Privacy Policy

1. Information We Collect

We collect information to provide financing services to SMEs and to comply with legal and regulatory requirements. The types of information include:

• Personal Information: Name, ID/Passport, phone number, email address, address, and other identification details.
• Business Information: Business name, registration number, KRA PIN, financial statements, invoices, LPOs, licenses, ownership details, and other supporting documents.
• Application Data: Financing product selected, loan/inventory request details, repayment history, and supporting documentation.
• Device Information: IP address, device type, operating system, browser type, and usage data.
• Agent-Collected Data: Information collected during in-person onboarding by Cach agents.

2. How We Use Your Information

We use your information to:

• Process and review your financing applications.
• Verify your identity and business details.
• Score your business using our machine learning model for creditworthiness.
• Share your applications with partner lenders, banks, microfinance institutions, development banks, or distributors as required.
• Comply with legal, regulatory, and reporting obligations.
• Improve our services, develop new features, and ensure security of our platforms.
• Communicate with you about your applications, products, and updates.

3. How We Share Your Information

We may share your information with:

• Partner Financial Institutions (banks, microfinance institutions, development banks) to process financing applications.
• Distributors, when inventory or stock financing products are approved.
• Regulators or Government Authorities, when legally required.
• Service Providers, such as cloud hosting, analytics, and IT support, under strict confidentiality agreements.

We do not sell your personal or business information to third parties.

4. Data Security

We implement appropriate technical, administrative, and organizational security measures to protect your data from unauthorized access, loss, misuse, or disclosure. While we strive to safeguard your information, no system is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your information only as long as necessary to:

• Fulfill the purposes outlined in this policy.
• Meet legal, regulatory, or contractual obligations.
• Resolve disputes or enforce agreements.

6. Your Rights

Under applicable data protection laws (including the Kenya Data Protection Act, 2019), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (subject to legal or contractual obligations).
• Object to or restrict processing of your data in certain circumstances.
• Withdraw consent where processing is based on consent.

Requests can be made by contacting us at +254 705 224550 or info@cachconnect.co.ke.

7. Children’s Privacy

Our services are intended for registered businesses and are not directed to children under 18. We do not knowingly collect personal information from minors.

8. International Data Transfers

If your data is transferred outside Kenya, we ensure it is protected by appropriate safeguards in compliance with applicable laws.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website/app with a new effective date. Continued use of our services means you accept the updated policy.