Kenya Privacy Centre

Introduction

This privacy notice provides information about how we use and share the personal data we obtain during the job application process.

This notice covers the following topics:

1. Who we are and how to contact us
2. How we use personal data
3. The kinds of personal data we use and where we get personal data
4. How long we keep the personal data
5. Our legal basis for handling personal data
6. Who we share personal data with
7. How we protect personal data
8. Where we store and send personal data
9. Your rights concerning your personal data
10. Where to lodge a complaint
11. Changes to this privacy notice

1.  Who we are and how to contact us

Information for Good^®

We are in an era of rapid digital transformation where consumers demand more access to seamless, personalised products and services online. But the currency of personal data that fuels this platform economic boom poses threats to individuals and endangers corporate security.

Now more than ever — and likely more so in the future — consumers and corporates need new levels of trust and transparency.

As a global information and insights company, TransUnion seeks to make trust possible. We do this by curating an accurate and comprehensive picture of each consumer, so they are safely and reliably represented in the marketplace. This enables businesses and consumers to transact with confidence and achieve great things. We call this Information for Good.

We have our registered offices at 2^nd Floor, Delta Corner Annex, Westlands Nairobi. Although we are part of a larger group, this notice covers only the activities of TransUnion companies within the Republic of Kenya.

Contact details

Contact us about personal data issues, including the contents of this notice via:

• Post: PO Box 46406 – 00100 Nairobi
• Telephone:   +254 (020) 760 3717
• Email: DPO_KE@transunion.com

2.  How we use personal data

Managing end-to-end recruitment

TransUnion personnel involved in the recruitment process and relevant third parties may communicate with you on a strict need-to-know basis. We do this to show how we conducted the application and recruitment process and arrived at our decision.

Screening checks

TransUnion holds highly confidential data that is subject to stringent legal and regulatory responsibilities. Therefore, we undertake identity verification checks and employment screening to protect the interests of TransUnion, its parent company, clients, partners, and other stakeholders, including consumers and third parties.

Additional information

These checks are mandatory for your application and need to be complete before employment begins. To complete these checks, you may need to present specific documentation, provide additional details, and sign authorisations or acknowledgements. (Further details will be provided with any offer of employment).

We are mindful of your privacy and will only perform these checks at the appropriate application stage.

3.  The kinds of personal data and where we get personal data

We obtain and use information from various sources summarised in the following table:

4.  How long we keep personal data

We will keep your personal data for as long as we handle your application and for an additional period after completion. That period depends on the following purposes:

• Showing we have processes to deal with enquiries, requests and complaints fairly and under our regulatory requirements
• Responding to you or a regulator about how we dealt with your request and to show we dealt with it appropriately
• Defending any potential legal claims or regulatory action that might arise because of the request

5.  Our legal basis for handling personal data

Legitimate interests

The Data Protection Act, 2019 allows personal data usage where necessary for legitimate purposes without undue adverse impact. We base most of our processing activities on the following legitimate interests:

• Administering and managing the recruitment process
• Assessing and confirming an applicant’s suitability for employment
• Deciding whom to offer a job
• Keeping records of this process to explain or justify our decision

Consent

We sometimes rely on consent to process personal data, but this is relatively rare.

6.  Who we share personal data with

Our group of companies

Where appropriate, we share personal data collected during the recruitment and job application process within the TransUnion group of companies. A list of the relevant TransUnion companies is set out below.

Service providers

We may share personal data with third‑party service providers that assist us in using such information for the purposes described in section 2. This may include hosting our information databases or using third‑party service providers to send communications such as emails or SMS messages on our behalf.

These service providers are permitted to process personal data only in accordance with our instructions and may not use the information for their own purposes or on behalf of other organisations, unless you have expressly agreed otherwise.

7.  How we protect personal data

We take appropriate and reasonable technical and organisational measures to protect personal data obtained during the job application process against loss, unauthorised access, misuse, disclosure, or alteration. Access to such personal data is restricted to authorised personnel involved in recruitment and employment‑related decision‑making, and the data is handled securely in accordance with the Kenya Data Protection Act, 2019, and other applicable data protection laws.

8.  Where we store and send personal data

We may make use of service providers located outside Kenya, including in India, the United Kingdom, and the United States. Personal data will not be transferred to a country that does not provide an adequate level of data protection, unless appropriate safeguards are in place. These safeguards may include contractual agreements requiring the recipient to implement measures that provide a level of protection comparable to that required under the Kenya Data Protection Act, 2019.

9.  Your rights concerning personal data

We outline your rights regarding the personal data we hold about you below.

Access: You can access all information that we hold about you by contacting us through DPO_KE@transunion.com

Correction/Destruction/Deletion: If the information we hold about you is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully, you have a right to ask us to correct it or delete it.

Objection to processing: You may object (on reasonable grounds) to processing your personal data unless legislation provides for such processing.

Objection to direct marketing: You may object to us using your personal data for direct marketing, and if you do, we will stop.

10.  Where to lodge a complaint

We strive to deliver the highest levels of customer service. However, if you are ever unhappy with us, please contact us so we can investigate.

• Location: 2^nd Floor, Delta Corner Annex, Westlands
• Postal Address: PO Box 46406 – 00100 Nairobi
• Telephone: +254 (020) 760 3717

You can also contact our Data Protection Officer at DPO_KE@transunion.com

You may complain to the Office of the Data Protection Commissioner (ODPC):

• Physical Address: 12^th and 13^th Floor, Britam Tower, Upper Hill
• Postal Address: P.O. Box 30920-00100 Nairobi, Kenya
• Email: info@odpc.go.ke.
• Website: www.odpc.go.ke

11.  Changes to this privacy notice

We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or operational needs. Where material changes are made, we will take reasonable steps to inform individuals, which may include updating this notice on our website or communicating changes through appropriate channels. 

The most current version of this Privacy Notice will always be available, and the effective date at the bottom of the notice indicates when the latest version came into effect. 

Effective date: May 2026