You have the right to ask us to delete your personal data. This page explains what deletion means at Pato Capital, what we are required by law to keep, and how to make a request.
You can request deletion of your Pato Capital account and the personal data associated with it at any time - you do not need to reinstall the app. Submit the form below, or from within the app go to Profile > Help & Support, or email us at info@patocapital.com. We will verify your identity before actioning the request to protect your account.
When we action your request, we remove your account and the personal data we hold about you in our systems, subject to the legal exceptions below. We do this in line with the Data Protection Act, 2019.
As a licensed Digital Credit Provider regulated by the Central Bank of Kenya, we must retain certain records for defined periods even after you ask us to delete your data. This includes records required under anti-money-laundering law (POCAMLA and its regulations), the Central Bank's Digital Credit Provider framework, and applicable credit-reporting and tax rules. Examples are identity and due-diligence records, loan and transaction records, and repayment history.
These records are kept only for as long as the law requires, in our regulated system of record, with restricted access. They are not used for marketing or any new purpose after your request.
When we action your request we delete the personal data we hold about you, except records we are legally required to keep. For those, we delete them once the retention period ends:
Record | Retained for | Legal basis |
|---|---|---|
KYC / identity records | 7 years after your account closes | POCAMLA (AML) and CBK DCP framework |
Loan and transaction records | 7 years after your last transaction | CBK DCP framework and tax law |
AML / suspicious-transaction reports | 7 years after reporting | POCAMLA |
Declined applications | 1 year after decline | Fraud prevention |
All other personal data is deleted from our active systems.
To verify that the request is really yours, the form below asks for your national ID number. We use it only to confirm your identity and locate your records. It is encrypted the moment it reaches us, is never stored in readable form, and is deleted from this request system 90 days after we action your request.
Submit the form below.
We verify your identity.
We action the deletion of the data we are able to delete, and confirm what we are required to retain and for how long.
We respond to you within 30 days, as required under the Data Protection Act, 2019.
Deletion requests are handled by Pato Capital Limited as the data controller. The Pato app is operated by Credwave Limited on Pato Capital's behalf; you may send your request via the contacts above and it will be actioned by Pato Capital.
If you have questions about your data or wish to raise a concern, contact our Data Protection Officer at info@patocapital.com before submitting, or contact the Office of the Data Protection Commissioner. Our contact details are in the site footer.
Effective date: August 2026.
Use this form to request deletion of your personal data held by Pato Capital. We verify each request before actioning it, and some records may be retained where the law requires.