Under the Kenya Data Protection Act 2019 (No. 24 of 2019), you have the following rights regarding your personal data held by Altum Capital.
Your Rights Under DPA 2019 — Section 26
Right to Be Informed
You have the right to be told — before or at the time of collection — what your personal data will be used for, who will process it, and who else may receive it.
DPA 2019, Section 26(a) · Section 29
Right of Access
You may request a copy of the personal data Altum Capital holds about you, including your client record, loan history, repayment records, and any documents uploaded in your name. We will respond within 21 days of a valid request.
DPA 2019, Section 26(b)
Right to Correction
If any personal data we hold about you is inaccurate, out of date, incomplete, misleading, or unlawfully obtained, you have the right to request that it be corrected.
DPA 2019, Section 26(d)
Right to Object
You may object to the processing of all or part of your personal data. Where processing is based solely on your consent, you may withdraw that consent at any time. Note that withdrawal does not affect the lawfulness of processing already carried out.
DPA 2019, Section 26(c)
Right to Deletion (Erasure)
You may request deletion of personal data that we are no longer legally authorised to retain. Please note: we are required by law to retain loan and financial records for up to 7 years and cannot delete data subject to a legal retention obligation.
DPA 2019, Section 26(e)
Right Not to Be Subject to Automated Decisions
You have the right not to be subject to a decision made solely by automated means (including algorithmic credit scoring) that produces legal or similarly significant effects on you. All loan approval decisions at Altum Capital are made by a human administrator.
DPA 2019, Section 35
Submit a Data Rights Request
We will acknowledge your request within 7 working days and provide a full response within 21 days of receipt.
Request Submitted Successfully
Your reference number is: —
We will acknowledge your request within 7 working days and provide a full response within 21 days. If you provided an email address, we will respond there. Otherwise, we will contact you by phone.
Right to Escalate to the ODPC
If you are not satisfied with our response to your request, or if you believe that Altum Capital has violated your data protection rights, you have the right to lodge a complaint directly with the Office of the Data Protection Commissioner (ODPC):
