FinSenseFINSENSEAFRICA

How we handle data, privacy and people.

Data ProtectionPrivacy PolicyRecruitment Policy

Data Protection Statement

1. Our commitment

FinSense Africa Limited processes personal data lawfully, fairly, and transparently, in line with the Kenya Data Protection Act, 2019 and, where applicable, the data protection laws of the markets in which our clients operate. As a technology partner to regulated financial institutions, we hold ourselves to the same standard of data stewardship our clients are held to. FinSense is registered with the Office of the Data Protection Commissioner (ODPC) as both a data controller and a data processor.

2. Principles we apply

  • Purpose limitation: data is collected for specified, explicit purposes and not reused incompatibly.
  • Data minimisation: we collect only what each purpose requires.
  • Accuracy: we keep personal data accurate and up to date, correcting it on request.
  • Storage limitation: data is retained no longer than necessary.
  • Integrity and confidentiality: data is protected with technical and organisational measures appropriate to its sensitivity.

3. Client engagements

Where FinSense processes personal data on behalf of a client (for example during a core banking implementation, data migration, or support engagement), we act as a data processor under a written agreement that defines the scope, security controls, and permitted use of that data. Client production data is never used for any purpose beyond the engagement.

4. Security measures

  • Role-based access control and least-privilege access.
  • Multi-factor authentication for administrative systems.
  • Encryption of data in transit.
  • Vendor due-diligence for sub-processors.
  • Security testing informed by our own VAPT practice.

5. Third-party referrals

Our website allows a visitor to refer a colleague to a FinSense service. When this happens we process the referred person's name and business email solely to send one introduction email, which identifies who referred them and includes a one-click way to decline further contact. Declined addresses are suppressed from any future referral sends.

6. Breach response

In the event of a personal data breach we will assess, contain, and where required notify the Office of the Data Protection Commissioner and affected data subjects within the timelines prescribed by law.

7. Contact

Questions about this statement or our data handling practices: sales@finsense.co.ke.