Browsing this website

• Server logs. Like most websites, the host that delivers these pages records routine technical data such as the visitor's IP address, the date and time, the page requested and the browser type, for security and to keep the site running. Hosting provider: Vercel. These logs are kept only for a limited time.
• Cookies and tracking. Our pages set no cookies and use no analytics or advertising trackers. See the cookie policy.
• Other sites. Our pages load nothing from other sites, with one exception: the Apply page loads Cloudflare's security check (see below).

Sending an application request

You choose whether to send an application request. If you do, the form asks for:

• your full name, mobile phone number and town or area;
• your email address (optional);
• the amount you would like to borrow, your preferred repayment period, and what it is for (optional).

We never ask for your ID number, bank or M-Pesa details, PINs or passwords on this website. If we approve a loan, identity checks are done in person and set out in the written agreement.

Why we use it: only to assess your request and to contact you about it. We do this with your consent, which you give by ticking the box on the form. We do not sell your details or use them for marketing.

Who handles it: our staff who assess requests, and the service providers that make the form work: Cloudflare (the Turnstile check, which sees your IP address and some browser signals to tell people from bots), Vercel (runs the form handler) and our email delivery provider (currently Resend), which delivers the request to us. These providers may process data outside Kenya.

Where it is kept: we do not store requests in a database. Each request arrives as an email to our team and is kept only as long as we need it to deal with your request. We delete a request on your written request unless the law requires us to keep it.

This form is not for anyone under 18.

If you email or telephone us

We use what you tell us only to reply and to deal with your enquiry. Please do not send identity documents or bank details by email.

Loan agreements

If a loan is approved, personal data needed for the agreement is collected in person or on the written agreement. How it is used, kept and protected is explained in the data protection clause of the agreement.

Your rights

Kenya's Data Protection Act, 2019 gives you rights over your personal data, including to see it, correct it and ask for it to be deleted. To use a right, contact us at loans@kitocha.com or on +254 733 318 297 / +254 725 218 707. You may also contact the Office of the Data Protection Commissioner.

This policy describes how the website actually behaves. It is not legal advice and does not by itself guarantee compliance with Kenyan law.