HELB Data Privacy Statement

HELB Data Privacy Statement


HELB Data Privacy Statement.

Higher Education Loans Board respects your privacy and is committed to protect your personal data. This privacy statement lays down the rules and principles relating to the processing of your personal data at the Higher Education Loans Board (HELB). Its purpose is to ensure that HELB processes personal data in line with the Data Protection Act, 2019. It explains personal data that HELB collects, the purpose of these personal data and how it processes it.
This statement should be read together with the Terms and Conditions of use for HELB products and services and the consent form.
It applies to all students, parents, guarantors, loanees, suppliers, visitors and third-party entities engaging with HELB under a contractual agreement.

For the purposes of this privacy statement, the following definitions apply:

  • You or Your shall refer to:
    • Student – means any Kenyan citizen admitted and pursuing higher education with financial assistance from the Board.
    • Loanee – means any person granted an education loan either under the Higher Education Loans Fund Act (Cap. 213, now repealed) or any person granted an education loan by the Ministry of Education from 1974 through the National Bank of Kenya or any person granted an education loan by the Ministry of Education through the National Bank of Kenya and the Kenya Commercial Bank from 1989 until commencement of this Act, or any person granted an education loan by the Board under this Act.
    • Visitor – Any visitor that is a person who gains access to any HELB premises, website, portals and mobile application.
    • Supplier – Any supplier who has been contracted and has a signed contract by HELB.
    • Third party entities – Any entity that has been contracted or shares data with HELB for the purpose of assisting HELB execute its mandate.
  • HELB, we, us, our, ours and its – shall refer to Higher Education Loans Board.
  • Includes – Anything that follows is not necessarily exhaustive and therefore the examples given are not the only things/situations included in the meaning or explanation of that text.
  • Personal Data – Any data or information relating to an identified or identifiable natural person who can be identified from that data; and other information; or by means reasonably likely to be used related to that data. Personal data includes biographical data (biodata) such as name, sex, marital status, date and place of birth, country of origin, individual registration number, occupation, religion and ethnicity, biometric data such as a photograph, as well as any expression of opinion about the individual, such as assessments of the status and/or specific needs.
  • Data Subject – An individual whose personal data is subject to processing.
  • Consent – Any freely given and informed indication of an agreement by the data subject to the processing of his/her personal data, which may be given either by a written or oral statement or by a clear affirmative action.
  • Data Controller – refers to HELB, an authority to oversee the management of and to determine the purposes for the processing of personal data.
  • Data Processor – refers to HELB, including partners or third parties that processes personal data on behalf of the data controller
  • Data protection officer – HELB’s designated officer who supervises, monitors and reports on compliance with this policy.
  • Processing of personal data – Any operation, or set of operations, automated or not, which is performed on personal data, including collection, recording, organization, structuring, storage, adaption or alteration, retrieval, consultation, use, transfer (whether in computerized, oral or written form), dissemination or otherwise making available, correction, or destruction.
  • Website – Refers to helb.co.ke.
  • Student applicants
  • Parents / Guardians
  • Guarantors
  • Suppliers
  • Third parties
  • Visitors
Personal Data we collectPurpose

4.0.1 Applicants details Personal details of Applicants Applicants name National Identification number Passport Photo Email address KRA Pin number Mobile number Date of birth Birth Certificate Number Marital Status           Religion           Employment Status           Postal address           Gender           Disability Status           KCSE Index Number           KCSE Year           Bank details (Bank name, Branch name and Account number)  Current place residence Nearest public primary school County Estate / village Constituency Sub-location Location Ward  Institutional details Level of study Institutional name Faculty / School Admission / Registration number Year of admission Current year of study Year of completion Admission category Course  Education background  (Post primary schooling) Level of study Institution name Exam year Index number Institution type Country Grade / point attained Whether sponsored in high school / primary or not.


  •  To enable us to execute our legal obligation of Financing Higher Education and loan repayments and recoveries as mandated to us by the government of Kenya;
  • For loan, bursary and scholarship application;
  • For loan, bursary and scholarship appraisal;
  • For loan, bursary and scholarship award;
  • For online financial literacy education;
  • For sharing with third party entities for purposes of resource mobilization;
  • For sharing with third party entities for data verification towards loan recovery;
  • For sharing with third party entities for data validation;
  • For conducting credit checks and credit scoring;
  • Creating awareness of our new products and services and sending reminders on loan repayments;
  • For business analysis and intelligence to enable decision making and improvement of  systems operations;
  • Sharing with parliament for accountability purposes;
  • To analyze trends and manage the volume of calls, texts, social media and customer relationship management (CRM) interactions to identify areas for improved customer service; and
  • Loan insurance
  • To determine the level of need of the applicant using the Means Testing Instrument (MTI) that will inform the level of financing of Government scholarships, loans and household contributions.
  • To support loan recovery process.
  • Communication to the institutions of higher learning
  • Communicating to the applicants, parents and guardians regarding loans, bursary and HELB scholarships;
  • External Resource Mobilization.
  •  Religious data shall be collected for purposes of developing religious compliant products.

4.0.2        Parents / Guardian / Sponsor / Public trustee details      Mothers’ name      Mothers’ Identification number      Mothers’ NHIF deduction/payment rate      Mothers’ year of birth      Mothers’ highest level of education      Mothers’ phone number      Mothers’ KRA Pin number      Mothers’ employment status      Mothers’ occupation / profession    Mothers’ employer name    Mothers’ employer phone number    Mothers’ staff number    Fathers’ name    Fathers’ Identification number    Fathers’ NHIF deduction rate    Fathers’ year of birth    Fathers’ highest level of education    Fathers’ phone number    Fathers’ KRA Pin number    Fathers’ employment status    Fathers’ occupation / profession    Fathers’ employer name    Fathers’ employer phone number    Fathers’ staff number    Parents’ marital status    Orphaned or not    Parent(s) deceased or not


  • To support the application process for loan, bursary and HELB scholarship.
  • For loan, bursary and HELB scholarship appraisal.

4.0.3        Guarantors      Name      Identification number      Phone number      Email Address      Postal address      Town      Constituency      Ward      Location    Sub-location    Employer name    Employer phone number    Employee number    Employer postal address    Employer email address    County    Year of birth

  •  To support the application process for loan, bursary and HELB scholarship.
  •  To support loan recovery process.
  • When you contact us through calls, social media, our chatbot on our website and email, we may record your data following these interactions with us for quality management.
  • We record and retain Closed Circuit Television (CCTV) surveillance data from our CCTV devices installed at all our office locations to provide a safe and secure environment in our premises.
  • We record and retain your data (name, telephone number, and vehicle registration details) when you request for parking reservation at our premises, this data is used for parking allocation.
  • We record and retain data of visitors (names, company/institution details, phone number, car registration details, Identification number and purpose of the visit) who visit our offices. This information is collected for the legitimate interest in securing our premises for our employees and all visitors.
  • We record and retain HELB WIFI data (device address, traffic information on websites visited, duration and date accessed) for guest and visitors. This information is used to protect and monitor our network for information security reasons.

We will collect and process data about you from the following sources:

  • By filling in application forms physically or electronically when you apply for HELB products;
  • By corresponding with us by phone, e-mail or social media platforms;
  • When you access our Website and submit your personal data;
  • When you access our Mobile application and submit your personal data;
  • When you visit any of our premises and we collect your footages on CCTV;
  • When you interact with us through our customer touch points – Huduma Centres, Customer Experience Centre and Student Experience Centre;
  • From your employers for purposes of loan recovery;
  • From third parties who you have consented to share data with us; and
  • From Government Public entities.

We will process your personal information based on any of the following lawful basis as provided for under the Data Protection Act, 2019: 

  • Consent you issue to us;
  • For performance of a contractual agreement with you;
  • Legitimate interests of the data subject;
  • Compliance with a mandatory legal obligation;
  • Public interest;
  • To protect your vital interest; and
  • For the purpose of historical, statistical and scientific research.


To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, the need to comply with our internal policy and the applicable legal, regulatory, accounting or other requirements.

For the purpose of loan, bursary and scholarship processing, we shall retain your personal data indefinitely to fulfil the purposes we collected it for, including for the purposes of satisfying our legal obligation.


  • HELB shall share/disclose personal data to third party under the following conditions.
    • Upon loan default for a period exceeding one year after the grace period;
    • Upon issuance of Three (3) Demand Notices and no response; and
    • For purpose of listing the loanees who are in default  in accordance  with the prevailing Banking Act (Credit Reference Bureau) Regulations.
  • HELB in exercising its mandate may share /disclose your personal data to third party entities below:
    • Credit reference agencies;
    • Debt recovery agencies;
    • Law enforcement agencies, regulatory authorities, courts or other statutory authorities in response to a demand issued with the appropriate lawful mandate and where the form and scope of the demand is compliant with the law;
    • Publicly available and/or restricted government databases such as The Kenya University and Colleges Placement Service (KUCPPS), The Universities Fund (UF), The State Department for Technical and Vocational Education and Training (SD-TVET), Kenya Revenue Authority (KRA), Office of the Auditor General (OAG), National Social Security Fund (NSSF), National Health Insurance Fund (NHIF) and Integrated Population Registration System (IPRS), National Transport and Safety Authority (NTSA), Kenya National Examination Board (KNEC), Telcos (Safaricom, Airtel), National Council For Persons With Disabilities (NCPWD), State Department For Basic Education (SDBE), Kenya National Bureau of Statistics (KNBS), State Department for Social Protection and Senior Citizens Affairs, National Employment Authority (NEA)and Kenya National Examinations Council (KNEC).
    • Resource mobilization partners such as government bodies and private funders.
    • Public utility Companies such Kenya Power Lighting Company and Water services company
    • Higher Learning Institutions such as Universities and Colleges
    • Telecommunication Companies
    • Financial Institutions.
  • Information received from you through shall be processed and stored by the HELB and shall be accessed by our employees responsible to carry out specific tasks in carrying out our mandate.


We shall send you information to create awareness of our products, our activities and accomplishments as well as reminder messages on your loan status through short message services (SMS) and our social media platforms.


Kindly read these terms and conditions carefully. The following terms and conditions govern your access and use of this website which belong to the Higher Education Loans Board (HELB). By accessing, using, printing, installing, or downloading any material from this site, you agree to be bound by these Terms and Conditions.

We may store some information using cookies when you visit our website. This enables us to recognise you during subsequent visits. The type of information gathered is non-personal (such as: the Internet Protocol (IP) address of your computer, the date and time of your visit, which pages you browsed and whether the pages have been delivered successfully.

Should you choose to do so, it is possible depending on the browser you are using, to be prompted before accepting any cookies, or to prevent your browser from accepting any cookies at all. This will however cause certain features of the web site not to be accessible.

Our websites provides hyperlinks to other locations or websites on the Internet. These hyperlinks lead to websites published or operated by other third parties. These hyperlinks have been provided for ease of navigation to enhance your user experience and are presented for information purposes only.

We do not endorse, recommend, approve or guarantee any third party products and services by providing hyperlinks to an external website or webpage. We are not in any way responsible for the content of any externally linked website or webpage.

By clicking on a hyperlink, you will leave the HELB webpage and accordingly you shall be subject to the terms of use, privacy and cookie policies of the other website that you choose to visit.

HELB is committed to ensuring the security (Confidentiality, Integrity and Availability) of your information. We have put in place reasonable physical, technical, and administrative safeguards designed to prevent unauthorized access to your information.

We may need to transfer your personal information outside Kenya for processing. Where we send your information outside Kenya, we will ensure that your information is properly protected in accordance with the applicable Data Protection Laws in that country that has similar legislation to Kenya.

Subject to the exceptions on contractual and lawful bases under which HELB processes your data in order to execute its mandate, below are your rights under data protection laws in relation to your personal data:
15.0.1 Right to be informed that we are collecting personal data about you;
15.0.2 Right to access personal data being processed and the purpose for processing such data;
15.0.3 Right to request for correction of your personal data where it is inaccurate or incomplete;
15.0.4 Right to request for deletion of your personal data noting that we may continue to retain your information if obligated by the law or entitled to do so;
15.0.5 Right to object and withdraw your consent to processing of your personal data noting that we may continue to process if we have a legitimate or legal reason to do so; and
15.0.6 Right to request restricted processing of your personal data noting that we may be entitled or legally obligated to continue processing your data and decline your request.

If you would like to contact us to exercise any of the stated rights above, you can email us on dpo@helb.co.ke or submit a request via our digital platforms below.
Upon contacting us:
16.0.1 We shall verify your identity;
16.0.2 We shall assess the request to confirm its legitimacy; and
16.0.3 Formulate an adequate response to you.
As a Data Controller and Processor, below are the contact details of our Data Protection Officer:

Data Protection Officer
Higher Education Loans Board
19th Floor, Anniversary Towers University Way – Nairobi, Kenya
P.O. Box 69489-00400
Tel: +254 711052439

HELB reserves the right to amend or modify the provisions of the consent for the collection and processing of your personal data at any time remain and shall remain effective from the date of notification. When this happens, your express consent shall be required for subsequent loan applications.

HELB reserves the right to amend or modify this privacy statement at any time, when this happens, the current version shall be accessible from our website www.helb.co.ke.
Any amendment or modification to this privacy statement will remain effective from the date of notification on HELBs’ website.