Privacy policy
Who we are
Collection Africa Kenya Limited is registered in Kenya and operates from 7th Floor, Rhapta Heights, Rhapta Road, Westlands, Nairobi. For privacy questions, contact info@collectionafrica.co.ke.
Our two roles
We act as a data controller for data you give us directly — website enquiries, job applications, and business contacts. We act as a data processor for debtor data supplied by a client who has instructed us to recover an account. In that case the client is the controller and determines why and how the data is used; we process it under a written data processing agreement.
What we collect
- Enquiry data: name, email, phone, organisation and the content of your message.
- Application data: name, contact details, CV and anything else you send in support.
- Debtor data (as processor): identity, contact, account and payment information supplied by our client, plus contact records we create.
- Technical data: IP address, device and browser information, and pages visited, collected through analytics and used for security and rate limiting.
- Chat data: messages you send to our website chat or assistant.
Why we use it, and our lawful basis
- To answer your enquiry — on the basis of your consent and our legitimate interest in responding.
- To assess a job application — on the basis of steps taken before entering a contract.
- To recover debts on behalf of a client — on the basis of that client's lawful basis, usually the performance of a contract or their legitimate interest.
- To keep the site secure and functioning — on the basis of our legitimate interest.
- To meet legal, tax and regulatory obligations.
Who we share it with
We share personal data only with the client who instructed us, our vetted service providers (email delivery, hosting, live chat and AI processing), and regulators, courts or law enforcement where we are legally required to. We do not sell personal data.
Third-party processors used by this website
- Tawk.to — live chat. Messages and basic technical data are processed on their infrastructure.
- Anthropic — powers the on-site assistant and AI search. Your typed questions are sent to the Anthropic API to generate a response.
- Google — analytics and tag management, where enabled.
- Our email provider — delivery of form submissions to our team.
Transfers outside Kenya
Some of these providers process data outside Kenya. Where that happens we rely on the safeguards permitted under sections 48 and 49 of the Data Protection Act, 2019, including contractual protections with each provider.
How long we keep it
- Website enquiries: 24 months from your last contact with us.
- Unsuccessful job applications: 6 months, unless you ask us to keep them longer.
- Debtor data held as processor: for the engagement plus the retention period agreed with the client.
- Financial records: 7 years, as required by Kenyan tax law.
Your rights
Under the Data Protection Act, 2019 you may request access to your data, ask us to correct or delete it, object to processing, request that processing be restricted, and ask for a copy in a portable format. Where we hold your data as a processor for a creditor, we will forward your request to that creditor and support them in responding.
To exercise any of these, email info@collectionafrica.co.ke. We respond within the statutory timeframe. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner.
Cookies
We use cookies that are necessary for the site to work, and — where you allow them — analytics cookies that tell us which pages are useful. Our live chat provider sets its own cookies to maintain your conversation. You can block cookies in your browser, though parts of the site may stop working.
Security
Data is transmitted over TLS, access is restricted to staff who need it, and staff are trained on data protection. No system is perfectly secure; if a breach affects your data and poses a real risk to you, we will notify you and the Commissioner as the Act requires.
Changes
We update this policy when our practices change. The date at the top reflects the current version. Material changes will be flagged on the site.
See also our terms of service and Ethical Recovery Charter.