Important: This Privacy Policy is intended to explain our approach to personal information in clear and practical language. It should be read together with any specific notices, forms, terms or agreements that apply to the particular service or transaction you request from Mfarusi.
1. Who we are
Mfarusi Insurance Agency Ltd ("Mfarusi", "we", "us" or "our") is an insurance agency providing professional insurance-related services and intermediary support. Our wider service offering includes insurance, pensions, investments, trusts and training.
This Privacy Policy applies primarily to personal information that may be provided through the Mfarusi website, including information submitted when requesting a quotation, making an enquiry, booking an appointment, submitting a claim enquiry, requesting assistance or contacting us.
2. Information we may collect
The information we collect depends on the service or enquiry you choose to make. We aim to request information that is relevant to the purpose for which it is needed.
Contact information
This may include your name, email address, telephone number and other contact details you voluntarily provide.
Enquiry information
Information you provide when asking about insurance products, quotations, appointments, policy matters or other services.
Policy or claim information
Information relevant to a policy, claim or servicing request where you choose to provide it or where it is necessary to assist with your request.
Technical information
Certain technical information may be generated when you use a website, such as browser, device or basic access information, depending on the website services and hosting environment in use.
Please avoid submitting information that is not relevant to your enquiry. Where a form requests information necessary to respond to a specific service request, providing it may be necessary for us to process that request.
3. How we may use your information
Information submitted to Mfarusi may be used for purposes connected with the request you have made and the services we provide.
- Responding to enquiries and requests for information.
- Preparing or facilitating insurance quotations and related discussions.
- Arranging or supporting appointments and consultations.
- Supporting policy administration and servicing requests.
- Assisting with claims-related enquiries and communications.
- Communicating with customers and prospective customers about their requests.
- Meeting applicable legal, regulatory, contractual or professional obligations.
- Protecting the security, integrity and proper operation of our website and systems.
4. Why we process personal information
Depending on the circumstances, personal information may be processed because it is necessary to respond to your request, perform or prepare for a service or contractual relationship, comply with a legal or regulatory obligation, or where another lawful basis under applicable data protection law applies.
Where consent is required, we will seek it in the appropriate context. You should be able to understand what information is being requested and why it is relevant to the service or interaction.
Why this matters: Kenyan data protection law requires personal data processing to be lawful, fair and transparent and to be connected to specified and legitimate purposes. The Data Protection Act, 2019 establishes the corresponding framework for data subjects and organisations processing personal data. :contentReference[oaicite:2]{index=2}
5. When information may be shared
Mfarusi may need to share relevant information where this is necessary to provide a service, respond to your request, administer insurance-related matters, comply with legal or regulatory requirements, or protect legitimate business and customer interests.
Depending on the service involved, relevant information may be communicated to appropriate insurers, underwriters, professional service providers, technology or hosting providers, regulators, authorities or other parties where there is a legitimate reason and appropriate basis for doing so.
We aim to limit information shared to what is relevant for the applicable purpose.
6. Protecting personal information
We take reasonable measures appropriate to the nature of the information and the services involved to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
Security measures may include appropriate access controls, authentication, administrative safeguards, secure handling procedures and technical protections appropriate to the systems being used.
No website or electronic transmission can be guaranteed to be completely secure. Customers should therefore exercise appropriate care when transmitting information over the internet.
7. How long information is retained
Personal information should not be retained for longer than is necessary for the purpose for which it was collected, unless continued retention is required or permitted by applicable law, regulation, contractual obligations, legitimate business requirements or the establishment, exercise or defence of legal claims.
The appropriate retention period can therefore depend on the nature of the information and the relationship with the customer. Different records may have different retention requirements.
When information is no longer required, appropriate measures should be taken to dispose of, delete or anonymise it in accordance with applicable requirements and available systems.
8. Your privacy rights
Under Kenyan data protection law, data subjects have rights concerning their personal information. Depending on the circumstances and applicable legal requirements, these may include rights relating to information, access, correction, objection, deletion and other protections provided by law. :contentReference[oaicite:3]{index=3}
You can ask us about your information
If you have a privacy question or want to make a request concerning personal information held by Mfarusi, contact us using the customer contact channels provided on this website.
- Ask what personal information is being processed about you.
- Request access to applicable personal information.
- Ask for inaccurate or misleading information to be corrected where applicable.
- Raise an objection or concern about processing where the law provides that right.
- Ask about deletion or other available remedies where applicable.
Requests may be subject to reasonable verification requirements and any limitations or exceptions provided by applicable law.
9. Third-party websites and services
The Mfarusi website may contain links to external websites or services. These websites operate under their own privacy practices and terms.
We encourage customers to review the privacy information of an external service before submitting personal information to it.
10. Children's information
Our website is primarily intended for individuals and organisations seeking insurance and related professional services. We do not intentionally use the website as a service for collecting children's personal information.
Where information concerning a child is genuinely required for an insurance or related service, it should be provided only where the appropriate parent, guardian or other lawful authority is involved and where the applicable legal requirements are satisfied.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website functionality, information-handling practices or applicable legal and regulatory requirements.
The updated version will be published on this website with the applicable review or update information.
12. Contact us about privacy
If you have a question about this Privacy Policy, the personal information you have provided to Mfarusi, or how your information is being handled, please contact Mfarusi through the Contact Mfarusi page.
When making a privacy request, please provide enough information for us to understand the nature of your request. We may need to verify your identity before providing information or taking action on a request.