Legal

Privacy Policy

Last updated: September 2026

This is a draft policy prepared for the MyBima website and has not yet been reviewed by legal counsel. Do not treat it as final or legally binding until it has been reviewed and formally adopted.
01

What We Collect

When you request a quote, apply for a policy, or contact us, we collect information such as your name, phone number, email address, ID/KRA PIN where required for underwriting, and details relevant to the cover you’re requesting (e.g. vehicle registration for motor cover, or dependants for health cover).
02

How We Use It

We use your information to generate and compare quotes, process applications with our partner insurers, process premium payments (including via M-Pesa), communicate with you about your policy or claim, and — where you’ve agreed — send you relevant product updates.
03

Sharing With Insurers

To provide you with a quote or policy, we share the relevant details with the specific IRA-licensed insurer(s) you choose to proceed with. We do not sell your personal data to third parties for marketing purposes.
04

Data Security

We apply reasonable technical and organisational measures to protect your data, including restricted access and secure transmission of payment information. No system is completely secure, and we encourage you to contact us immediately if you suspect unauthorised access to your account.
05

Your Rights

Under Kenya’s Data Protection Act, 2019, you have the right to access, correct, or request deletion of your personal data, and to object to certain processing. To exercise these rights, contact us at info@mybima.co.ke.
06

Retention

We retain policy and claims-related data for as long as required by IRA regulation and Kenyan law, and delete or anonymise other personal data when it is no longer needed for the purpose it was collected.
07

Contact

Questions about this policy or your data can be sent to info@mybima.co.ke or by phone on 0790 042 320.