DBK Data Privacy Statement

1. Introduction

Development Bank of Kenya (DBK) is committed to protecting the privacy and security of your personal information. This Data Privacy Statement outlines how we collect, use, store, and share your information in compliance with applicable data protection laws.

2. Information We Collect

We may collect personal information directly from you or through your interactions with us, including:

• Your identification details (e.g., name, ID/passport number).
• Contact information (e.g., phone number, email address).
• Financial information (e.g., account details, transaction history).
• Demographic information (e.g., date of birth, nationality).
• Information collected through digital platforms (e.g., cookies, IP addresses).

3. How We Use Your Information

Your personal information is used to:

• Provide and manage your accounts and services.
• Process transactions and payments.
• Ensure regulatory compliance, including Know Your Customer (KYC) requirements.
• Improve customer service and tailor our offerings.
• Protect against fraud and unauthorized activities.
• Send relevant updates, notices, and marketing communications (with your consent).

4. Sharing of Information

We may share your information with:

• Regulatory authorities as required by law.
• Third-party service providers engaged in processing transactions, IT services, or analytics.
• Business partners where necessary to provide joint services.
• Law enforcement agencies, if required to comply with legal obligations.

Your information will not be shared for purposes unrelated to our services without your explicit consent.

5. Data Security

DBK implements robust measures to protect your information from unauthorized access, loss, or misuse. These include encryption, secure servers, access controls, and regular security audits.

6. Your Rights

As a customer, you have the right to:

• Access the personal information we hold about you.
• Request corrections to inaccurate or outdated information.
• Withdraw your consent for specific data processing activities.
• Request deletion of your personal data, subject to legal and regulatory obligations.

To exercise your rights, contact us at privacy@dbk.co.ke.

7. Retention of Data

Your personal information will be retained only as long as necessary to fulfill the purposes for which it was collected or as required by law.

8. Updates to This Privacy Statement

This Privacy Statement may be updated periodically to reflect changes in our practices or regulatory requirements. The updated version will be published on our website with the effective date.