Privacy Policy

1. Introduction

This Privacy Policy explains how MRL Finance Ltd ("MRL Finance", "we", "us", "our") collects, uses, shares and protects your personal data when you use our website, services and applications.

2. Data controller

MRL Finance Ltd is the data controller under the Kenya Data Protection Act, 2019.

3. Personal data we collect

• Identification and contact: name, ID/passport, KRA PIN, phone, email, address.
• Financial and transactional: bank or M-Pesa statements, payment history.
• Guarantor details: name, contacts, ID/KRA.
• Usage data: IP address, device/browser info, cookies, pages viewed.
• Communications: emails, calls and messages with our support teams.

4. How we collect data

• Directly from you (forms, emails, calls, WhatsApp).
• From your guarantor or references.
• From dealers and partners during your application.
• Automatically through cookies and similar technologies.

5. Legal bases for processing

We process your data to:

• Perform a contract or take steps at your request (application, financing).
• Comply with legal obligations (regulatory reporting, anti-fraud).
• Pursue legitimate interests (service improvement, fraud prevention).
• With your consent (marketing communications, where required).

6. How we use your data

• Assess eligibility, approve and manage your finance plan.
• Communicate about payments, reminders and support.
• Improve our services and user experience.
• Conduct audits, compliance checks and risk management.
• Send you marketing or referral opportunities (where permitted).

7. Sharing your data

We may share your data with:

• Approved dealers, field officers and service partners (on a need-to-know basis).
• Payment processors (e.g. M-Pesa integration).
• Legal and regulatory authorities upon request.
• Professional advisors (lawyers, auditors).

All recipients are bound by confidentiality and data protection obligations.

8. International transfers

If data is transferred outside Kenya, we ensure adequate safeguards as required by law.

9. Data retention

We retain personal data only for as long as necessary to fulfil the purposes outlined, including legal, accounting or reporting requirements.

10. Your rights

Subject to applicable law, you may:

• Request access to your data.
• Request correction or deletion.
• Object to or restrict processing.
• Request data portability.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact hello@mrlfinance.com.

11. Cookies and tracking technologies

We use cookies to enhance site functionality and analyse usage. You can control cookies via your browser settings.

12. Security

We implement technical and organisational measures to protect your data. No system is 100% secure; please contact us immediately if you suspect any breach.

13. Children's data

Our services are not intended for persons under 18. We do not knowingly collect data from children.

14. Changes to this policy

We may update this Policy periodically. Material changes will be posted on this page with a new "Effective Date".

15. Contact us

For questions or to exercise your rights: hello@mrlfinance.com