Legal & privacy
Privacy Notice
Royalty Finvora is building its digital services around clear purpose, data minimisation, controlled access and respect for the people whose information we handle.
Last updated: 23 September 2026. This notice applies to the Royalty Finvora public website and public enquiry journeys. More specific notices may apply to loans, shareholder or investment processes, Finvora Advisory, Finvora Digital, Finvora Academy, Finvora Commerce or authenticated platform services when those services are activated.
Who controls your information
Royalty Finvora Ltd determines why and how personal information submitted through this public website is used. Royalty Finvora Ltd is based in Nairobi, Kenya and can currently be reached on +254 768 665 627. More specific services may identify additional or separate processing responsibilities in their own notices.
Information we may collect
When an enquiry workflow is active, Royalty Finvora may collect information you choose to provide, such as your name, phone number, email address, enquiry category and message. Future authenticated services may require additional identity, financial, transactional or supporting-document information under their own notices and controls.
Why we use it and our lawful basis
We use personal information only for stated and legitimate purposes, including responding to enquiries, taking requested steps before an engagement, providing contracted services, meeting legal or compliance obligations, protecting our systems and pursuing legitimate business interests where those interests do not override your rights. Where consent is the appropriate basis, it will be requested separately and can be managed in accordance with applicable law.
What is required and what happens if you do not provide it
General website browsing does not require you to submit an enquiry. Where a field is marked as required in an active enquiry or service workflow, we need that information to receive, assess or respond to the request. If required information is not provided, we may be unable to process that enquiry or provide the requested service.
Data minimisation and purpose limitation
We aim to collect only information that is relevant to the stated purpose and not reuse it incompatibly. Sensitive, financial, identity, child or family information should not be requested through a general website enquiry when a more controlled service-specific workflow is required.
How we protect it
Public website data should flow only to approved service boundaries. Royalty Finvora does not intentionally expose RFOS, accounting records, shareholder or investor records, Google Sheets or private operational systems through the public website. Private services are intended to use least-privilege access, role-based controls, secure credentials, auditability and appropriate technical safeguards.
Sharing, providers and international transfers
We may use approved technology, communications, payment, hosting or professional-service providers where needed to deliver a service. Providers should receive only the information necessary for their role and remain subject to appropriate confidentiality, security and data-processing controls. Where personal data is transferred outside Kenya, the transfer should use the safeguards required by applicable Kenyan data-protection law.
Retention
We keep personal information only for as long as reasonably required for the purpose for which it was collected, legitimate record-keeping, dispute handling, security or applicable legal and regulatory obligations. Retention periods may therefore differ by service and record type.
Your data-protection rights
Subject to applicable Kenyan law, you may ask to be informed about processing, access your personal data, request correction, object to processing, request erasure where applicable, and exercise other rights provided by law. We may need to verify identity before acting on a request.
Children and family content
The public website does not require children to submit personal information. Any future Bedtime Bible Stories personalisation feature involving child or family images will use a separate parent-or-guardian consent, privacy and deletion workflow before uploads are accepted.
Complaints and regulatory contact
You may raise a privacy concern with Royalty Finvora through the contact page or office number. You may also contact or lodge a complaint with Kenya’s Office of the Data Protection Commissioner where applicable.