Privacy Policy – Obli Group Limited
Last Updated: 30/11/2025
Obli Group Limited (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of our clients, users, and partners. As a company certified by the Office of the Data Protection Commissioner (ODPC) and verified by the Central Bank of Kenya as specific CRB agents, we strictly adhere to the Kenya Data Protection Act (2019) and industry best practices for data security and confidentiality.
1. Information We Collect
We may collect the following types of information:
1.1 Personal Data
Full name, contact information, address
Identification details, KRA PIN, business details
User account credentials
CRB-related information (where applicable and regulated)
1.2 Usage & Technical Data
Device information
IP address and browser type
System logs and usage analytics
Cookies and tracking data
1.3 Business & Transactional Data
Payment information
Service requests
System integration logs
Communication records with our support teams
2. How We Use Your Information
We use your data to:
Provide and improve our software and digital services
Facilitate CRB checks and integrations, where permitted by law
Communicate updates, support, and service notifications
Enhance system security, monitoring, and fraud protection
Comply with legal and regulatory requirements
Customize your experience across our platforms
3. Legal Basis for Processing
We process data under the following bases:
Consent—when you voluntarily provide information
Contractual necessity—to deliver our services
Legal obligations—including CRB operations and compliance
Legitimate interests—improving security and service quality
4. Data Sharing and Disclosure
We do not sell personal data. However, we may share data with:
Authorized third-party service providers
CRB partners and regulated financial institutions
Government bodies where required by law
Security and compliance auditors
Cloud and infrastructure providers
All third parties are vetted and bound by strict confidentiality and data protection obligations.
5. Data Security
We implement advanced security measures to safeguard your information, including:
Encryption of data in transit and at rest
Multi-layered cybersecurity protection
Access control, authentication, and audit tracking
Regular security assessments and compliance checks
As a certified data controller/processor, we follow ODPC and CBK requirements for data handling.
6. Data Retention
We retain personal data only as long as necessary for:
Service delivery
Legal and regulatory obligations
CRB-related processing timelines
Dispute resolution and security purposes
Once retention timelines expire, data is securely deleted or anonymized.
7. Your Rights
Under the Kenya Data Protection Act, you have the right to:
Access your personal data
Request correction or deletion
Withdraw consent
Object to certain processing activities
Request data portability
Lodge a complaint with the ODPC
To exercise any of these rights, contact us at
Email: info@obli.group
8. Cookies and Tracking Technologies
Our website and systems may use cookies to:
Improve user experience
Analyze website performance
Offer customized content
You may manage or disable cookies through your browser settings.
9. Third-Party Links
Our platforms may contain links to external websites. We are not responsible for their content or privacy practices and encourage users to review their policies.
10. Children’s Privacy
Our services are not intended for individuals under 18 years, except in cases where educational institutions authorize data processing under appropriate legal grounds.
11. Changes to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on our website with an updated “Last Updated” date.
12. Contact Information
For questions, requests, or complaints, please reach us at
Obli Group Limited
Nairobi, Kenya
Email: info@obli.group
Phone: 0701834008