Privacy Policy

Maroon Loss Assessors Limited ("we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the Kenya Data Protection Act, 2019 (the "Act") and any regulations made thereunder.

By using our website, submitting an assessment request, or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

Maroon Loss Assessors Limited is the Data Controller responsible for your personal data.

Company Registration No.: PVT-RXUPZM3

KRA PIN: P051708398D

Incorporated: 7 May 2018 under the Companies Act, 2015

Registered Office:

Le-Vans Business Centre, Off Uhuru Highway, Near Bunyala Road Roundabout

P.O. Box 5307 – 00506, Nairobi, Kenya

Data Protection Contact:

Email: info@maroonlossassessors.com

Tel: +254 722 572 265

We collect only the personal data that is necessary for the purposes described in this Policy. This may include:

Identity & Contact Data

Vehicle & Claim Data

Technical Data (Website)

Sensitive Data

Where required for a specific assessment or legal proceeding, we may process sensitive personal data such as health information relating to accident injuries. We will obtain your explicit consent before processing such data unless processing is required by law.

We process your personal data for the following purposes:

Under Section 30 of the Kenya Data Protection Act, 2019, we rely on the following lawful bases for processing your personal data:

Contractual Necessity

Processing is necessary to perform the assessment services you or your insurer has requested from us.

Legal Obligation

We are required to retain certain records and comply with obligations imposed by the Insurance Regulatory Authority (IRA), the Kenya Revenue Authority (KRA), and applicable Kenyan law.

Legitimate Interests

We process data to operate our business, improve our services, and protect our legal rights, provided such interests are not overridden by your rights and freedoms.

Consent

Where we rely on consent — for example, for marketing communications or processing sensitive data — we will obtain your explicit, informed consent and you may withdraw it at any time.

We do not sell, rent, or trade your personal data. We may share your data only in the following circumstances:

Instructing Parties

Assessment reports and supporting data are shared with the insurance company, broker, law firm, or other party that instructed the assessment on your behalf.

Regulatory Authorities

We may disclose data to the Insurance Regulatory Authority (IRA), the Office of the Data Protection Commissioner (ODPC), or other competent authorities where required by law or regulation.

Professional Advisers

We may share data with our legal advisers, auditors, or accountants on a need-to-know basis and subject to confidentiality obligations.

Service Providers

We engage trusted third-party service providers (e.g. IT support, cloud hosting) who process data on our behalf under written data processing agreements that require them to maintain appropriate security measures.

Legal Proceedings

We may disclose data where required by a court order, subpoena, or other legal process.

All third parties are required to handle your data in accordance with the Kenya Data Protection Act, 2019.

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.

Assessment Records: Retained for a minimum of seven (7) years from the date of the assessment report, in line with professional and legal obligations applicable to loss assessors and adjusters in Kenya.

Enquiry & Contact Records: Retained for up to two (2) years from the date of last contact.

Website Analytics Data: Retained for up to twenty-six (26) months.

Financial Records: Retained for seven (7) years as required by the Income Tax Act and VAT Act.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

Under the Kenya Data Protection Act, 2019, you have the following rights in relation to your personal data:

Right of Access (Section 26)

You have the right to request confirmation of whether we hold your personal data and to receive a copy of that data.

Right to Rectification (Section 26)

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure (Section 26)

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.

Right to Object (Section 26)

You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis.

Right to Withdraw Consent (Section 40)

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Right to Lodge a Complaint (Section 56)

You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details in Section 11. We will respond within the timeframes prescribed by the Act.

The Kenya Data Protection Act, 2019 requires data controllers and processors who handle personal data to register with the Office of the Data Protection Commissioner (ODPC). Maroon Loss Assessors Limited, as a data controller processing personal data in the course of providing professional loss assessment services, is committed to full compliance with this registration requirement.

For information about the ODPC, visit: www.odpc.go.ke

Our website uses cookies and similar tracking technologies to improve your browsing experience and to understand how visitors use our site.

Types of Cookies We Use:

Essential Cookies

Necessary for the website to function correctly. These cannot be disabled.

Analytics Cookies

We use analytics tools (such as Google Analytics) to collect anonymised information about how visitors interact with our website. This helps us improve our content and services. Analytics data is processed in accordance with applicable data protection law.

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

By continuing to use our website, you consent to our use of cookies as described in this Policy.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We encourage you to contact us immediately if you have any concerns about the security of your personal data.

Our primary operations are based in Kenya and we process personal data within Kenya. Where we engage third-party service providers located outside Kenya (for example, cloud hosting or analytics services), we ensure that appropriate safeguards are in place in accordance with Section 48 of the Kenya Data Protection Act, 2019, including contractual protections that provide an equivalent level of data protection.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. The updated Policy will be published on this page with a revised effective date. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:

Maroon Loss Assessors Limited

Le-Vans Business Centre, Off Uhuru Highway

P.O. Box 5307 – 00506, Nairobi, Kenya

Email: info@maroonlossassessors.com

Tel: +254 722 572 265 / +254 771 648 498

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC):

Website: www.odpc.go.ke