Privacy Policy

Nelka Collections Ltd ("Nelka Collections", "we", "us", or "our") is a Kenyan-owned debt recovery and credit intelligence company headquartered in Nairobi, Kenya, operating across East and Southern Africa.

We are committed to protecting the privacy, confidentiality, and security of personal and business information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data in compliance with:

• The Kenya Data Protection Act, 2019
• Applicable regional data protection and consumer protection laws
• International best practices for financial and credit services

By accessing our website or using our services, you agree to the practices described in this Privacy Policy.

This Privacy Policy applies to:

• Visitors to our website
• Clients and prospective clients
• Debtors and third-party payers
• Business partners and service providers
• Individuals whose data is processed during debt recovery, credit reporting, or market research activities

We process personal data based on one or more of the following lawful grounds:

• Performance of a contract
• Legal obligation
• Legitimate business interest (debt recovery, credit assessment, risk management)
• Consent (where required by law)

We use collected information to:

• Provide debt recovery services
• Conduct credit reporting and financial intelligence analysis
• Perform market research and business assessments
• Communicate with clients, debtors, and partners
• Meet legal, regulatory, and compliance obligations
• Improve our services and operational efficiency
• Prevent fraud and manage risk

We may share information with:

• Clients who engage our services
• Legal professionals, courts, and regulatory authorities
• Licensed credit bureaus and financial institutions
• Trusted third-party service providers
• Cross-border partners operating under applicable laws

We do not sell personal data.
All disclosures are limited to what is necessary and legally permissible.

Where data is transferred outside Kenya, we ensure:

• Adequate data protection safeguards
• Compliance with applicable regional and international laws
• Contractual protections with receiving parties

We retain personal and business information:

• Only for as long as necessary for the purpose collected
• As required by law, regulatory obligations, or contractual requirements
• Securely destroyed or anonymized once no longer required

We implement appropriate technical and organizational measures, including:

• Restricted access controls
• Secure data storage
• Confidentiality obligations for staff and partners
• Regular security reviews

Subject to applicable law, you have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion where legally permissible
• Object to processing
• Withdraw consent (where applicable)

Requests may be made via the contact details below.

Our website may use cookies for functionality and analytics. You may control cookie preferences through your browser settings.

We reserve the right to update this Privacy Policy. Changes will be posted on our website with an updated effective date.

For inquiries, requests, or concerns related to this Privacy Policy, data protection practices, or the handling of personal information, please contact our Data Protection Officer or Privacy Team using the information below.

We recommend submitting privacy-related inquiries in writing to ensure proper documentation and timely response. All communications will be handled in accordance with applicable data protection regulations.