top of page

Privacy Policy


Mr. Pratul H. Shah

Non Executive Director

If you have any other questions concerning this Notice, please contact us



Provisions regarding the Data Protection Act and General Data Protection Regulations (GDPR) which applies to European Union (EU) residents.

Legal basis for processing

When we process your personal data we will only do so in the following situations:

  • When we need to use your personal data to perform our responsibilities under our letter(s) of engagement;

  • When we have a legitimate interest in processing your personal data. For example, we may process your personal data to send you marketing communications, to communicate with you about changes to the Services, and to provide, secure, and improve our Services;

  • When we find such processing is necessary to comply with our legal obligations; and

  • When we have your consent to do so. When consent is the legal basis for our processing, you may withdraw such consent at any time, in accordance to applicable laws and regulations by sending an email to IMBC.


Data subject requests

In your use of the Services, IMBC aims to give you more control of your personal data. We conform to the data protection principles that provide you with the following rights:

  • Right to information – you can ask us why we collect your personal data and how we use your personal data.

  • Right to access– You can access an electronic copy of your personal data at a reasonable fee. Your request will be processed within 30 days or longer, depending on the complexity of the request.

  • Right to object processing– in certain circumstances, you can ask us to stop processing your personal data.

  • Right to rectification– you can ask us to correct or delete inaccurate personal data we hold about you.

It is important to note that the above rights are subject to the applicable laws and regulations.

Data retention

We retain personal data for as long as required by applicable laws and regulations.

Data controller

Except as otherwise specified on any subsections within our website that comprise the Services, your personal data will be controlled by IMBC.

Data transfer

Your personal data may be stored and processed in any country where we offer our Services or in which our data processors reside, subject to the applicable data protection laws and regulations.


Your use of the Services, selection of cookies preferences and providing us with your consent using availed means signifies your consent to allowing IMBC to process your personal data as described herein. You agree not to hold IMBC liable for any disclosure of such information.


Data Protection Officer (DPO) Contact Details

Our DPO can be reached via the below address:

Telephone:      +254 719 088000 / +254 732 100000 / 0203221000
I&M Tower
Kenyatta Avenue
P.O. Box 30238-00100
Nairobi, Kenya.

bottom of page