Privacy Policy

Nelka Collections Ltd ("Nelka Collections", "we", "us", or "our") is a Kenyan-owned debt recovery and credit intelligence company headquartered in Nairobi, Kenya, operating across East and Southern Africa.

We are committed to protecting the privacy, confidentiality, and security of personal and business information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data in compliance with the Kenya Data Protection Act, 2019, applicable regional data protection and consumer protection laws, and international best practices for financial and credit services.

By accessing our website or using our services, you agree to the practices described in this Privacy Policy. We encourage you to read this document carefully to understand how your information is handled.

This Privacy Policy applies to all individuals and entities that interact with Nelka Collections, including visitors to our website, clients and prospective clients, debtors and third-party payers, business partners and service providers, and any individuals whose personal data is processed during the course of our debt recovery, credit reporting, or market research activities.

Whether you are browsing our website, engaging us for services, or your information has been provided to us by a client or business partner, this policy governs how your data is collected, processed, stored, and protected.

We process personal data on the basis of one or more lawful grounds as required by the Kenya Data Protection Act, 2019 and other applicable laws. These lawful grounds include the performance of a contract to which the data subject is a party, compliance with a legal obligation to which we are subject, the pursuit of our legitimate business interests such as debt recovery, credit assessment, and risk management, and explicit consent where specifically required by law.

In every case, we ensure that the processing of personal data is proportionate, necessary, and conducted with appropriate safeguards in place to protect the rights and interests of the individuals concerned.

We use the information we collect to provide our core debt recovery services, which includes contacting debtors, negotiating payment arrangements, and managing the recovery process on behalf of our clients. We also use this information to conduct credit reporting and financial intelligence analysis that helps businesses make informed credit decisions.

Additionally, we process information to perform market research and business assessments, to communicate with clients, debtors, and partners throughout the service lifecycle, and to meet our legal, regulatory, and compliance obligations. We may also use information to improve our services and operational efficiency, and to prevent fraud and manage risk within our operations.

We do not use personal data for purposes unrelated to our stated business activities, and we take reasonable steps to ensure that any data processing is limited to what is necessary for the intended purpose.

In certain circumstances, we may share personal and business information with third parties. These third parties include clients who have engaged our services for debt recovery or credit assessment, legal professionals, courts, and regulatory authorities where disclosure is required by law or necessary for the enforcement of our client's rights, licensed credit bureaus and financial institutions for the purposes of credit reporting and assessment, and trusted third-party service providers who assist us in delivering our services.

Where we operate across borders, we may share information with cross-border partners operating under the applicable data protection and consumer protection laws of the relevant jurisdictions. In all cases, we ensure that any third-party recipient of personal data is bound by appropriate confidentiality obligations and data protection safeguards.

As a company operating across East and Southern Africa, there are instances where personal data may need to be transferred outside Kenya in order to fulfil our service obligations. Where such transfers occur, we ensure that adequate data protection safeguards are in place, that the transfer complies with all applicable regional and international data protection laws, and that appropriate contractual protections are established with the receiving parties.

We conduct these transfers only when they are necessary for the performance of our services or compliance with legal obligations, and we take all reasonable measures to ensure that the transferred data continues to receive the same level of protection afforded under Kenyan law.

We retain personal and business information only for as long as is necessary for the purposes for which it was originally collected. The specific retention period depends on the nature of the data, the purpose of processing, and any applicable legal, regulatory, or contractual requirements that obligate us to retain the data for a specified period.

Once personal data is no longer required for its original purpose and there is no legal obligation to retain it, we ensure that it is securely destroyed or anonymized so that it can no longer be used to identify any individual. We review our data retention practices regularly to ensure compliance with applicable laws and best practices.

We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it against unauthorized access, loss, misuse, or alteration. These measures include restricted access controls that limit data access to authorized personnel only, secure data storage systems that protect information both in transit and at rest, confidentiality obligations for all staff and partners who handle personal data, and regular security reviews to identify and address vulnerabilities.

While we strive to use commercially acceptable means to protect your personal data, no method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we continually review and improve our security practices to ensure the highest practical level of protection.

Subject to the provisions of the Kenya Data Protection Act, 2019 and other applicable laws, you have the right to access the personal data we hold about you, to request the correction of any information that is inaccurate or incomplete, and to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where deletion is legally permissible.

You also have the right to object to the processing of your personal data in certain circumstances and to withdraw your consent to processing where consent was the basis on which we collected your data. Please note that withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

To exercise any of these rights, you may contact us using the details provided in the Contact Information section below. We will respond to your request within a reasonable time and in accordance with the applicable legal requirements.

Our website uses cookies to ensure proper functionality and to understand how visitors interact with our content. Cookies are small data files stored on your device that help us improve user experience and analyze website traffic. They enable us to remember your preferences, track the pages you visit, and gather aggregate data about site usage patterns.

By using our website, you acknowledge and accept the use of cookies as described in this policy. For more detailed information on the specific types of cookies we use, how they function, and how you can manage or disable them, please refer to our Cookie Policy.

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. Any changes will be posted on our website with an updated effective date. We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any modifications to this policy constitutes your acknowledgement of and agreement to the updated terms.