Privacy Policy

Vike Insurance Brokers Limited ("Vike Insurance", "we", "us" or "our") is an insurance broker licensed by the Insurance Regulatory Authority (IRA) of Kenya. We are committed to protecting the privacy and security of the personal data you entrust to us when you visit our website, request a quote, purchase a policy, or interact with us in any other way.

This Privacy Policy describes the categories of personal data we collect, the purposes for which we use that data, who we share it with, how long we keep it, and the rights you have as a data subject under the Kenya Data Protection Act, 2019 (the "DPA").

For the purposes of the DPA, the data controller is:

Vike Insurance Brokers Limited
2nd Floor, Krishna Centre, Woodvale Grove, Westlands, Nairobi, Kenya
Email: info@vikeinsurance.co.ke
Phone: +254 725 830 485

We collect personal data that you provide to us directly, as well as data we generate or receive from third parties. This includes:

3.1 Information you provide

• Identity data: full name, date of birth, gender, ID/passport number, KRA PIN.
• Contact data: email address, postal address, physical address, phone number.
• Quote & policy data: details of the cover you are requesting (e.g. vehicle make, model, year of manufacture, value, registration number; health declarations; property details; travel itineraries).
• Financial data: bank account or M-Pesa details used to pay premiums or receive claims.
• Claims data: information about incidents, losses, medical reports, police abstracts, and any other documents required to process a claim.
• Communications: records of correspondence with us, including emails, calls, WhatsApp messages, and chat transcripts.
• Marketing preferences: your consent to receive marketing communications and the channels you prefer.

3.2 Information collected automatically

• Device & usage data: IP address, browser type, operating system, device identifiers, pages visited, referrer URLs, and timestamps.
• Cookies & similar technologies: see Section 9 below.
• Location data: approximate location derived from your IP address.

3.3 Information from third parties

• Underwriters and reinsurers, for the purpose of preparing quotes and binding cover.
• The National Transport and Safety Authority (NTSA), via the DMVIC register: where you provide a vehicle registration number, we verify the vehicle’s make, model, body type, and registration year so we can prepare an accurate quote.
• Credit reference bureaus, fraud prevention agencies, and public registers, where lawfully permitted.
• Partner brokers, agents, employers, or family members who refer you to us or include you on a group policy.

We process your personal data for the following purposes and on the following lawful bases:

• To prepare and provide insurance quotes and to place cover with underwriters (performance of a contract / steps prior to entering a contract).
• To administer policies and process claims, including liaising with underwriters, loss adjusters, and other intermediaries (performance of a contract).
• To verify your identity and comply with our legal obligations under the Insurance Act, the Anti-Money Laundering and Combating of Financing of Terrorism Act, and other applicable laws (legal obligation).
• To communicate with you about your quote, your policy, renewals, and service updates (performance of a contract / legitimate interests).
• To send you marketing communications about our products, offers, and educational content where you have given your consent (consent).
• To improve our website and services, including analytics and product development (legitimate interests).
• To detect and prevent fraud, money laundering, and other unlawful activity (legal obligation / legitimate interests).
• To establish, exercise, or defend legal claims (legitimate interests).

We do not sell your personal data. We share it only with parties who need it to deliver the services you have requested, or where we are legally required to do so. Recipients may include:

• Underwriters and reinsurers who provide the insurance cover.
• Service providers who help us run our business — such as IT hosting, email, SMS, payment processing, analytics, and customer support providers — bound by confidentiality and data-processing agreements.
• Loss adjusters, surveyors, lawyers, and medical professionals instructed to assess or settle a claim.
• Regulators and law enforcement, including the Insurance Regulatory Authority, the Office of the Data Protection Commissioner, and the Kenya Revenue Authority, where required by law.
• Professional advisers such as auditors and legal counsel.
• Successors in title if we sell or restructure our business.

Some of our service providers (for example cloud hosting, email, and analytics providers) may process your personal data outside Kenya. Where we transfer personal data outside Kenya, we do so in accordance with Section 48 of the DPA — including to countries with adequate protection, on the basis of appropriate safeguards, or with your explicit consent.

We keep personal data only for as long as we need it for the purposes set out in this policy, or for as long as the law requires. In practice this means:

• Quote requests that did not lead to a policy: up to 24 months from the date of the request, after which we delete or anonymise the record.
• Active policies and claims: for the duration of the policy and for at least 7 years after termination, in line with insurance and tax record-keeping obligations.
• Marketing preferences and consent records: for as long as we maintain a relationship with you, and for at least 3 years after your last interaction, to demonstrate the lawful basis of any communications sent.

We have put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include encrypted transmission (HTTPS), access controls, staff training, and regular review of our security practices. No method of transmission over the internet is 100% secure, but we work to protect your data and notify you and the Office of the Data Protection Commissioner promptly in the event of a notifiable breach.

Our website uses cookies and similar technologies to make the site work, to analyse how it is used, and to support our marketing. You can manage your preferences at any time by clicking Privacy settingsin the footer of any page. Strictly necessary cookies cannot be turned off.

Subject to certain conditions, you have the following rights under the DPA:

• Right to be informed about the collection and use of your personal data.
• Right of access to the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") where the data is no longer needed or you withdraw consent.
• Right to restrict or object to processing in certain circumstances.
• Right to data portability for data you provided to us under a contract or consent.
• Right to withdraw consent at any time, where processing is based on consent — including marketing.
• Right to lodge a complaint with the Office of the Data Protection Commissioner (www.odpc.go.ke).

To exercise any of these rights, please contact us using the details in Section 12. We will respond within the timelines set by the DPA.

Where you have opted in, we may contact you by email, SMS, WhatsApp, or phone with offers, news, and educational content about insurance. You can opt out at any time by clicking the unsubscribe link in any email, replying STOP to any SMS, or emailing info@vikeinsurance.co.ke. Withdrawing consent for marketing does not affect the lawfulness of any processing carried out before you withdrew it, and does not stop us contacting you about an active quote, policy, or claim.

If you have questions about this Privacy Policy, want to exercise your rights, or wish to make a complaint, please contact our Data Protection Officer:

Data Protection Officer
Vike Insurance Brokers Limited
2nd Floor, Krishna Centre, Woodvale Grove, Westlands, Nairobi, Kenya
Email: dpo@vikeinsurance.co.ke
Phone: +254 725 830 485

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page tells you when it was last revised. If we make material changes we will notify you by email or by posting a prominent notice on our website before the changes take effect.