Cookie Policy

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to website owners. Cookies cannot execute code, carry viruses, or access other files on your device.

This Cookie Policy applies only to the Endelea Finance marketing website (endeleafinance.com). It does not apply to our mobile application, which does not use cookies.

2. How We Use Cookies

We use cookies on our marketing website for two purposes:

• Essential operation: To keep the website functioning correctly — for example, remembering your cookie consent so we do not ask you on every visit.
• Analytics: To understand how visitors use our website — which pages are most visited and where visitors come from — so we can improve content and experience. These analytics are privacy-preserving and do not identify you personally.

We do not use cookies for advertising, retargeting, or tracking you across other websites.

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are required for the website to function and cannot be switched off. They are set in response to actions you take, such as setting your privacy preferences or submitting a form. They do not store any personally identifiable information.

• cookie_consent — Stores your cookie consent choice. Duration: 12 months.
• XSRF-TOKEN — Security token that protects against cross-site request forgery on forms. Duration: Session.
• endelea_session — Maintains your browsing session state. Duration: 2 hours.

3.2 Analytics Cookies (Optional)

These cookies allow us to count visits and understand how visitors move around the website. All information collected is aggregated and anonymous. If you decline these cookies, we will not know when you visited our site and cannot count your visit.

• Analytics tool: We use a privacy-preserving analytics solution that does not set persistent cross-site identifiers and does not share data with advertising networks.
• Data recorded: Page views, session duration, referral source, device type, and country. No IP addresses are stored in full.
• Duration: Up to 13 months.

3.3 Preference Cookies (Optional)

These cookies remember choices you make — such as language preference — to give you a more personalised experience. We do not currently set any preference cookies beyond session management, but may introduce them in future with your consent.

4. Mobile App

The Endelea Finance mobile application does not use cookies. The app uses encrypted local storage on your device (protected by the device's secure enclave) for session tokens and preferences. This data never leaves your device unless explicitly transmitted as part of a normal authenticated API request. Please see our Privacy Policy for full details on mobile data handling.

5. Third-Party Cookies

Our website may include links to third-party websites. We do not control the cookies set by third-party sites. If you follow a link to another site, please review that site's own cookie policy.

The following third-party services are loaded on our marketing website and may log requests:

• Google Fonts — Loads typefaces used in the website design. Google may log font requests but we do not receive personally identifiable data from this service.
• Font Awesome CDN — Loads icon assets from Cloudflare CDN. No tracking cookies are set by this service.

We do not load Google Analytics, Facebook Pixel, or any advertising network scripts.

6. Your Choices

When you first visit our website, a cookie consent banner will appear where you can accept or decline non-essential cookies. You can update your preference at any time by:

• Clicking the "Cookie Preferences" link in the footer of any page on this website.
• Clearing your browser cookies and refreshing the page — the consent banner will reappear.

You can also manage cookies directly in your browser. Most modern browsers let you block or delete cookies entirely. Note that blocking strictly necessary cookies will affect how the website operates. Browser cookie settings can typically be found here:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and site data

Declining analytics cookies will not affect your ability to use this website or the Endelea Finance app in any way. Once you have made a choice, we will not ask again for 12 months.

7. Changes to This Policy

We may update this Cookie Policy as our website evolves and as we add or remove cookies. The "Last updated" date at the top of this page will always reflect the most recent version. For any material changes, we will reset the consent prompt so returning visitors are informed and can make a fresh choice.

8. Contact Us

If you have any questions about our use of cookies, please contact our Data Protection Officer:

• Email: dpo@endeleafinance.com
• Postal: Data Protection Officer, Endelea Finance Limited, Westlands, Nairobi, Kenya

For broader privacy matters, please see our Privacy Policy. To exercise your data rights formally, please visit our Data Requests page.