precautions, no data transmission or storage system is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.
8. Cookies
Our website uses minimal cookies for essential functionality only (e.g. remembering your preferences within a session). We do not use advertising or tracking cookies. By using our website, you consent to the use of essential cookies as described here.
9. Your Rights Under the Data Protection Act 2019
As a data subject under Kenyan law, you have the following rights:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to correction: You may request that inaccurate or incomplete data be corrected.
- Right to deletion: You may request that we delete your data, subject to legal retention requirements.
- Right to object: You may object to our processing of your data in certain circumstances.
- Right to data portability: You may request your data in a structured, machine-readable format.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@linkageloans.co.ke or call +254 794 795 290. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:
- Email: info@linkageloans.co.ke
- Phone / WhatsApp: +254 794 795 290
- Location: Nairobi, Kenya