01About This Policy
This Privacy Policy explains how SISCOM Technology Limited (“SISCOM”, “we”, “us”) collects, uses, shares, stores and protects personal data when you use our website and platform, apply to us for financing, join or invest through our investor platform, or otherwise deal with us. It is given under the Data Protection Act, 2019 and its regulations (together, the “Act”).
This Policy covers Clients (businesses that apply for or receive financing, and the directors, owners and representatives named in their applications), Investors (people and entities that join our waitlist or invest through our platform) and Visitors (anyone who browses our website).
By using our website or platform, or by giving us your information, you acknowledge this Policy.
02Who Is Responsible For Your Data
SISCOM Technology Limited is the data controller for the personal data described in this Policy. You can contact us about privacy matters through the contact page on our website.
You may also complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
03Personal Data We Collect
Depending on how you deal with us, we may collect:
- identity and contact details;
- business and ownership information;
- financial and know-your-customer information needed to assess and manage your dealings with us;
- account, payment and transaction information; and
- information you give us in forms, enquiries and communications.
We collect only what we reasonably need for the purposes in section 5.
04How We Collect It
We collect personal data directly from you, from people who act for you, and from the forms, documents and payments you submit through our platform.
With your consent, we may obtain credit information from licensed credit reference bureaus, and we may screen applicants, directors and owners against sanctions and anti-money-laundering lists.
05Why We Use It
- to assess and decide applications and to provide and manage facilities and investments;
- to verify identity and carry out legally required checks;
- to process payments and issue statements;
- to run and secure our website and platform, and to prevent fraud;
- to respond to your enquiries and communicate with you about your dealings with us;
- to meet our legal, regulatory and record-keeping duties; and
- to send you information you have asked for, or marketing where you have agreed to receive it.
06Who We Share It With
We share personal data only where needed for the purposes in section 5, and only with:
- service providers who help us run our platform, process payments, verify identity and carry out checks, under confidentiality obligations;
- credit reference bureaus and screening providers;
- professional advisers, auditors and insurers;
- third parties involved in delivering a financed project, to the extent needed; and
- regulators, law enforcement and other authorities where the law requires.
We do not sell personal data.
07Where Your Data Is Kept
We store personal data securely and prefer to keep it in Kenya. If data is transferred outside Kenya, we do so only as the Act permits and with appropriate safeguards.
08How Long We Keep It
We keep personal data only for as long as we need it for the purposes in this Policy or as the law requires.
When the retention period ends we securely delete or anonymise the data.
09How We Protect It
We use appropriate technical and organisational measures to protect personal data, including access controls and confidentiality obligations.
If a data breach occurs, we will respond promptly, notify the ODPC and affected individuals where the Act requires, and take steps to limit harm.
No system is completely secure. Please keep your login details private and tell us at once if you think someone else has used your account. We will never ask for your PIN or banking passwords.
10Your Rights
Under the Act you have the right to:
- be informed about how your data is used;
- access your personal data;
- ask us to correct inaccurate or incomplete data;
- ask us to delete data we no longer need or are not entitled to keep;
- object to, or ask us to restrict, certain uses of your data;
- receive your data in a portable format where applicable; and
- withdraw consent at any time, without affecting use already made.
To use these rights, contact us through our contact page. We may need to confirm who you are first, and we may have to keep some records the law requires us to keep.
11Cookies
Our website uses only essential cookies, which are needed for it to work and stay secure.
12Information About Other People
If you give us information about other people, such as directors, owners or customers, you confirm that you are entitled to do so and that you have told them, where the law requires, that we will use it as described in this Policy.
13Children
Our platform is not intended for anyone under 18, and we do not knowingly collect their personal data.
14Changes To This Policy
We may update this Policy from time to time. The current version is always available on our website, and we will tell you about material changes.
Questions? Reach us through our contact page
All legal documents