1. Introduction
This Privacy Policy explains how MRL Finance Ltd (“MRL Finance”, “we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use our website, services, and applications.

2. Data Controller
MRL Finance Ltd, is the data controller under the Kenya Data Protection Act, 2019.

3. Personal Data We Collect
Identification & Contact: Name, ID/Passport, KRA PIN, phone, email, address.

Financial & Transactional: Bank or M-Pesa statements, payment history.

Guarantor Details: Name, contacts, ID/KRA.

Usage Data: IP address, device/browser info, cookies, pages viewed.

Communications: Emails, calls, messages with our support teams.

4. How We Collect Data
Directly from you (forms, emails, calls, WhatsApp).

From your guarantor or references.

From dealers/partners during your application.

Automatically through cookies and similar technologies.

5. Legal Bases for Processing
We process your data to:

Perform a contract or take steps at your request (application, financing).

Comply with legal obligations (regulatory reporting, anti-fraud).

Pursue legitimate interests (service improvement, fraud prevention).

With your consent (marketing communications, where required).

6. How We Use Your Data
Assess eligibility, approve and manage your finance plan.

Communicate about payments, reminders, support.

Improve our services and user experience.

Conduct audits, compliance checks, and risk management.

Send you marketing or referral opportunities (where permitted).

7. Sharing Your Data
We may share your data with:

Approved dealers, field officers, and service partners (on a need-to-know basis).

Payment processors (e.g., M-Pesa integration).

Legal/regulatory authorities upon request.

Professional advisors (lawyers, auditors).
All recipients are bound by confidentiality and data protection obligations.

8. International Transfers
If data is transferred outside Kenya, we ensure adequate safeguards as required by law.

9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined, including legal, accounting, or reporting requirements.

10. Your Rights
Subject to applicable law, you may:

Request access to your data.

Request correction or deletion.

Object to or restrict processing.

Request data portability.

Withdraw consent where processing is based on consent.
To exercise these rights, contact hello@mrlfinance.com.

11. Cookies & Tracking Technologies
We use cookies to enhance site functionality and analyse usage. You can control cookies via your browser settings. See our Cookie Policy for details (if applicable).

12. Security
We implement technical and organisational measures to protect your data. No system is 100% secure; please contact us immediately if you suspect any breach.

13. Children’s Data
Our services are not intended for persons under 18. We do not knowingly collect data from children.

14. Changes to This Policy
We may update this Policy periodically. Material changes will be posted on this page with a new “Effective Date.”

15. Contact Us
For questions or to exercise your rights:
hello@mrlfinance.com