Privacy Policy

We collect information you provide directly when you register for and use your account, including identifying details, contact information, and employment and contribution records supplied by you or your employer. We also collect limited technical information automatically to keep your account secure.

• Identity data — full name, national ID or passport number, date of birth, and member number.
• Contact data — email address, phone number, and postal address.
• Financial data — contributions, benefit balances, and payment instructions.
• Technical data — sign-in timestamps, device and browser type, and IP address.

We process your information to administer your retirement benefits, keep your account secure, and meet our regulatory obligations. This is placeholder text illustrating where the finalized purposes will appear.

• To administer contributions, statements, and benefit claims.
• To verify your identity and prevent unauthorised access.
• To communicate service updates and respond to your requests.
• To comply with legal and Retirement Benefits Authority requirements.

We rely on a combination of lawful bases depending on the activity, including performance of our contract with you, compliance with legal obligations, our legitimate interests in operating the scheme, and your consent where required. Final wording will be confirmed by counsel.

We do not sell your personal information. We share it only where necessary with your employer, scheme trustees, appointed custodians and administrators, regulators, and service providers acting on our instructions under appropriate safeguards.

We apply institutional-grade safeguards, including encryption of data in transit and at rest, multi-factor authentication, least-privilege access controls, and continuous monitoring. No system is perfectly secure, and we encourage you to protect your credentials and enable an authenticator.

We retain your information for as long as you hold benefits with the scheme and for any additional period required by law or regulation. When information is no longer required, it is securely deleted or anonymised.

Subject to applicable law, you may request access to your information, correction of inaccuracies, deletion in certain circumstances, and restriction of or objection to specific processing. To exercise these rights, contact us using the details below.

Questions about this policy or your data can be sent to our Data Protection Officer at privacy@enwealth.example, or by post to Enwealth Retirement Services Ltd., Nairobi, Kenya. This contact information is a placeholder.