Privacy Policy
How we collect, use, and protect your personal information.
Last updated: January 2025
Introduction
Brand Assurance Limited ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you participate in our Community Insurance Partner (CIP) program or use our services.
folder_open Information We Collect
Personal Information
- chevron_right Full name, date of birth, and gender
- chevron_right National ID number or passport number
- chevron_right KRA PIN for tax compliance
- chevron_right Contact information (phone number, email, address)
- chevron_right M-Pesa number for commission payments
Business Information
- chevron_right Business name and registration details
- chevron_right Business location and operating hours
- chevron_right Type of business activities
Transaction Information
- chevron_right Policy sales and commission records
- chevron_right Payment history and earnings
- chevron_right Customer interaction logs
data_usage How We Use Your Information
We use the information we collect to:
- check_circle Process your application - Verify your identity and eligibility for the CIP program
- check_circle Manage your account - Provide access to the agent portal and dashboard
- check_circle Process payments - Calculate and disburse your commissions via M-Pesa
- check_circle Comply with regulations - Meet IRA requirements and tax obligations
- check_circle Communicate with you - Send updates, training materials, and support messages
- check_circle Improve our services - Analyze performance and enhance the platform
share Information Sharing
We may share your information with:
Insurance Underwriters
To process policies and verify transactions
Payment Processors
M-Pesa/Safaricom for commission disbursement
Regulatory Authorities
IRA, KRA, and other bodies as required by law
Service Providers
Cloud hosting, SMS services, and analytics tools
info We never sell your personal information to third parties for marketing purposes.
security Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- lock SSL/TLS encryption for data in transit
- lock Encrypted storage for sensitive data
- lock Access controls and authentication
- lock Regular security audits and assessments
- lock Employee training on data protection
person Your Rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- visibility Access - Request a copy of your personal data
- edit Rectification - Correct inaccurate or incomplete information
- delete Erasure - Request deletion of your data (subject to legal requirements)
- block Restriction - Limit how we process your data
- cloud_download Portability - Receive your data in a structured format
- do_not_disturb Object - Opt out of certain processing activities
schedule Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically, we retain partner data for:
- • Active partners: Duration of partnership + 7 years
- • Transaction records: 7 years (tax compliance)
- • Unsuccessful applications: 2 years
contact_support Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
By applying to the CIP program, you consent to this Privacy Policy.
Apply Now arrow_forward