Privacy Policy

Last Updated: January 6, 2025

1. Introduction

Step By Step Insurance Agency (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://stepbystepinsurance.co.ke/ (the “Website”) or use our services. Please read this Privacy Policy carefully.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Full name
• Contact information (email address, phone number, physical address)
• National ID or passport number
• Insurance policy details
• Payment information
• Date of birth
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our Website, we automatically collect:

• IP address
• Browser type and version
• Operating system
• Device information
• Pages visited and interaction patterns
• Time and date of visits
• Referring websites
• Google Search Console analytics data

3. How We Use Your Information

We use your personal information for:

3.1 Primary Purposes

• Processing insurance applications
• Communicating about your insurance policies
• Providing customer support
• Processing payments
• Sending policy updates and renewals

3.2 Secondary Purposes

• Improving our Website and services
• Analyzing usage patterns
• Marketing and promotional communications (with consent)
• Legal compliance
• Fraud prevention
• Internal business purposes

4. Information Sharing and Disclosure

4.1 We Share Information With:

• Insurance providers for policy processing
• Payment processors for transactions
• Analytics providers (like Google)
• Legal and regulatory authorities when required
• Professional advisers and auditors
• Service providers who assist our operations

4.2 We Do Not:

• Sell your personal information
• Share your information with unauthorized third parties
• Use your information for purposes other than those specified

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of sensitive data
• Secure servers and networks
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

6. Cookie Policy

6.1 We Use Cookies For:

• Essential website functionality
• Analytics and performance monitoring
• User experience improvement
• Session management
• Remember user preferences

6.2 Cookie Control

You can control cookie settings through your browser preferences. Disabling cookies may affect Website functionality.

7. Children’s Privacy

We do not knowingly collect information from children under 13. Users under 13 are prohibited from providing personal information. If we discover we have collected information from a child under 13, we will delete it.

8. Your Rights

Under applicable laws, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to processing
• Data portability
• Withdraw consent
• Lodge complaints with regulatory authorities

9. Data Retention

We retain your personal information for:

• The duration of our business relationship
• As required by law
• As needed for legitimate business purposes
• Up to 7 years after the last interaction for legal and regulatory compliance

10. International Data Transfers

While we primarily operate in Kenya, some data may be processed internationally. We ensure appropriate safeguards are in place for international transfers.

11. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes through:

• Website notifications
• Email communications
• Other appropriate means

12. Compliance with IRA Kenya

We comply with all data protection requirements set by the Insurance Regulatory Authority (IRA) of Kenya and applicable Kenyan data protection laws.

13. Contact Information

For privacy-related inquiries or to exercise your rights, contact us at: [Insert Contact Information]

14. Additional Rights for Kenyan Residents

As a Kenyan resident, you have specific rights under the Data Protection Act, including:

• Right to be informed of data collection
• Right to access your personal data
• Right to object to processing
• Right to correction of inaccurate data
• Right to deletion of personal data
• Right to restriction of processing

15. Data Protection Officer

Our Data Protection Officer can be contacted at: [info@stepbystepinsurance.co.ke]