Privacy Policy

This Privacy Policy explains how BimaNow Agency (“BimaNow”, “we”, “us”) collects, uses, shares and protects personal data when you use bimanow.co.ke, contact us, or ask us to arrange insurance or financial solutions for you.

We handle personal data in accordance with the Data Protection Act, 2019 of Kenya and the regulations made under it.

1. Who is responsible for your data

BimaNow Agency is the data controller for the personal data described in this policy. You can reach us about anything in it at [email protected] or 0721 493 115.

2. What we collect

We aim to collect the minimum needed at each stage. In practice that means:

When you first make contact

• Your name
• Your phone number and/or WhatsApp number
• Your email address, where you provide it
• The type of solution you are interested in, and any details you choose to include
• For consultation bookings, your preferred date, time and meeting format

If you decide to proceed with an application

Depending on the product, the insurer or provider may require further information — for example date of birth, identification details, dependant details, vehicle or property details, occupation, or health information for medical and life underwriting.

Automatically, when you browse

• Standard server log data such as IP address, browser type and pages requested
• Aggregated analytics about how the site is used, where analytics are enabled

3. Why we use it, and on what legal basis

Health data and other sensitive personal data are only processed with your explicit consent, and only where necessary to arrange or service the specific product you have asked for.

4. Who we share it with

We share personal data only where there is a reason to, namely with:

• The insurer or provider you choose to proceed with, so they can underwrite, issue and service your policy
• Service providers acting on our behalf — for example website hosting, email, and communication tools — under confidentiality obligations
• Regulators, courts or authorities, where we are required by law to do so

We do not sell your personal data, and we do not share it with third parties for their own marketing.

5. Transfers outside Kenya

Some of the tools we use — such as email, hosting and messaging platforms — may process data on servers outside Kenya. Where that happens, we take reasonable steps to ensure the transfer meets the requirements of the Data Protection Act, 2019, including appropriate safeguards or your consent.

6. How long we keep it

Enquiries that do not lead to a policy are retained for a limited period so we can follow up and respond to any later query, and are then deleted. Where a policy is arranged, records are kept for as long as the relationship continues and thereafter for the period required by applicable law, regulation and insurer requirements.

7. How we protect it

• The website is served over encrypted HTTPS connections
• Access to enquiry records is limited to people who need it to do their work
• We ask you not to send sensitive data through general channels, and provide secure alternatives when needed

No method of transmission or storage is completely secure. We take reasonable measures, but we cannot guarantee absolute security.

8. Your rights

Under the Data Protection Act, 2019 you have the right to:

• Be informed of how your personal data is being used
• Access the personal data we hold about you
• Ask us to correct data that is inaccurate or incomplete
• Ask us to delete data where there is no continuing lawful reason to keep it
• Object to processing, including direct marketing
• Request that your data be transferred to another party, where applicable
• Withdraw consent at any time, where processing is based on consent

To exercise any of these, email [email protected]. We will respond within the period required by law. If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

9. Marketing communications

We only send marketing or educational updates where you have agreed to receive them. Every such message includes a way to opt out, and you can also tell us to stop at any time by replying, emailing us, or messaging us on WhatsApp. Opting out of marketing does not affect messages about a policy or enquiry you have with us.

10. Cookies and analytics

This website is built as static pages and does not set advertising cookies. Where website analytics are enabled, they are used to understand aggregate traffic patterns — such as which pages are most read — and not to build individual profiles. Your browser also stores a small amount of local data to remember, for example, whether you have already seen the chat assistant during your visit. You can clear or block this through your browser settings without affecting your ability to use the site.

11. Children

This website is not directed at children. Where a product covers a child — for example an education plan or a junior medical plan — the data is provided by the parent or guardian arranging the cover.

12. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the date it was last updated.

13. Contact

Questions, requests or complaints about privacy:
Email: [email protected]
Phone / WhatsApp: 0721 493 115