Privacy and Cookie Notice

1. Introduction

BYPASS Cash, operated by Reddmonte Group, is committed to protecting your privacy. This Privacy and Cookie Notice explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and digital voucher services in Kenya. Please read this notice carefully to understand our practices regarding your personal data.

2. Information We Collect

We may collect the following types of information:

• Identification data: full name, national ID or passport number, date of birth, gender.
• Contact data: email address, phone number(s), postal and physical address, county.
• Financial data: M-Pesa and bank account details, transaction history, voucher balances, loan application details.
• Device and usage data: IP address, browser type, device identifiers, pages visited, cookies.
• Biometric data: facial image, where you voluntarily provide it for account security.

3. How We Use Your Information

• To register and authenticate your BYPASS CASH account.
• To process voucher purchases, transfers, airtime top-ups and payments.
• To assess loan applications and conduct credit checks.
• To send transaction alerts, service announcements and support responses.
• To detect, prevent and investigate fraud or suspicious activity.
• To improve our services, products and user experience.
• To comply with Kenyan legal and regulatory obligations.

4. What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide reporting information. Cookies help us remember your session, keep you signed in, remember your preferences, and understand how you interact with our services.

5. Types of Cookies We Use

• Essential cookies: required for the website to function and cannot be switched off.
• Preference cookies: remember your choices and settings (language, theme).
• Analytics cookies: help us understand how visitors use our site so we can improve it.
• Marketing cookies: used to deliver relevant adverts and track campaign performance.

6. Managing Cookies

You can control or delete cookies through your browser settings. Disabling essential cookies may affect the functionality of our services. The first time you visit our website you will see a cookie banner allowing you to accept or decline non-essential cookies. You may withdraw your consent at any time by clearing your browser cookies.

7. Sharing Your Information

We do not sell your personal data. We may share your information with:

• Payment partners (Safaricom M-Pesa, banks, card processors) to complete transactions.
• Cloud and infrastructure providers that host and secure our platform.
• Regulatory and law-enforcement bodies where legally required.
• Affiliated entities within Reddmonte Group, under the same confidentiality standards.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this notice, to comply with legal obligations, resolve disputes, and enforce our agreements. Transaction records are retained for a minimum of seven (7) years as required by Kenyan financial regulations.

9. Your Rights

• Right to access the personal data we hold about you.
• Right to request correction of inaccurate data.
• Right to request deletion of your data, subject to legal retention.
• Right to object to or restrict certain processing.
• Right to withdraw consent to non-essential cookies.
• Right to lodge a complaint with the Office of the Data Protection Commissioner (Kenya).

10. Security

We implement appropriate technical and organisational measures — including encryption, access controls, and regular audits — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is fully secure.

11. Changes to This Notice

We may update this Privacy and Cookie Notice from time to time. We will notify you of any significant changes by posting the updated notice on this page and updating the "Last updated" date above.

12. Contact Us

If you have any questions about this Privacy and Cookie Notice or our data practices, please contact our Data Protection Officer through the Contact Us page or the Support Centre within the BYPASS CASH app.