Privacy notice
This notice explains what personal data Westlake Insurance Agency collects, why, who it is shared with, and what you can ask us to do with it. It is written to the Kenya Data Protection Act, 2019.
Last reviewed: October 2026.
Who controls the data
The data controller is Westlake Insurance Agency, of Saito Centre, 2nd Floor, Room 207B, Eldoret, and Victor House, First Floor, Room 204, Kitale.
What we collect
Only what is needed to advise on, arrange or administer insurance, and to handle a claim.
- Contact details — name, phone number, email address, postal address
- Cover details — the product you are interested in, the sums insured, the vehicle, the property, the number of employees, the payroll
- Underwriting information — claims history, and the information an underwriter needs to rate the risk
- Identification — where an underwriter or the law requires it, a copy of an ID and a KRA PIN
- Claim information — incident reports, medical reports, police abstracts, photographs, repair estimates, and correspondence
- Payment information — the record of a premium paid, and the reference used
We do not ask for more than the transaction requires, and we do not buy contact lists.
Why we hold it
Under the Act, we rely on four bases, depending on what we are doing.
| Purpose | Basis |
|---|---|
| Advising on and arranging cover | Performance of a contract, or steps taken at your request before a contract |
| Submitting a risk to an underwriter | Performance of a contract, and our legitimate interest in placing cover |
| Handling a claim | Performance of a contract, and compliance with a legal obligation |
| Keeping statutory records | Compliance with a legal obligation |
| Contacting you about a renewal | Legitimate interest, or consent where consent is required |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything done before you withdrew it.
Who we share it with
- Underwriters — the licensed insurers who carry the risk, because a policy cannot be issued without them
- Loss adjusters and investigators — where a claim requires assessment
- Regulators — the Insurance Regulatory Authority, and the Office of the Data Protection Commissioner, where required by law
- Service providers — the people who host, maintain or support our systems, under a duty of confidentiality
We do not sell personal data, and we do not pass it to anyone for their own marketing.
How long we keep it
Policy and claims records are kept for as long as the policy is running and afterwards for the period required for statutory and contractual records. Quotation enquiries that do not become policies are kept only while they are live, and then deleted.
Your rights
Under the Data Protection Act, 2019 you can ask us to:
- Confirm whether we hold your data, and give you a copy
- Correct anything that is inaccurate, incomplete or out of date
- Delete data we no longer have a lawful reason to hold
- Restrict or object to a particular use
- Provide your data in a portable format
Send the request to the contact above. We will respond within the period the Act allows, and we may ask you to confirm your identity first so that we do not disclose data to the wrong person.
If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner.
Cookies and tracking
This website does not set cookies and does not run analytics or advertising trackers. There is no third-party script on any page, and no embedded map, video or chat widget that would load one.
If measurement is added later, this section will describe it before it goes live, and any non-essential cookie will be set only after you agree to it.
The site is served as static files. The hosting provider may keep standard server logs, including IP address and the pages requested, for security and reliability. Those logs are not used to build a profile of you.
Changes to this notice
If this notice changes materially, the review date at the top changes with it. Previous versions are available on request.
This notice is provided for transparency. It does not create rights beyond those in the Data Protection Act, 2019 and other applicable law.
Want to see, correct or delete what we hold?
Send a message with your name and the phone number you used. We will confirm what we hold and act on your request.