Data Privacy Statement

Data Privacy Statement

Privacy and security statement

Liberty Kenya Holdings Plc (Liberty Kenya) is a subsidiary of Liberty Holdings, a member of the Standard Bank Group.

Privacy Statement (Statement)

The Liberty Life Assurance Kenya Company Limited is a subsidiary of the Liberty Kenya Holdings Plc. Liberty Holdings Limited and Liberty Kenya Holdings Plc are Africa-focused, client-led, and digitally enabled financial services organisations. We provide comprehensive and integrated financial and finance-related solutions to our clients and operate across the African continent and internationally through our subsidiaries.

Due to the integrated nature of the Liberty business, clients whose primary business is with one entity of Liberty Kenya are viewed as a client of Liberty Kenya as a whole, for client - centricity, information quality and risk management purposes.

In this statement any reference to “the Liberty Kenya,” “we”, “us” or “our” includes all legal entities within the Liberty Kenya and “clients”, “you” or “your” refers to clients of a legal entity within the Liberty Kenya.

Liberty respects your privacy and is committed to protecting your personal data as guaranteed by the Kenyan Data Protection Act No. 24 of 2019.

1.1 Regulation of data privacy and protection

As a client of Liberty Life Kenya, your primary data controller will be Liberty Life Kenya. However, as we operate in various countries and through various legal entities, we comply with the applicable data protection and privacy laws in each of these countries. Accordingly, the specific Liberty Kenya legal entity that is responsible for determining the purpose and means of processing your personal information (responsible party or data controller), in other words the legal entity who holds the business relationship with you will not always be the same. It will be made clear to you when you take up a product or service, who the responsible party or data controller is.

1.2 What is the purpose and scope of this statement?

The purpose of this statement is to inform you about how we collect, use, store, make available, disclose, update, safeguard, destroy or otherwise deal with (process) your personal information (also referred to as personal data in some countries) and to explain your rights relating to the privacy of your personal information and how the law protects you.

We will only transfer personal information to countries that we are satisfied will provide adequate data protection safeguards and shall ensure we have a contract in place with any third parties involved in processing your data outside Kenya.

Protecting the privacy, confidentiality and security of your personal information is very important to us as it is critical for us to maintain your trust and act in the right way to meet your needs. We have therefore implemented Group-wide policies and procedures to ensure that your personal information is protected

1.3 What is personal information and what types of personal information do we collect?

Personal information is any information from which you can be identified. The personal information we may collect about you includes:

1.4 How do we collect your personal data?

We will collect personal information directly from you or by telephone or through online channels such as our website, mobile applications, internet banking or electronic messaging platforms.;

We also collect personal information about you from other sources where lawful and reasonable, such as reputable third parties (where you have consented for your PI to be shared for either the express purpose or for any further processing) that you deal with or that the Liberty Kenya interacts with for the purposes of conducting its business. These third parties include:

If you are a third-party service provider, we may collect personal information about you as a data subject in order to ensure that the business relationship and matters relating to the agreement between you and us can be fulfilled. You warrant that, if you provide us with any personal information about other persons, such as employees, shareholders, or your directors, you are authorised to share their personal information with us for purposes set out in this statement.

Providing your personal information to us is voluntary. However, it is mandatory under certain circumstances, for example when you apply for products and/or services or to comply with anti-money laundering legislation or to fulfil a legal/regulatory obligation. If you fail to provide us with your personal information when requested, we may not be able to provide the products or services to you or comply with our legal obligations. Whenever you provide us with the personal information of third parties, you must inform them that you need to disclose their personal information to us. We will process the information in accordance with this statement.

1.5 Why do we process your personal information?

Our responsibilities to you are very important to us and we aim to provide you with personalised services to meet your needs. We may process your personal information for any of the reasons outlined in this section:

1. Contract requirements

We may need to process your personal information if we require it to conclude or perform under a contract or agreement with you for a product or service that you have applied for either with us or through our business partners with whom we have entered into a partnership, collaboration or alliance arrangement or for purposes of:

2. Lawful obligations

3. Legitimate Interest

Liberty Kenya may process your personal information in the regular management of its business and to protect the interests of Kenya and its clients, depositors, shareholders, employees and other third parties, including our business partners and members of the public.

Liberty Kenya may process your personal information to:

4. Consent

In addition to the reasons given above, we may process your personal information where we have your specific consent for a defined purpose. We will also seek your consent where applicable laws require it.

We will store your personal information according to our defined retention schedules as provided by the law and thereafter delete it.

1.6 Where will we process your personal information?

Due to the integrated nature of the Group's business and to provide you with efficient access to our products and services, we may process your personal information in Kenya, South Africa or in countries where we have a presence and where our products or services are provided or where our third-party service providers operate. We will only transfer personal information to countries that we are satisfied will provide adequate data protection safeguards, and we ensure our third-party service providers comply with the minimum data protection standards.

Integrated processing holds the following benefits for you:

1.7 For How long do we retain your personal information?

We retain your personal information in line with our legal and regulatory obligations and for our business and operational purposes as highlighted above. This will generally be for at least 7 years from your last transaction with us.

1.8 How will we communicate with you?

Besides in-person communication, we use a wide array of channels to engage with you regarding your existing products and services and to keep you updated. These include SMSs, email, phone calls, automated calls, notifications sent to your mobile device and in-app notifications. We need to keep you up to date on an ongoing operational basis about your existing products and services and their new features especially where we are making them more secure and as we make insurance and other financial services more convenient for you. We may contact you through these means for research purposes or to communicate with you for marketing of new products or services as explained in greater detail below.

1.9 How do we use your personal information for marketing?

If you are an existing client with whom we have had previous interactions in respect of your financial well-being or needs, you are important to us and therefore we would like to share information about our products, services and special offers with you (subject to applicable local laws).

If you are a prospective client, and we have had no previous interaction or have no relationship with you, we will seek your express consent in compliance with local laws to market to you electronically.

If you no longer wish to be contacted for marketing purposes, you may opt out at any time as per the instructions contained in any marketing communication you receive. You can also opt out by contacting us through any of the following:

You also have the right at any time to stop us from contacting you by any means for marketing purposes.

1.10 When, how and with whom will we share your personal information?

We share information with vendors, auditors, service providers and advisers supporting our services to you, with our trusted partners to introduce products and services to you, with agencies and other financial institutions on credit, fraud and risk matters, with data validation and trust providers to verify your data and identity and with the relevant local and foreign government and other authorities as required by law.

We take extra care when we transfer or share information and will enter into suitable contracts with the trusted parties with whom we share your information, thus ensuring your rights under relevant data protection legislation are upheld.

1.11 How is your personal information protected?

The security of your personal information is important to us, and we take reasonable steps to keep your personal information safe and to prevent loss, destruction of and damage or unlawful access to your personal information by unauthorised parties. We require the same level of security to be implemented by our service providers and other third parties. However, you must not share or send us any personal information through unauthorised channels, as these are not a secure way of communication and carry a risk of interception and unauthorised access. You should only share personal information through our authorised channels.

1.12 What are your rights?

We value your trust and want you to be familiar with your rights under the legislation and to know how you can exercise them in your interactions with us.

You have the right to:

You may exercise your rights by making requests to us and we shall respond within the following timelines;

1.13 Use of cookies on our website

A “cookie” is a small text file that is stored on your computer, smartphone, tablet or other device when you visit a website or use an application. It helps to distinguish you from other users and contains specific information related to your use of our website or application, such as your login details and your preference settings, and helps the website or the application to recognise your device.

Cookies help to make a website or app function better and make it easier for us to give you a better user experience on our online channels. To use or store cookie types that are not required for the functioning of the website or app and are optional, we will obtain your consent first.

For this reason, we limit our use of cookies to:

We use the following types of cookies on our online channels, such as our website:

Once you select your cookie preferences you can always change them later by enabling or disabling them. Where we use cookies to collect personal information, it will always be done in accordance with this statement. You can stop your browser from accepting cookies, but if you do, some parts of our websites or online services may not work properly. We recommend that you allow cookies. Explore the settings and options on your browser to disable or enable them or visit https://www.aboutcookies.org for detailed information about managing cookies.

1.14 Social Media

When you engage with us through our social media accounts, your personal information may be processed by the social media platform owner. This process is outside our control and the processing activities may be in a country outside of Kenya that may have different data protection laws. For more information about the privacy practices of a social media platform, please refer to and read the terms and conditions of that social media platform before you use it or share any personal information on it.

Our social media accounts are not appropriate forums to discuss our clients’ products or financial arrangements. We will never ask you to share personal, account or security information on social media platforms. We may, however, ask you to message us in private through one of our official social media accounts.

1.15 General

We may change this statement from time to time in accordance with changes in our products or services or regulatory requirements. We will make reasonable efforts to notify you through suitable communication channels.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Should you have any queries relating to the processing of your personal information by Liberty Life Kenya , please contact us at:

Data Protection Officer

Name: Januaries Kioko Robert

Email Address: privacy@liberty.co.ke

Telephone Number: +254 711 039 429

Support

Email address: info@liberty.co.ke

Postal address: P.O. Box 30390 – 00100, Nairobi

Physical address: Liberty House, Mamlaka Rd, Nairobi

Telephone number: +254 0711 039 000

We use cookies to improve your experience on our website. By browsing this website, you agree to our use of cookies. Learn more