Data Compliance

Privacy Policy & KDPA (2019) Compliance

At insurepap.com, we are committed to safeguarding the privacy and security of your company information and your employees' personal details. This policy governs how we collect, store, and process data in accordance with the Kenya Data Protection Act (KDPA) 2019.

1. Data We Collect

To prepare accurate WIBA and GPA insurance quotes, we collect the following business and employee details:

  • Company Name and physical address coordinates.
  • Contact Person name, email address, and phone number (WhatsApp preferred).
  • Employee headcount and occupational categories (e.g. office, driver, construction casuals).
  • Total monthly or annual wage bill (payroll) numbers.
  • M-Pesa transaction reference codes for policy payment processing.

2. How We Use Your Data

We use collected details solely for facilitating compliance coverage:

  • Calculating estimated and formal WIBA and GPA premiums with our underwriter panel.
  • Registering leads and logging active accounts into our secure **Zoho CRM** pipeline.
  • Filing official claims with insurers and the Directorate of Occupational Safety and Health Services (DOSHS) when an accident is reported.
  • Sending automated policy renewal alerts (at 60, 30, 14, and 7 days) via email and WhatsApp.

3. Data Retention & Security

We employ strict security measures to protect client records. Your company profiles are stored in encrypted databases inside Zoho CRM and Google Workspace environments. We do not sell, share, or lease your commercial or employee payroll data to any third-party marketing entities.

Under Kenyan law, policy files and financial transactions must be retained for at least 7 years for auditing and regulatory purposes. After this period, data is securely anonymized or permanently deleted from our databases.

4. Your Rights under the KDPA 2019

As a registered data subject in Kenya, you hold the following rights:

  • The right to be informed about how your data is being used.
  • The right to access your stored commercial and personal profiles.
  • The right to correct or update inaccurate payroll declarations or staffing lists.
  • The right to object to automated notification scripts (such as broadcasts).

5. Updates to This Policy

We may update this privacy statement periodically to reflect changes in our digital operating system or updates to IRA regulations. The latest version will always be posted on this page with a revised timestamp.

Last updated: June 2026. For privacy concerns, please contact our Data Protection Officer at hello@insurepap.com.