HELB Data Privacy Statement.
1.0 Introduction
Higher Education Loans Board respects your privacy and is committed to protect your personal data. This privacy statement lays down the rules and principles relating to the processing of your personal data at the Higher Education Loans Board (HELB). Its purpose is to ensure that HELB processes personal data in line with the Data Protection Act, 2019. It explains personal data that HELB collects, the purpose of these personal data and how it processes it.
This statement should be read together with the Terms and Conditions of use for HELB products and services and the consent form.
It applies to all students, loanees, suppliers, visitors and third-party entities engaging with HELB under a contractual agreement.
2.0 Terms and Definitions
For the purposes of this privacy statement, the following definitions apply:
- You or Your shall refer to:
- Student – means any Kenyan citizen admitted and pursuing higher education with financial assistance from the Board.
- Loanee – means any person granted an education loan either under the Higher Education Loans Fund Act (Cap. 213, now repealed) or any person granted an education loan by the Ministry of Education from 1974 through the National Bank of Kenya or any person granted an education loan by the Ministry of Education through the National Bank of Kenya and the Kenya Commercial Bank from 1989 until commencement of this Act, or any person granted an education loan by the Board under this Act.
- Visitor – Any visitor that is a person who gains access to any HELB premises, website, portals and mobile application.
- Supplier – Any supplier who has been contracted and has a signed contract by HELB.
- Third party entities – Any entity that has been contracted or shares data with HELB for the purpose of assisting HELB execute its mandate.
- HELB, we, us, our, ours and its – shall refer to Higher Education Loans Board.
- Includes – Anything that follows is not necessarily exhaustive and therefore the examples given are not the only things/situations included in the meaning or explanation of that text.
- Personal Data – Any data or information relating to an identified or identifiable natural person who can be identified from that data; and other information; or by means reasonably likely to be used related to that data. Personal data includes biographical data (biodata) such as name, sex, marital status, date and place of birth, country of origin, individual registration number, occupation, religion and ethnicity, biometric data such as a photograph, as well as any expression of opinion about the individual, such as assessments of the status and/or specific needs.
- Data Subject – An individual whose personal data is subject to processing.
- Consent – Any freely given and informed indication of an agreement by the data subject to the processing of his/her personal data, which may be given either by a written or oral statement or by a clear affirmative action.
- Data Controller – refers to HELB, an authority to oversee the management of and to determine the purposes for the processing of personal data.
- Data Processor – refers to HELB, including partners or third parties that processes personal data on behalf of the data controller
- Data protection officer – HELB’s designated officer who supervises, monitors and reports on compliance with this policy.
- Processing of personal data – Any operation, or set of operations, automated or not, which is performed on personal data, including collection, recording, organization, structuring, storage, adaption or alteration, retrieval, consultation, use, transfer (whether in computerized, oral or written form), dissemination or otherwise making available, correction, or destruction.
- Website – Refers to helb.co.ke.
3.0 Categories of Data subjects
- Student applicants
- Parents / Guardians
- Guarantors
- Suppliers
- Third parties
- Visitors
4.0 Personal Data we collect from you and purpose for collecting it
The following is the information we collect from and store about you and the related purpose for which we collect your data:
Personal Data we collect
4.0.1.1 Personal details of Applicants
4.0.1.1.1 Applicants name
4.0.1.1.2 Identification number
4.0.1.1.3 Email address
4.0.1.1.4 KRA Pin number
4.0.1.1.5 Mobile number
4.0.1.1.6 Date of birth
4.0.1.1.7 Postal address
4.0.1.1.8 Gender
4.0.1.1.9 Whether physical or mentally challenged
4.0.1.1.10 Bank details (Bank name, Branch name and Account number)
4.0.1.2 Current place residence
4.0.1.2.1 Nearest public primary school
4.0.1.2.2 County
4.0.1.2.3 Estate / village
4.0.1.2.4 Constituency
4.0.1.2.5 Sub-location
4.0.1.2.6 Location
4.0.1.2.7 Ward
4.0.1.3 Institutional details
4.0.1.3.1 Level of study
4.0.1.3.2 Institutional name
4.0.1.3.3 Faculty / School
4.0.1.3.4 Admission / Registration number
4.0.1.3.5 Year of admission
4.0.1.3.6 Current year of study
4.0.1.3.7 Year of completion
4.0.1.3.8 Admission category
4.0.1.3.9 Course
4.0.1.4 Education background (Post primary schooling)
4.0.1.4.1 Level of study
4.0.1.4.2 Institution name
4.0.1.4.3 Exam year
4.0.1.4.4 Index number
4.0.1.4.5 Institution type
4.0.1.4.6 Country
4.0.1.4.7 Grade / point attained
4.0.1.4.8 Whether sponsored in high school / primary or not.
To enable us to execute our legal obligation of Financing Higher Education and loan repayments and recoveries as mandated to us by the government of Kenya;
For loan, bursary and scholarship application;
For loan, bursary and scholarship appraisal;
For loan, bursary and scholarship award;
For online financial literacy education;
For sharing with third party entities for purposes of resource mobilization;
For sharing with third party entities for data verification towards loan recovery;
For sharing with third party entities for data validation;
For conducting credit checks and credit scoring; Creating awareness of our new products and services and sending reminders on loan repayments;
For business analysis and intelligence to enable decision making and improvement of systems operations;
Sharing with parliament for accountability purposes;
To analyze trends and manage the volume of calls, texts, social media and customer relationship management (CRM) interactions to identify areas for improved customer service; and
Loan insurance
4.0.2.1 Mothers’ name
4.0.2.2 Mothers’ Identification number
4.0.2.3 Mothers’ NHIF deduction/payment rate
4.0.2.4 Mothers’ year of birth
4.0.2.5 Mothers’ highest level of education
4.0.2.6 Mothers’ phone number
4.0.2.7 Mothers’ KRA Pin number
4.0.2.8 Mothers’ employment status
4.0.2.9 Mothers’ occupation / profession
4.0.2.10 Mothers’ employer name
4.0.2.11 Mothers’ employer phone number
4.0.2.12 Mothers’ staff number
4.0.2.13 Fathers’ name
4.0.2.14 Fathers’ Identification number
4.0.2.15 Fathers’ NHIF deduction rate
4.0.2.16 Fathers’ year of birth
4.0.2.17 Fathers’ highest level of education
4.0.2.18 Fathers’ phone number
4.0.2.19 Fathers’ KRA Pin number
4.0.2.20 Fathers’ employment status
4.0.2.21 Fathers’ occupation / profession
4.0.2.22 Fathers’ employer name
4.0.2.23 Fathers’ employer phone number
4.0.2.24 Fathers’ staff number
4.0.2.25 Parents’ marital status
4.0.2.26 Orphaned or not
4.0.2.27 Parent(s) deceased or not
4.0.3.1 Name
4.0.3.2 Identification number
4.0.3.3 Phone number
4.0.3.4 Email Address
4.0.3.5 Postal address
4.0.3.6 Town
4.0.3.7 Constituency
4.0.3.8 Ward
4.0.3.9 Location
4.0.3.10 Sub-location
4.0.3.11 Employer name
4.0.3.12 Employer phone number
4.0.3.13 Employee number
4.0.3.14 Employer postal address
4.0.3.15 Employer email address
4.0.3.16 County
4.0.3.17 Year of birth
- When you contact us through calls, social media, our chatbot on our website and email, we may record your data following these interactions with us for quality management.
- We record and retain Closed Circuit Television (CCTV) surveillance data from our CCTV devices installed at all our office locations to provide a safe and secure environment in our premises.
- We record and retain your data (name, telephone number, and vehicle registration details) when you request for parking reservation at our premises, this data is used for parking allocation.
- We record and retain data of visitors (names, company/institution details, phone number, car registration details, Identification number and purpose of the visit) who visit our offices. This information is collected for the legitimate interest in securing our premises for our employees and all visitors.
- We record and retain HELB WIFI data (device address, traffic information on websites visited, duration and date accessed) for guest and visitors. This information is used to protect and monitor our network for information security reasons.
5.0 How your personal data is collected
We will collect and process data about you from the following sources:
- By filling in application forms when you apply for HELB products;
- By corresponding with us by phone, e-mail or social media platforms;
- When you access our Website and submit your personal data;
- When you access our Mobile application and submit your personal data;
- When you visit any of our premises and we collect your footages on CCTV;
- When you interact with us through our customer touch points – Huduma Centres, Customer Experience Centre and Student Experience Centre;
- From your employers for purposes of loan recovery;
- From third parties who you have consented to share data with us; and
- From Government Public entities.
6.0 Lawful Basis for processing your information
We will process your personal information based on any of the following lawful basis as provided for under the Data Protection Act, 2019:
- Consent you issue to us;
- For performance of a contractual agreement with you;
- Legitimate interests of the data subject;
- Compliance with a mandatory legal obligation;
- Public interest;
- To protect your vital interest; and
- For the purpose of historical, statistical and scientific research.
7.0 Retention of Information
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, the need to comply with our internal policy and the applicable legal, regulatory, accounting or other requirements.
For the purpose of loan, bursary and scholarship processing, we shall retain your personal data indefinitely to fulfil the purposes we collected it for, including for the purposes of satisfying our legal obligation.
8.0 Disclosure of Information with Third Parties
- HELB shall share/disclose personal data to third party under the following conditions.
- Upon loan default for a period exceeding one year after the grace period;
- Upon issuance of Three (3) Demand Notices and no response; and
- For purpose of listing the loanees who are in default in accordance with the prevailing Banking Act (Credit Reference Bureau) Regulations.
- HELB in exercising its mandate may share /disclose your personal data to third party entities below:
- Credit reference agencies;
- Debt recovery agencies;
- Law enforcement agencies, regulatory authorities, courts or other statutory authorities in response to a demand issued with the appropriate lawful mandate and where the form and scope of the demand is compliant with the law;
- Publicly available and/or government agencies such as Kenya Revenue Authority (KRA), Office of the Auditor General (OAG), National Social Security Fund (NSSF), National Health Insurance Fund (NHIF) and Integrated Population Registration System (IPRS), National Transport and Safety Authority (NTSA) and Registrar of Person to verify or validate your information in order to comply with regulatory requirements;
- Resource mobilization partners such as government bodies and private funders.
- Public utility Companies such Kenya Power Lighting Company and Water services company
- Public Placement and Examination bodies such as Kenya University and Colleges Placement Service(KUCPPS) and Kenya National Examinations Board
- Higher Learning Institutions such as Universities and Colleges
- Telecommunication Companies
- Financial Institutions.
- Information received from you through shall be processed and stored by the HELB and shall be accessed by our employees responsible to carry out specific tasks in carrying out our mandate.
9.0 Market Surveys and Research
We shall send you information to create awareness of our products, our activities and accomplishments as well as reminder messages on your loan status through short message services (SMS) and our social media platforms.
10.0 Terms of Use/ Privacy Policy
Kindly read these terms and conditions carefully. The following terms and conditions govern your access and use of this website which belong to the Higher Education Loans Board (HELB). By accessing, using, printing, installing, or downloading any material from this site, you agree to be bound by these Terms and Conditions.
11.0 Use of Cookies
We may store some information using cookies when you visit our website. This enables us to recognise you during subsequent visits. The type of information gathered is non-personal (such as: the Internet Protocol (IP) address of your computer, the date and time of your visit, which pages you browsed and whether the pages have been delivered successfully.
Should you choose to do so, it is possible depending on the browser you are using, to be prompted before accepting any cookies, or to prevent your browser from accepting any cookies at all. This will however cause certain features of the website not to be accessible.
12.0 Hyperlinks
Our websites provides hyperlinks to other locations or websites on the Internet. These hyperlinks lead to websites published or operated by other third parties. These hyperlinks have been provided for ease of navigation to enhance your user experience and are presented for information purposes only.
We do not endorse, recommend, approve or guarantee any third party products and services by providing hyperlinks to an external website or webpage. We are not in any way responsible for the content of any externally linked website or webpage.
By clicking on a hyperlink, you will leave the HELB webpage and accordingly you shall be subject to the terms of use, privacy and cookie policies of the other website that you choose to visit.
13.0 Safeguarding and Protection of Information
HELB is committed to ensuring the security (Confidentiality, Integrity and Availability) of your information. We have put in place reasonable physical, technical, and administrative safeguards designed to prevent unauthorized access to your information.
14.0 International Data Transfers
We may need to transfer your personal information outside Kenya for processing. Where we send your information outside Kenya, we will ensure that your information is properly protected in accordance with the applicable Data Protection Laws in that country that has similar legislation to Kenya.
15.0 Your Rights
Subject to the exceptions on contractual and lawful bases under which HELB processes your data in order to execute its mandate, below are your rights under data protection laws in relation to your personal data:
- Right to be informed that we are collecting personal data about you;
- Right to access personal data being processed and the purpose for processing such data;
- Right to request for correction of your personal data where it is inaccurate or incomplete;
- Right to request for deletion of your personal data noting that we may continue to retain your information if obligated by the law or entitled to do so;
- Right to object and withdraw your consent to processing of your personal data noting that we may continue to process if we have a legitimate or legal reason to do so; and
- Right to request restricted processing of your personal data noting that we may be entitled or legally obligated to continue processing your data and decline your request.
16.0 How to Contact Us
If you would like to contact us to exercise any of the stated rights above, you can email us on dpo@helb.co.ke or submit a request via our digital platforms below.
Upon contacting us:
- We shall verify your identity;
- We shall assess the request to confirm its legitimacy; and
- Formulate an adequate response to you.
As a Data Controller and Processor, below are the contact details of our Data Protection Officer:
Data Protection Officer
dpo@helb.co.ke
Higher Education Loans Board
19th Floor, Anniversary Towers University Way – Nairobi, Kenya
P.O. Box 69489-00400
Website: https://www.helb.co.ke
Linkedin.com/higher-education-loans-board
17.0 Amendments to the consent for collection and processing of personal data
HELB reserves the right to amend or modify the provisions of the consent for the collection and processing of your personal data at any time remain and shall remain effective from the date of notification. When this happens, your express consent shall be required for subsequent loan applications.
18.0 Amendments to this privacy statement
HELB reserves the right to amend or modify this privacy statement at any time, when this happens, the current version shall be accessible from our website www.helb.co.ke.
Any amendment or modification to this privacy statement will remain effective from the date of notification on HELBs’ website.