Privacy Policy for ASAP Credit Limited
This Privacy Policy explains how we collect, use, store, and protect personal data across our services, including KYC-related records, and how you can exercise your rights under applicable Kenyan data protection law.
Section 1
Introduction
This Privacy Policy explains how ASAP Credit Limited ("ASAP Credit Limited", "we", "us", "our") collects, uses, stores, and protects personal data in the course of providing our services, including maintaining KYC Records. It also explains your rights as a data subject and how to contact us with questions or concerns.
We treat customer and staff privacy, including business dealings, as highly confidential, and our management is committed to safeguarding personal information supplied by clients and employees.
Section 2
Who we are and how to contact us
If you have any questions about this Privacy Policy or how we handle your personal data, contact us:
Section 3
Purpose and scope
This policy confirms ASAP Credit Limited's commitment to protecting personal data. We do not share personal data with third parties unless permitted by this policy, required by law, or where you request or apply for a product or service that requires such sharing.
This policy applies to personal data we process in the course of our regular business operations and governs the actions of our employees and relevant partners who support our operations.
Section 4
Personal data we collect
To provide our services and maintain KYC Records, we may collect and process personal information from you and from lawful public sources such as registers and public records.
Personal data may include information that identifies you, such as:
Name
Gender
Date of birth
Contact details
Other relevant identifiers needed for the services requested
Section 5
Why we collect and use personal data
We collect and use personal data to provide or carry out the services you request and for the purposes described in this notice. We process personal data based on:
Our legitimate business interests in operating and managing our business; and/or
Legal obligations under applicable laws and regulations.
Section 6
How we process personal data
In compliance with applicable law, personal data may be processed manually and electronically for the purposes stated above. We restrict access to authorized ASAP Credit Limited personnel and approved service providers, who are assigned and trained to handle data only according to our instructions.
We do not share personal data with third parties unless explicitly authorized at the time you apply for a product or service, or as otherwise permitted under this policy or required by law.
Section 7
Storage and retention
We keep personal data only as long as necessary, taking into account the data source, relevance to processing purposes, legitimate business needs, legal requirements, and applicable national and international regulations.
Section 8
Data security
We take reasonable and appropriate measures to safeguard personal data and maintain confidentiality. Data transmitted to us may be protected using encryption in transit, for example SSL/TLS where applicable, and we implement organizational and technical access controls.
Section 9
When we may disclose personal data
ASAP Credit Limited does not rent or sell personally identifiable information. We may disclose personal data only when:
We have received your consent to disclose such information; or
We are mandated by law; or
We must respond to court orders, subpoenas, or similar legal processes; or
You participate in activities or behavior that violate our privacy policy; or
Not disclosing the information could be detrimental to our interests, for example fraud prevention or protecting legal rights.
Section 10
Your rights as a data subject
Subject to applicable data protection law, including the Data Protection Act, 2019, you may have rights to:
Access information about your data
Correct inaccurate data
Restrict processing
Request deletion, subject to lawful exceptions
Object to processing where applicable
Data portability where applicable
To exercise your rights, use the contact details above. We may request proof of identity, such as a copy of your ID or passport, before fulfilling requests.
Section 11
Complaints
You may lodge a complaint with the relevant data protection authority. In Kenya, the Office of the Data Protection Commissioner (ODPC) is the competent authority.
Section 12
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on our website and will take effect when published.

