Privacy Policy

1. Who Controls Your Data

The primary contact for privacy matters is FPESA at Kofisi Square, 104 Riverside Drive, Nairobi, Kenya.

Email: info@fpesa.co.ke

Phone: +254 785 654 887

2. Data We Collect

We may collect contact details, account credentials, organization details, KRA PIN, identity document details, beneficial owner and director information, bank account references, transaction instructions, quote requests, supporting documentation, compliance decisions, settlement confirmations, audit logs, IP address, device details, approximate location, support messages, and communications with FPESA.

We may also collect information from participating banks, forex bureaus, identity verification providers, fraud-prevention tools, payment and settlement providers, regulators, and other parties you authorize.

3. Why We Use Data

We use personal data to operate the platform, create and manage accounts, verify users and organizations, support KYC and AML checks, route quote requests, enable blind quote comparison, support acceptance and settlement workflows, maintain audit trails, prevent fraud, respond to support requests, improve security, comply with law, enforce platform rules, and protect FPESA, users, participating financial institutions, and the public.

4. Legal Bases

Depending on the context, we process data because it is necessary to perform a contract, take requested pre-contract steps, comply with legal and regulatory obligations, protect legitimate business and security interests, establish or defend legal claims, or because you have given consent where consent is required.

5. KYC, AML, Fraud, and Regulatory Use

FPESA may process and share identity, organization, transaction, and supporting-document data for know-your-customer, anti-money-laundering, sanctions screening, fraud prevention, audit, dispute handling, regulatory reporting, and law-enforcement response. We may decline, suspend, delay, reverse, report, or restrict access where we believe a user, transaction, document, quote, settlement, or instruction creates legal, compliance, operational, security, or reputational risk.

6. Sharing Data

We may share data with participating banks, authorized dealers, forex bureaus, payment and settlement providers, KYC and document-verification providers, cloud and security vendors, auditors, legal advisers, regulators, courts, law-enforcement agencies, and successor entities in a merger, financing, restructuring, or sale. We require service providers to use data only for permitted purposes and to apply appropriate confidentiality and security controls.

7. International Transfers

Although FPESA is Kenya-focused, our corporate, infrastructure, support, security, and cloud operations may involve processing outside Kenya, including the United States. Where personal data is transferred internationally, we use contractual, technical, organizational, and other safeguards intended to protect the data and comply with applicable transfer requirements.

8. Cookies and Similar Technologies

We may use cookies, local storage, logs, analytics, and security tooling to keep sessions secure, remember preferences, monitor performance, prevent misuse, and understand how the website is used. You can control cookies through your browser, but disabling them may affect login, dashboard, support, or security features.

9. Security

We use administrative, technical, and physical safeguards designed to protect data, including encryption in transit, role-based access, audit logging, security monitoring, access controls, and operational procedures. No website, network, API, storage system, or transmission method is completely secure, and FPESA cannot guarantee absolute security.

10. Retention

We retain personal data for as long as reasonably necessary for the purposes described in this policy, including account operation, support, tax, accounting, audit, compliance, regulatory reporting, AML, dispute resolution, fraud prevention, and legal claims. We may retain some records after account closure where required or permitted by law or by participating financial institutions' compliance obligations.

11. Your Rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction, objection to processing, data portability, information about automated decisions, withdrawal of consent where processing is based on consent, and review of direct marketing preferences.

To exercise rights, contact info@fpesa.co.ke. We may need to verify your identity and may decline requests where retention, disclosure, or processing is required for legal, compliance, contractual, security, or dispute reasons.

12. Children

FPESA is not intended for children or for persons who lack legal capacity to enter financial, foreign exchange, banking, or settlement-related transactions. Do not use FPESA if you are not legally permitted to do so.

13. Changes

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. Continued use of FPESA after an update means you acknowledge the updated policy.

14. Contact

Privacy, data, support, and legal notices may be sent to info@fpesa.co.ke or delivered to Kofisi Square, 104 Riverside Drive, Nairobi, Kenya.