Privacy Policy

Signature Capital ("we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with the Data Protection Act, 2019 of Kenya and other applicable data protection legislation. This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information.

1. Information We Collect

We may collect and process the following categories of personal information:

Identity Data: Full name, national identification number (ID/Passport), date of birth, gender, and photograph.
Contact Data: Email address, phone number, postal address, and physical location.
Financial Data: Bank account details, mobile money account information, income records, credit history, and transaction data.
Business Data: Business registration details, company records, KRA PIN, tax compliance certificates, financial statements, and operational records.
Technical Data: IP address, browser type, operating system, device information, and usage data collected through cookies and similar technologies.
Location Data: GPS coordinates and physical premises location used for verification and due diligence purposes.
Document Data: Copies of identification documents, contracts, invoices, payslips, logbook details, and other supporting documentation you provide.

2. How We Use Your Information

We use personal data for the following purposes:

Processing and evaluating loan, insurance, guarantee, and leasing applications.
Conducting credit assessments, affordability checks, and risk profiling.
Verifying your identity, business operations, and financial standing.
Communicating with you about your applications, accounts, and services.
Managing loan disbursement, repayment collection, and account servicing.
Detecting and preventing fraud, money laundering, and other financial crimes.
Complying with legal, regulatory, and reporting obligations under Kenyan law.
Improving our website, products, and customer experience.
Sending service-related notifications and, where consent is given, marketing communications.

3. Legal Basis for Processing

We process personal data on the following legal bases:

Consent: Where you have given us explicit consent to process your data for specific purposes.
Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legal Obligation: Where we are required to process data to comply with applicable law or regulatory requirements.
Legitimate Interest: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights.

4. Data Sharing

We may share your personal data with the following categories of recipients:

Credit reference bureaus (CRBs) as required by regulation.
Insurance underwriters, reinsurers, and claims handlers relevant to your policy.
Regulatory authorities, government agencies, and law enforcement where required by law.
Legal advisers, auditors, and professional service providers engaged by Signature Capital.
Technology and service providers who support our operations under strict contractual obligations.
Debt collection agents and repossession agents where facility agreements permit escalation.

We do not sell your personal data to third parties.

5. Data Security

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted storage, access controls, secure transmission protocols, and regular security assessments. While we strive to protect your data, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. Retention periods depend on the nature of the data, the purpose of processing, and applicable legal requirements.

7. Your Rights

Under the Data Protection Act, 2019, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data where there is no overriding legal basis for retention.
Object to processing based on legitimate interests or for direct marketing purposes.
Request restriction of processing in certain circumstances.
Withdraw consent where processing is based on consent.
Lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be communicated through our website or directly where appropriate. We encourage you to review this policy regularly.

9. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at info@signaturecapital.co.ke or visit our contact page.