BranchLoan

Privacy Policy

Last Updated: July 18, 2026

1. Overview

BranchLoan ("we", "us", "our") is committed to protecting the privacy and confidentiality of our applicants' personal and business details. We operate in full compliance with the Kenya Data Protection Act, 2019, and are registered with the Office of the Data Protection Commissioner (ODPC) in Kenya.

2. Sensitive Personal Data We Collect

To evaluate your loan application and fulfill our regulatory KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements, we collect the following sensitive personal and business data:

  • National Identity (ID) Number: Used to confirm identity and run essential credit evaluations.
  • M-Pesa / Mobile Phone Number: Used to process administrative payments, send STK push prompts, issue status alerts, and perform disbursement.
  • Business Category & Location: County, town, and type of small business to assess regional lending profiles and business legitimacy.

3. How Your Information is Used

Your collected information is strictly used for the following purposes:

  • Verifying the identity of the applicant and avoiding fraudulent registrations.
  • Processing the loan application and routing payments via M-Pesa, secured through our payment partner Grover Commerce.
  • Allowing the administrative console of BranchLoan to process, review, approve, or reject applications.
  • Providing transactional and compliance notifications.

4. Data Sharing and Security

We do not share, sell, or rent your National ID number or phone number to third-party advertisers. Data is shared only with certified payment service providers (like Grover Commerce) to complete your requested transactions, or where required under Kenyan law or court directives. We use robust encryption protocols and store details securely to prevent unauthorized access.

5. Your Data Protection Rights

Under the Kenya Data Protection Act, you have the right to request access to your personal details, demand corrections to inaccurate information, or request the deletion of your personal details, subject to our statutory record-keeping obligations as a digital credit facilitator.

6. Contact Our Data Protection Officer

For any queries or concerns regarding this policy, please reach out directly to our Data Protection Officer at privacy@branchloans.co.ke.