Privacy policy

Aventus Technology Limited (the “Company” or “We”) operating under brand LendPlus respect the Customers (the “Customer” or “You”) and their privacy, and are committed to protecting our Customers’ privacy through compliance with this policy (“Privacy Policy”). This Privacy Policy describes the type of information we may collect from you or that you may provide when you visit our website or using the LendPlus App, and our practices for collecting, using, maintaining, protecting and disclosing that information.

This Privacy Policy and any amendments or variations thereto take effect on their date of publication.

With our LendPlus App you can use our Services and apply for a consumer loan.

By clicking on the button “Apply for a Loan”, the Customer undertakes and acknowledges that he/she has read and agreed to all contents set forth in the Terms and Conditions and Privacy Policy.

This Privacy Policy may be amended or updated from time to time to reflect changes in our practices with respect to the processing of personal data, or changes in applicable law. It is important that you read this Privacy Policy together with our terms and conditions, and any other policies and notices we may provide on specific occasions when we are collecting or processing personal data about you so that you are aware of how and why we are using your data.

1. General part

The Customer is required and has committed to read, understand, and agree to be bound by the content described in the Privacy Policy regarding the use of the Company’s services on the website/App.

Before using the products and services of the Company on the website/App, the Customer acknowledges and confirms that he/she agrees to comply with all of the content as stipulated in this Privacy Policy. When the Customer clicks on the button “Apply for a Loan” and/or continues to perform the steps of creating transactions and/or providing information to the Company, it is understood that the Customer has accepted and given consent to be bound by this Privacy Policy.

“Service” refers to any product or service that the Company provides to the Customer through the website/App.

2. Commitment of the Customer

The Customer undertakes to read, understand and agree to all content and terms specified in this Privacy Policy. Accordingly, the Customer is fully aware and agrees that the information provided by the Customer when the Customer logs in, accesses, or uses the website/App or any features, processes, functions of website/App will be actually or able to be collected, processed, transferred (including domestic and overseas) or stored as set forth in this Privacy Policy and Applicable Data Protection Laws.

The Customer represents and warrants that a relative/contact person whose information provided by the Customer pursuant to Section 3 below has agreed that the Company is able to use, process, store and/or disclose their information in accordance with this Privacy Policy and Applicable Data Protection Laws. 

For the purpose of complying with the Company’s internal policies and Data Protection Laws, the Customer is aware that the Company will only provide the Services to Kenyans from eighteen (18) years of age or older, within the Republic of Kenya. Therefore, the Customer undertakes that the information provided by the Customer to the Company is correct and the Customer meets the subjective conditions to establish transactions with the Company. 

The Customer is fully aware that they still have the right to request the Company to suspend or permanently stop the collection, use, transfer of all or some of the information collected from the Customer, even in the case that the Customer agrees to allow the Company to collect, use and transfer information previously, by contacting the Company’s Customer Service for instructions.

By downloading the Lend Plus App, the Customer hereby consents to the collection and processing of the Customer’s personal information for legitimate business purposes, included but not limited to determining the Customer’s credit score and providing a loan. The Customer hereby certifies that all the information provided is true and correct to the best of his/her knowledge, and that any misrepresentations or falsity therein will be considered as an act to defraud the Company. The Customer shall endeavour to furnish and promptly update their information in an effort to maintain accuracy and completeness at all times. The Company hereby reserves the right to (in its sole discretion) suspend or terminate the Customer’s access to the Services if in the Company’s reasonable opinion, the Customer knowingly provided information of a false, untrue, inaccurate or incomplete nature. The Customer authorizes the Company to verify and investigate the above statements/information as may be required, from the references provided and other reasonable sources. For this purpose, the Customer expressly consent to the processing of any personal information and records relating to the Customer that might be obtained from third parties, including government agencies, an employer, credit bureaus, business associates and other entities which the Company may deem proper and sufficient in the conduct of the Customer’s business, sensitive or otherwise, for the purpose of determining the Customer’s eligibility for a loan which the Customer is applying for.

3. Personal information which we collect

We collect Personal Information about you. The Personal Information which we collect may be provided by you directly (for example, when you opening an Account to use the Service via App, or you otherwise provide Personal Information to us) or by third parties, or be collected automatically when you use the Service.

The collected information can be grouped as follows:

Identity Data including first name, last name, National ID, date of birth, gender, education background, marital status;

Contact Data including physical address, e-mail, phone number, contact person; 

Employment Data including data about your status of employment, job position, employer information, and salary or wage information;

Profile Data including an Account ID, password that you will use to access the App after registration and all the data and information available in your customer profile, account statements and payment history;

Financial Data including loan history, mobile wallet account details, payment data.

When you use the App, you will be required to provide to us such relevant information as may reasonably be required by us in order for the App to work. For example, when a payment is made through the electronic money facility within the App, you will be required to provide information relating to the payment, such as a mobile wallet account used, the name of the holder for that mobile wallet account, the number of the mobile wallet account, and the amount of money paid;

Phone Device Information including IP address, hardware information (including the device’s operating system, Android version, IMEI number, IMSI number, MAC address, serial number, Android ID, screen size and other hardware information), and serial number to uniquely identify the device and ensure that unauthorized devices are not acting on your behalf to prevent frauds;

Whenever you use the App or visit our website, certain information may also be collected on an automated basis using cookies. Cookies are small application files stored on your computer or mobile device. We use cookies to track user activity to enhance user interface and experience. Most mobile devices and internet browsers support the use of cookies; but you may adjust the settings on your mobile device or internet browser to reject several types of certain cookies or certain specific cookies. Your mobile device and/or browser may also enable you to delete at any time whatever cookies have previously been stored. However, doing so may affect the functionalities available on the App or our website. You have the sole right to refuse our “Cookies” on your computer or other device, unless our “Cookies” are required to prevent fraud or to ensure the security of your website/App that we control, manage, and operate. The use of the website/App may be restricted if you do not accept our “Cookies”.

Information collected from third parties:

You hereby acknowledge and agree that, for the purpose of providing the Service, we may, from time to time cooperate with third-parties including Credit Reference Bureaus, Mobile Network Providers, collection agencies, our agents, vendors, contractors, partners who provide services to us, perform functions on our behalf, or whom we collaborate with, and we may receive information about you from them.

In such cases, we will only collect your Personal Information for or in connection with the purposes for which such third parties are engaged or the purposes of our collaboration with such third parties (as the case may be), provided that we have taken reasonable steps to ensure that such third parties would undertake to us to obtain your consent for the disclosure of your Personal Information.

Add-on only for Samsung Galaxy Store users:

a) SMS Data
In addition to the above, we also may collect SMS Data from users who have installed LendPlus App from Samsung Galaxy Store.

Access to SMS information is optional. You can choose to grant or deny this permission at any time. Your refusal of permission will mean lack of SMS information and inability to assess the credit risk on our part. With your explicit consent, we access only financial transaction SMS in your inbox for the purpose of assessing credit risk and enabling fast loan disbursement. No other SMS content is accessed.  We also collect and process telephone data such as SMS logs. We encrypt and transmit your SMS information to our server (https://lendplus.ke/api) using the HTTPS protocol, and we do not share this type of data with third parties.

b) Location Data
As part of our legitimate efforts to assess customer risk and prevent fraud, and with your explicit consent, the LendPlus App may collect approximate geo-location data on an occasional basis while the App is actively in use. This geo-location information is not continuously tracked and is only processed for the purposes of enhancing the integrity and security of our financial services.

This data is securely transmitted to our server (https://lendplus.ke/api) using HTTPS and stored in accordance with applicable data protection laws and is not shared with any third parties. You retain the right to withdraw your consent at any time, request access to your data, or object to this processing.

Access to your geo-location information is entirely voluntary. You may choose to grant or deny this permission at any time, and you may also temporarily disable location access through your device settings. Please note that denial of geo-location access may limit the availability of certain location-based features within the App. Subject to your explicit consent, we may collect and process your approximate geo-location while the App is in active use, for the purposes of customer verification and fraud prevention.

4. Data Security

All the data and transactions are protected by 256 SSL encryption, and the data collected will be transmitted and uploaded to our server using the HTTPS protocol in a secure manner. Your personal information will not be disclosed to third parties without your prior consent.

5. The usage of personal information which we collect

We may use the Personal Information collected for any of the following purposes as well as for such other purposes as are permitted by the Applicable Laws:

• to identify you and to register you as a user and to administer, manage or verify your Account and your credit conditions as such;
• to facilitate or enable any checks as we may in our discretion consider necessary before we register you as a user;
• to disburse loan and collect payments for use of the Service;
• to build credit models and perform credit scoring;
• to comply with Applicable Law, regulations, and rules, such as those relating to “know-your-customer” and anti-money laundering requirements;
• to communicate with you and to send you information in connection with the use of the App;
• to notify you of any updates to the App or changes to the Service (including interest rate, Transaction Fees, etc.) available;
• to process and respond to enquire and feedback received from you;
• to maintain, develop, test, enhance and personal the App to meet your needs and preferences as a user;
• to contact you by telephone using auto-dialed or pre-record message calls or text (SMS) messages (if applicable) as authorized for the purposes described in this Privacy Policy and the Terms and conditions;
• to monitor and analyse user activities and demographic data including trends and usage of the Service available on the App; or
• to send direct marketing communications and information on special offers or promotions.

6. Sharing of personal information which we collect

By accepting this Privacy Policy, you acknowledge, understand and agree that we may share the information collected from you:

• where required or authored by Applicable Law (including but not limited to responding to regulatory enquire, investigations or directives, or complying with statutory or regulatory filing and reporting requirements), for the purpose so specified in that Applicable Law;
• where there is any form of legal proceeding between you and us, or between you and another party, in connection with, or relating to the Service, for the purposes of that legal proceeding;
• in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing or acquisition of all or a portion of our business by or into another company, for the purposes of such a transaction (even if the transaction is eventually not proceeded with);
• to our employees, officers, representatives or professional advisers who need to know such information for the purposes of exercising our rights or carrying out our obligations under or in connection with our Services;
• where we share your Personal Information with third parties, such as:

• where we publish statistics relating to the use of the App and the Service, in which case all information will be aggregated and made anonymous; and when we believe in good faith that disclosure of your Personal Information is necessary to comply with Applicable Law, prevent physical harm or financial loss, report suspected illegal activity, or to investigate violations of our Terms of Use.

7. Storage of Personal Information

The Personal Information that we collect from you may be stored at, transferred to, or processed by third parties service providers. We will use all reasonable efforts to ensure that all such third parties service providers provide a level of protection that is comparable to our commitments under this Privacy Policy.

Your Personal Information may also be stored or processed outside of your country by personnel who work for us in other countries, or by our third parties service providers, suppliers, contractors, to the extent permitted under Applicable Law. In such a case, we will ensure that such Personal Information remains subject to a level of protection comparable to what is required under the Data Protection Legislation (and, in any event, in line with our commitments in this Privacy Policy).

8. Security of Personal Information

Confidentiality of your Personal Information is of utmost importance to us. We will use all reasonable efforts to protect and secure your Personal Information against access, collection, use or disclosure by authorized persons and against unlawful processing, accidental loss, destruction and damage or similar risks. Unfortunately, the transmission of information via the Internet is not completely secure. You are and shall at all times be responsible for keeping your Account details confidential and you must not share your password with anyone and you must always maintain the security of the mobile device that you use at any given time. You shall be responsible for any act or omission of any user(s) that access your Account information that, if undertaken by you would be deemed to be a violation of this Privacy Policy. You agree and undertake to notify us of any unauthorised access or use of your Account or password or any breach of security. You acknowledge, understand and agree that we shall not be held liable for any loss and/or damage arising from any failure to maintain the secrecy and confidentiality of your password and all activities that transpire on or within your Account.

9. Data retention

Being a registered reporting institution under the Proceeds of Crime and Anti-Money Laundering Act, as amended (POCAMLA), the Company has the obligation to retain certain records for a period of at least seven (7) years, from the date of the relevant transaction or following the termination of an Account or business relationship with the Company. To ensure the Company’s ability to comply with this obligation, the Company will retain relevant personal data associated with your Account for a period of ten (10) years from the date of the closure of your Account. 

In some circumstances, such as when you have no outstanding credit balance, you can ask us to close your  Account and delete the associated personal data (subject to the Company’s record retention obligations under the POCAMLA as mentioned above): see the section on Your rights under Data Protection Laws below for further information. 

In some circumstances we will anonymise your information such that it will no longer constitute personal data. In such cases we may use anonymised information for whatever legitimate purpose without further notice to you. 

10. Your rights under Data Protection Laws

You have rights under data protection laws in relation to your personal data. These include rights to:

(a) Request correction of your personal data:

You may by writing to our Data Protection Officer at customer@lendplus.ke, request us to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

(b) Request deletion of your personal data:

You may by writing to our Data Protection Officer at customer@lendplus.ke, request us to delete your personal information that we have no good reason to continue processing. You also have the right to ask us to delete your personal information for which you have successfully exercised your right to object to processing (see below), where we may process your information unlawfully or where we need to delete your personal information to comply with local law. Please note, however, that due to specific legal reasons, we may not always be able to honor your removal request, and if applicable, we will notify you when you request it. For the avoidance of doubt, we may, notwithstanding your request for deletion of your personal information, retain your personal information as required or authorised by Applicable Law and the Data Protection Legislation, as reasonably necessary on a lawful basis, or for historical, statistical and/or research purposes. Nonetheless, we shall, to the greatest possible extent anonymise and/or pseudonyms any personal data retained.

Information on cancellation (deletion) of your Personal Account can be found at this link https://lendplus.ke/account-cancellation/.

(c) Object to processing of your personal data:

Where we are relying on a legitimate interest (or those of a third parties). You also have the right, by writing to our Data Protection Officer at customer@lendplus.ke, to object to the processing of your personal information. We may, however, proceed with the processing of your personal information in accordance with the Applicable Law and Data Protection Laws in the existence of compelling legitimate interests including but not limited to the establishment, exercise or defence of any legal claim against you.

(d) Request the transfer of personal data:

We may, on receipt of your valid written request to our Data Protection Officer at customer@lendplus.ke, provide you or a third parties of your choice with your personal information in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information for which you originally consented to our use or we use that information to contract with you.

(e) Withdrawal of consent:

You may by writing to our Data Protection Officer at customer@lendplus.ke withdraw consent at any time where we are relying on your consent to process your personal information. The withdrawal of consent will not affect the lawfulness or validity of any processing carried out before the withdrawal of your consent. Please note that you will not be able to access certain products or Services if you withdraw your consent.

Any queries and/or concerns may be channeled through our customer service email or online customer service, and we shall try to respond to all legitimate requests within one (1) month. If your request is particularly complex or you have made multiple requests, it may sometimes take us more than a month. In this case, we will notify you and keep you informed.

11. External Links

Through this Privacy Policy, the Customer is fully aware that the Customer is responsible for protecting his/her Account information, login password on the website/App. At the same time, the Company warns the Customer not to provide any information related to his/her Account and password for the website/App as well as any other e-commerce platform. The Company is not responsible in case the Customer accesses the website/App or any unofficial link and/or is not managed, operated by the Company. In the event that the Customer discloses its information, data to these websites/App or links, the Customer is solely responsible for the disclosure of its information and data as well as for its confidential compliance and/or privacy policies at such websites/App or links.

12. Amendments to the Privacy Policy

Through this Privacy Policy, the Customer agrees that We may amend this Privacy Policy at any time in accordance with our discretion and policies from time to time and will be uploading to website/App in modified version. We note that the Customer needs and undertakes to check and update this Privacy Policy periodically for the latest information. Changes to this Privacy Policy take effect from the date of upload on our website/App.

We reserve the right to amend or update this Privacy Policy from time to time to reflect changes in use of Customer’s personal information, our legal obligations, or the manner in which we process personal data. In the event of any material changes to this Privacy Policy or the way we handle your Personal Information, we will post the updated version on our website and/or App, and where appropriate, notify you via email.

Unless expressly stated otherwise, the revised version shall supersede all prior versions of this Privacy Policy and shall become effective upon publication. Your continued use of the Services following the effective date of such amendments shall constitute your acknowledgment and acceptance of the updated terms.

If you have any questions regarding this Privacy Policy or you would like to obtain access and/or make corrections to your Personal Information, please contact our Data Protection Officer at customer@lendplus.ke .

This Privacy Policy was last updated on 16 April 2025.