Privacy Policy

Effective Date: 2025/04/01

This Privacy Policy explains how Mr Insurance, a registered company in Kenya, collects, processes, and protects your personal data in accordance with the Kenya Data Protection Act, 2019.

1. Data Controller

Mr Insurance is the data controller responsible for the personal data collected via our WhatsApp bot.

2. What Data We Collect

When you use our WhatsApp bot, we collect the following personal data:

  • Phone number
  • Full name
  • Car logbook details (including images)
  • National ID photo
  • KRA PIN

3. Lawful Basis for Processing

We process your data under the following lawful bases as per the DPA:

  • Consent: You provide your data voluntarily when interacting with the bot.
  • Legal Obligation: Insurance processing requires identification and documentation under Kenyan law.

4. Purpose of Collection

Your personal data is collected solely for the purpose of processing insurance requests and facilitating communication with insurance providers.

5. Data Sharing

We do not sell your data.

Your data is shared only with:

  • Insurance providers selected by you for policy issuance and compliance purposes.
  • Meta (via WhatsApp infrastructure), which processes message delivery and metadata.

6. International Data Transfers

Your data is stored on servers in the United Kingdom (DigitalOcean London region). We ensure adequate safeguards are in place for cross-border data transfers, in line with Section 48 of the DPA.

7. Data Retention

We retain your data only for as long as is necessary to process your insurance request and comply with legal or regulatory requirements.

8. Your Rights

Under the Kenya DPA, you have the right to:

  • Access your personal data
  • Request correction of inaccuracies
  • Withdraw consent at any time
  • Request deletion of your data
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any of these rights, contact us at info@mrinsurance.co.ke

9. Security Measures

We apply appropriate organisational and technical safeguards to protect your data. These include:

  • Access-controlled database storage
  • Encrypted file storage
  • Staff access limited to only those involved in processing

10. Consent

By using our WhatsApp bot, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described.

We encourage you to request clarification before submitting any personal data.

11. Changes to This Policy

We may update this policy to reflect changes in law or our operations. Changes will be published at https://WhatsApp.mrinsurance.co.ke/privacy.