Privacy Policy

1. Who We Are

Finatrack Global Limited provides GPS tracking, telematics, tracking tags, and security solutions for individuals, businesses, asset finance corporations, and insurance partners. We operate from Vision Plaza, Mombasa Road, Nairobi, and serve clients within Kenya and other countries.

For data protection purposes, Finatrack may act as a Data Controller (deciding why/how personal data is processed) and/or a Data Processor (processing on behalf of a client) depending on the service arrangement.

2. Data We Collect

We may collect the following categories of personal data:

• Identity & contact: name, company name, email, phone/WhatsApp number, physical address.
• Account & service: login credentials (where applicable), service selections, quotes, invoices, payment references.
• Vehicle/asset details: registration number, make/model, asset identifiers, installation notes.
• Location & usage data: device location, trip history, events/alerts (e.g., geofence, ignition, movement), and usage logs.
• Support communications: enquiries, call notes, WhatsApp chats, emails, tickets, and feedback.
• Website technical data: IP address, device/browser type, pages viewed, referral source, cookie identifiers.

Where you provide information about a third party (e.g., a driver, employee, or vehicle user), you confirm you are authorised to do so and will provide any notices/consents required by law.

3. How We Use Data

We use personal data to:

• Respond to enquiries, provide quotations, and process orders.
• Schedule and perform installations at our office or your preferred location.
• Provide access to tracking/telematics platforms, set up alerts, and support device configuration.
• Deliver ongoing support, troubleshooting, maintenance, and service improvements.
• Prevent fraud, protect our systems, and maintain security of our services and customers.
• Meet legal and regulatory obligations (including record-keeping where applicable).
• Send service-related communications (e.g., renewals, downtime notices, important updates).
• Send marketing messages only where permitted and with opt-out options.

4. Legal Basis

We process personal data where it is necessary to provide services and support, comply with legal obligations, protect legitimate interests (such as security and fraud prevention), and/or where consent is obtained when required.

5. Cookies & Analytics

Our website may use cookies and similar technologies to ensure the site works properly, remember preferences, measure performance, and improve user experience. You can manage cookies through your browser settings. Disabling some cookies may affect site functionality.

6. Sharing & Disclosure

We may share personal data with:

• Service providers: hosting providers, email/SMS/WhatsApp tools, analytics providers, payment processors.
• Platform and device partners: technology providers supporting tracking, telematics, cameras, and alerts.
• Install/support teams: technicians and contractors under confidentiality obligations.
• Legal/regulatory bodies: where required by law, court order, or lawful requests.
• Business transfers: if Finatrack is involved in a merger, acquisition, or asset sale (with appropriate safeguards).

We do not sell your personal data.

7. Location & Telematics Data

Tracking solutions may generate location, trip, and event data (e.g., movement alerts, geofence entry/exit, ignition, speed, and related telematics metrics depending on device type). This data is used to provide the service you request and may be viewed by authorised users within your organisation (for business/fleet deployments).

Platform features and accuracy can vary depending on network coverage, GPS signal, device power, installation quality, and environment.

8. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described above, including legal, accounting, and compliance requirements. Retention periods may vary by service type. Where data is no longer required, we securely delete, anonymise, or archive it in line with applicable requirements.

9. Security Measures

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. These may include access controls, staff confidentiality obligations, secure credentials, and operational security processes.

No method of transmission or storage is 100% secure; however, we work to maintain appropriate safeguards and respond to incidents in line with legal requirements.

10. Your Rights

Subject to applicable law, you may request to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Delete data where legally permitted.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Receive a copy of certain data in a usable format where applicable.

To protect your account and privacy, we may verify your identity before processing requests.

11. Children’s Data

Our services are intended for adults and organisations. We do not knowingly collect personal data from children without appropriate authorisation. If you believe a child’s data has been provided, contact us so we can take appropriate steps.

12. International Transfers

Some technology providers or servers may be located outside Kenya. Where personal data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place, consistent with applicable data protection requirements.

13. Policy Updates

We may update this Privacy Policy from time to time to reflect service changes, legal requirements, or security practices. The “Last Updated” date shows the latest revision. Continued use of our website or services indicates acceptance of the updated policy.

14. Contact & Requests

For privacy questions, data requests, or concerns, contact:

Finatrack Global Limited
Vision Plaza, 1st Floor, Room 2, Mombasa Road, Nairobi, Kenya
Phone/WhatsApp: +254 723 645 810
Email: info@finatrack.co.ke

If you are a business/fleet customer and would like a processing addendum (DPA) or an onboarding checklist for staff notices and access roles, request it via email.