1. Introduction
This Privacy Policy describes how KitBank PLC and its affiliates ("KitBank") collect, use, disclose, and safeguard personal information when you access our website, mobile applications, agent portal, insurance products, APIs, and related services (collectively, the "Services").
By registering for an account, using our Services, or otherwise providing personal information to us, you acknowledge that you have read and understood this policy. If you do not agree, please discontinue use of the Services.
This policy should be read together with our Terms of Service, Cookie Policy, and Security Policy.
2. Who we are (data controller)
For the purposes of applicable data protection laws, KitBank PLC acts as the data controller for personal information processed through the Services, except where we act as a processor on behalf of a partner (e.g., certain insurance underwriting partners), in which case their privacy notice will apply in addition to this policy.
- Registered entity: KitBank PLC
- Privacy inquiries: [email protected]
- Data Protection Officer: [email protected]
- General support: Contact page
3. Information we collect
We may collect the following categories of personal information:
Identity & profile
Full name, date of birth, nationality, government-issued identification numbers, photographs, signatures, and KYC verification results.
Contact information
Email address, phone number, mailing address, and preferred language.
Financial information
Account numbers, transaction history, balances, payment instructions, loan and insurance application data, credit assessments, and tax-related identifiers where required by law.
Technical & usage data
IP address, device identifiers, browser type, operating system, app version, log files, session timestamps, and interaction data with our Services.
Communications
Support tickets, chat transcripts, call recordings (where permitted), feedback, and marketing preferences.
4. How we collect information
- Directly from you when you register, complete KYC, initiate transactions, purchase insurance, file claims, or contact support.
- Automatically through cookies, analytics, fraud monitoring, and security logging when you use our apps or website.
- From agents when you are onboarded or assisted by an authorized KitBank field agent (with your consent where required).
- From third parties such as identity verification providers, credit bureaus, payment networks, mobile money operators, and regulatory databases, strictly for permitted purposes.
5. How we use your information
We use personal information to:
- Provide, operate, and maintain your KitBank accounts and Services;
- Process payments, transfers, deposits, withdrawals, and bill payments;
- Underwrite, issue, and service insurance policies and process claims;
- Verify identity, prevent fraud, and comply with anti–money laundering (AML) obligations;
- Calculate risk, pricing, and creditworthiness where applicable;
- Communicate service updates, security alerts, and regulatory notices;
- Improve our products through analytics and aggregated reporting;
- Enforce our terms and protect the rights, property, and safety of KitBank and users;
- Send marketing communications where you have opted in (you may opt out at any time).
6. Legal bases for processing
Where the General Data Protection Regulation (GDPR) or similar laws apply, we rely on one or more of the following legal bases:
- Contract: processing necessary to perform our agreement with you;
- Legal obligation: compliance with banking, insurance, and tax laws;
- Legitimate interests: fraud prevention, security, and service improvement (balanced against your rights);
- Consent: for optional marketing, certain cookies, and specific data uses where consent is required.
8. International data transfers
KitBank may process and store information in countries other than your country of residence. Where we transfer personal data internationally, we implement appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other mechanisms recognized under applicable law.
9. Data retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, including satisfying legal, regulatory, accounting, and reporting requirements. Retention periods vary by data type—for example, transaction records may be kept for seven (7) years or longer where required by financial regulations.
When data is no longer required, we securely delete or anonymize it in accordance with our retention schedule.
10. Security measures
We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS 1.2+), access controls, multi-factor authentication options, continuous monitoring, and regular security assessments. No method of transmission over the Internet is 100% secure; we encourage you to use strong passwords and enable biometric login where available.
See our Security Policy for more detail.
11. Your privacy rights
Depending on your jurisdiction, you may have the right to:
- Access and receive a copy of your personal data;
- Correct inaccurate or incomplete information;
- Request deletion of data (subject to legal retention obligations);
- Restrict or object to certain processing;
- Data portability where technically feasible;
- Withdraw consent for processing based on consent;
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact [email protected] or use in-app privacy settings. We will respond within the timeframe required by applicable law (typically within 30 days).
12. Children's privacy
KitBank Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us and we will take steps to delete it promptly.
14. Third-party links and services
Our Services may contain links to third-party websites or integrations (e.g., open banking partners). We are not responsible for the privacy practices of those third parties. We encourage you to review their policies before providing personal information.
15. Insurance and financial products
When you purchase insurance through KitBank, we and our insurance microservice may process additional information related to underwriting, policy administration, premium payments, claims, and document uploads. Insurance data is shared only with authorized insurers, adjusters, and regulators as necessary to service your policy.
16. Agent-assisted services
If you interact with a KitBank authorized agent, the agent may collect or log information on your behalf (e.g., assisted registration, insurance sale sessions, field claim assistance). Agents are contractually required to handle data confidentially and only for KitBank-approved purposes.
17. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email, in-app notification, or a prominent notice on our website. The "Last updated" date at the top indicates when this policy was last revised. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.
18. Contact us
For privacy-related questions, requests, or complaints, contact:
