How we handle data, privacy and people.

Privacy Policy

1. Who we are

FinSense Africa Limited (“FinSense”, “we”, “us”) is a technology consultancy serving banks and financial institutions across Africa. Our registered office is at Westside Towers, 7th Floor, Office 702, Lower Kabete Road, Westlands, Nairobi, Kenya. For any privacy matter, contact sales@finsense.co.ke.

2. What data we collect

  • Contact and enquiry data: name, company, job title, email address, and phone number you submit through our contact, booking, business-case, or referral forms.
  • Referral data: if you refer a colleague to a FinSense service, we collect their name and business email address in order to send a single introduction email on your behalf.
  • Usage data: pages visited, approximate location, device and browser information, collected through analytics cookies.
  • Communication data: messages you send us via forms, email, chat, or WhatsApp.
  • Website assistant data: the name and work email you give our FiFi chat assistant to start a conversation, and the messages you exchange with it. See section 5.

3. How we use your data

  • To respond to enquiries and provide requested services.
  • To schedule calls and consultations you request.
  • To send a one-time service introduction to a colleague you refer, never more than once, and always with a clear way for them to decline further contact.
  • To improve our website and understand visitor interest.
  • To comply with legal and regulatory obligations.

4. Analytics, cookies, and chat tools

Where enabled, we use Zoho PageSense for website analytics and experience optimisation. We use Zoho Bookings for the booking dialog and GoHighLevel for the Book a Call page; website chat is handled by our own FiFi assistant. These tools may set cookies and process usage data on our behalf under their own safeguards. You can control cookies through your browser settings.

We also set one first-party cookie of our own, fs_attr, for marketing attribution. It records the marketing tags in the link that brought you here (UTM source, medium, campaign, term and content), the landing page and the referring site, and keeps them for 90 days so we can see which campaigns lead to enquiries. A later visit carrying new campaign tags replaces it; a visit without them leaves it in place. It holds no form data and does not identify you personally.

5. The FiFi website assistant

FiFi is our own chat assistant on this website. Before it answers anything, it asks for your name and a work email address; a personal address (Gmail, Yahoo, and the like) is rejected and cannot start a conversation. This is to keep the chat to real business contacts. Giving a name and email to start chatting does not, by itself, notify our sales team or create a lead.

While you chat, we store the messages exchanged and the identity and contact details you give the assistant (name, work email, and any company, role, or interest you share in the conversation). We do not store your IP address; a one-way, non-reversible hash of it is kept only to apply fair-use limits. Before your message reaches the assistant, text that looks like a card number, a Kenyan ID number, an API key, or a password or PIN is automatically detected and replaced with a placeholder rather than stored or passed on.

FiFi’s replies, and the searches it runs to ground them, are generated by third-party AI models reached through OpenRouter. As with other transfers described in section 7, this can mean your message is processed on infrastructure outside Kenya.

FiFi is set up to record you as a sales lead only when you give a work email, your company, and what you are trying to do, and only when you ask for or clearly invite follow-up, the same bar a contact form sets. A captured lead is emailed to our sales inbox and, where the integration is enabled, recorded in the same Zoho CRM pipeline described in section 6.

You can use the widget’s “Forget me” control at any time. This immediately and permanently deletes the conversation, the identity details you gave, and FiFi’s own record of any lead captured from it, and ends the session. A lead already emailed to our sales team or recorded in our CRM is not recalled automatically; email sales@finsense.co.ke to have it removed as well. Short of that, we run automatic cleanup that deletes assistant conversations and the related session data after 180 days.

6. How form submissions are handled

Forms on this website (enquiries, business-case requests, report downloads, referrals and newsletter signups) are submitted directly to this site and are not processed by a third-party form service. On submission we email the details to our sales inbox. Where the relevant integration is enabled, we also create a corresponding record in Zoho CRM, or add newsletter signups to Zoho Campaigns, so that we can respond and keep an accurate record of the request.

For gated report downloads we ask for your name and work email so we can send you a personal download link. That link expires after seven days. We use the details to send you the report you asked for and related FinSense insights; you can opt out at any time by contacting us.

7. Sharing and transfers

We do not sell personal data. We share it only with service providers who process it for us (hosting, analytics, email delivery, scheduling) under contractual safeguards, or where required by law. Where data is transferred outside Kenya, we ensure appropriate protections consistent with the Data Protection Act, 2019.

8. Retention

We keep personal data only as long as needed for the purposes above or as required by law. Referral records are retained to honour suppression requests (so a person who opts out is not contacted again). FiFi assistant conversations follow their own retention rule (see section 5).

9. Your rights

Under the Kenya Data Protection Act, 2019, you may request access to, correction of, or deletion of your personal data; object to processing; and lodge a complaint with the Office of the Data Protection Commissioner. To exercise any right, email sales@finsense.co.ke.

10. Changes

We may update this policy from time to time. Material changes will be reflected on this page with a new “last updated” date.