INTRODUCTION

 

This privacy statement explains how and why the Central Bank of Kenya collects, stores, uses, and/or shares (‘process’) your information when you use our services (DhowCSD), such as when you;

• Visit our Investor Portal (https://dhowcsd.centralbank.go.ke), or any website of ours that links to this privacy statement

• Download and use our mobile application (DhowCSD), or any other application of ours that links to this privacy statement

• Engage with us in other related ways

 

 

SUMMARY OF KEY POINTS

 

What personal information do we process? When you visit, use, or navigate our services, we may process personal information depending on how you interact with Central Bank of Kenya and the service.

 

How do we process your information? We process your information to provide, improve, and administer our services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

 

Do we receive any information from third parties? We do not receive any information from third parties.

 

In what situations and with which parties do we share personal information? We do not share any personal information with third parties

 

How do we keep your information safe? We have organisational and technical processes and procedures in place to protect your personal information.

 

 

 

1. WHAT INFORMATION DO WE COLLECT?

 

We collect personal information that you provide to us when you register for the DhowCSD service or when you contact us.

 

Personal Information Provided by You.  The personal information we collect include the following:

• Name

• Phone number

• Physical & email addresses
• Date of Birth & age
• Identity document type and number
• Photograph
• Bank Details
• Username

 

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

 

2. HOW DO WE PROCESS YOUR INFORMATION?

 

We process your information to provide, improve, and administer our services, communicate with you, for security and fraud prevention, and to comply with law.

 

We process your personal information to facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.

 

3. WHAT LEGAL BASIS DO WE RELY ON TO PROCESS YOUR INFORMATION?

 

We only process your personal information when we believe it is necessary and when we have a valid legal reason/basis to do so under the applicable law (To comply with the applicable laws, to provide you with service, to enter into or fulfil our contractual obligations, to protect your rights, or to fulfil our legitimate business interests).

 

4. HOW LONG DO WE KEEP YOUR INFORMATION?

 

We keep your information for as long as necessary to fulfil the purposes outlined in this privacy statement unless otherwise required by law.

 

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy statement unless a longer retention period is required or permitted by law.

 

Should we no longer need to process your personal information, we will either delete or anonymise such information, or securely store your personal information and isolate it from any further processing until deletion is possible.

 

5. HOW DO WE KEEP YOUR INFORMATION SAFE?

 

We aim to protect your personal information through organisational and technical security measures.

 

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. Although we will do our best to protect your personal information, transmission of personal information to and from our service is at your own risk. You should only access the service within a secure environment.

 

6. DO WE COLLECT INFORMATION FROM MINORS?

 

We do not provide the DhowCSD service to any person below the age of 18 years of age. By using the service, you represent that you are at least 18 years of age.

 

7. UPDATES TO THE PRIVACY STATEMENT

 

We may update this privacy statement from time to time as necessary to stay compliant with the relevant laws. The updated version will be effective as soon as it is accessible. If we make material changes to this privacy statement, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy statement frequently to be informed of how we are protecting your information.

 

 

8. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

 

You have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please contact us through the contact details provided below.

 

9. HOW TO CONTACT US?

 

If you have questions or comments about this statement, you may contact us through the contact details below:

 

Central Bank of Kenya

Haile Selassie Avenue

Nairobi, Nairobi 00200

Kenya

 

+254 20 286 0000

comms@centralbank.go.ke