KenyanBusiness

Business

How M-Pesa Transformed Kenya’s Business Landscape: Lessons for Aspiring Entrepreneurs
ByThomas Sommer February 4, 2026February 4, 2026

The Revolution That Started with a Simple Text Message Fifteen years ago, if you wanted to send money across Kenya, you had two options: travel there yourself or use expensive, unreliable money transfer services. Today, a market vendor in Nairobi can receive payment from a customer in Mombasa in seconds, all through their mobile phone….

Read More How M-Pesa Transformed Kenya’s Business Landscape: Lessons for Aspiring Entrepreneurs

We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners. View more

Cookies settings

Privacy & Cookie policy

Privacy & Cookies policy

Cookie name	Active

Authorized Persons Peter Ngumbau

Company Name: Mwingi Brand, Kenya

Data Protection Officer: Peter Ngumbau

General

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

In cooperation with our hosting providers, we make every effort to protect the databases as effectively as possible against unauthorized access, loss, misuse, or falsification.

We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

By using this website, you agree to the collection, processing, and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or names of files accessed, date, and time are stored on the server for statistical purposes, without this data being directly related to your person. Personal data, such as names, addresses, or email addresses, are collected on a voluntary basis as far as possible. These data will not be disclosed to third parties without your explicit consent.

Processing of Personal Data Personal data refers to any information that relates to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, deletion, retention, modification, destruction, and use of personal data.

We process personal data for the duration that is necessary for the respective purpose or purposes. In the case of longer retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.

Cookies This website uses cookies. These are small text files that allow specific, user-related information to be stored on the user's device while using the website. Cookies enable us, in particular, to determine the frequency of use and the number of users of the pages, to analyze user behavior on the pages, but also to make our offer more customer-friendly. Cookies remain stored at the end of a browser session and can be retrieved again when you visit the site again. If you do not want this, you should set your Internet browser to refuse to accept cookies.

A general objection to the use of cookies for online marketing purposes can be declared for many of the services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by disabling them in your browser settings. Please note that in this case, not all functions of this online offer can be used.

With SSL/TLS Encryption For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Server Log Files The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data subsequently if we become aware of concrete indications of illegal use.

Third-party Services This website may use Google Maps for embedding maps, Google Invisible reCAPTCHA for protection against bots and spam, and YouTube for embedding videos.

These services from American Google LLC use cookies, which means that data is transferred to Google in the USA, and we assume that no personal tracking takes place solely through the use of our website.

Google has committed to providing adequate data protection in accordance with the US-European and US-Swiss Privacy Shield.

For more information, please see Google's privacy policy.

Contact Form If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

Comment Function For the comment function on this website, in addition to your comment, information about the time of creation of the comment, your email address, and, if you do not post anonymously, the username you selected will be saved.

Storage of IP Address Our comment function stores the IP addresses of users who post comments. Since we do not check comments on our site before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.

Subscribe to Comments As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the info emails.

Rights of the Data Subject

Right to confirmation: Every data subject has the right to request confirmation from the data controller as to whether personal data relating to them is being processed. If you wish to exercise this right to confirmation, you can contact the data protection officer at any time.
Right to information: Every data subject affected by the processing of personal data has the right to receive free information from the data controller at any time about the personal data stored about them and a copy of this information. Furthermore, information can be provided on the following: purposes of processing, categories of processed personal data, recipients to whom the personal data have been or will be disclosed, if possible, the planned duration of the storage of the personal data or, if this is not possible, the criteria for determining this duration, the existence of a right to correction or deletion of personal data concerning them or to restriction of processing by the data controller or a right to object to such processing, the existence of a right to lodge a complaint with a supervisory authority, if the personal data are not collected from the data subject: all available information on the origin of the data, the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
Right to correction: Every data subject affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.
Right to deletion (right to be forgotten): Every data subject affected by the processing of personal data has the right to demand from the data controller that the personal data concerning them be deleted immediately if one of the following reasons applies and to the extent that processing is not necessary:

The personal data have been collected or otherwise processed for purposes for which they are no longer necessary.
The data subject withdraws their consent on which the processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and there is no other legal basis for the processing.
The data subject objects to the processing in accordance with Article 21 (1) GDPR, and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Article 21 (2) GDPR.
The personal data have been processed unlawfully.
The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the data controller is subject.
The personal data were collected in relation to information society services offered in accordance with Article 8 (1) GDPR. If one of the above reasons applies and you wish to have personal data stored by us deleted, you can contact our data protection officer at any time. The data protection officer will ensure that the deletion request is complied with immediately. If we have made the personal data public and our company, as the data controller, is obligated in accordance with Article 17 (1) GDPR to delete the personal data, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers responsible for data processing and processing of the personal data, that the data subject has requested deletion of all links to this personal data or of copies or replications of this personal data.

Right to restriction of processing: Every data subject affected by the processing of personal data has the right to request the restriction of processing from the data controller if one of the following conditions is met:

The accuracy of the personal data is disputed by the data subject for a period that allows the data controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data.
The data controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise, or defend legal claims.
The data subject has lodged an objection to the processing in accordance with Article 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the data controller outweigh those of the data subject. If one of the above conditions is met and you wish to request the restriction of personal data stored by us, you can contact our data protection officer at any time. The data protection officer will initiate the restriction of processing.

Right to data portability: Every data subject affected by the processing of personal data has the right to receive the personal data concerning them, which have been provided to a data controller, in a structured, common, and machine-readable format. They also have the right to transfer this data to another data controller without hindrance by the data controller to whom the personal data were provided, provided that the processing is based on the consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract pursuant to Article 6 (1) (b) GDPR and the processing is carried out with the help of automated procedures, unless the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been delegated to the data controller. Furthermore, when exercising their right to data portability in accordance with Article 20 (1) GDPR, the data subject has the right to have the personal data transferred directly from one data controller to another data controller, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected by this. In order to assert the right to data portability, you can contact the data protection officer appointed by us at any time.
Right to object: Every data subject affected by the processing of personal data has the right, granted by the European directive and regulation maker, to object at any time, for reasons arising from their particular situation, to the processing of personal data concerning them based on Article 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process the personal data unless we can prove compelling reasons for the processing that outweigh the interests, rights, and freedoms of the data subject or the processing serves to assert, exercise, or defend legal claims. If we process personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If the data subject objects to us processing for direct advertising purposes, we will no longer process the personal data for these purposes. In addition, the data subject has the right, for reasons arising from their particular situation, to object to the processing of personal data concerning them that we use for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, unless such processing is necessary for the fulfillment of a task in the public interest. To exercise the right to object, the data subject can contact the data protection officer directly. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by means of automated procedures that use technical specifications.
Automated decisions in individual cases, including profiling: Every data subject affected by the processing of personal data has the right, as granted by the European directive and regulation maker, not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on them or which significantly affects them in a similar manner, provided that the decision

is not necessary for the conclusion or performance of a contract between the data subject and the data controller,
is admissible under Union or Member State law to which the data controller is subject, and these legal provisions contain appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, or
is made with the express consent of the data subject. If the decision
is necessary for the conclusion or performance of a contract between the data subject and the data controller,
is made with the express consent of the data subject, or
is admissible under Union or Member State law to which the data controller is subject, and these legal provisions contain appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, we will take reasonable measures to protect the rights and freedoms as well as the legitimate interests of the data subject, which includes at least the right to obtain the intervention of a person on the part of the data controller, to state one's own position, and to challenge the decision. If the data subject wishes to assert rights with respect to automated decisions, they can contact our data protection officer or another employee of the data controller at any time.

Right to revoke consent under data protection law: Every data subject affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time. If the data subject wishes to assert their right to withdraw consent, they can contact our data protection officer or another employee of the data controller at any time.

Objection Email The use of contact data published within the framework of the legal notice obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

Google reCAPTCHA This website uses the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland, "Google"). The purpose of the query is to distinguish whether the input is made by a human or by automated, machine processing. The query includes the transmission of the IP address and, if necessary, further data required by Google for the reCAPTCHA service. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted as part of reCaptcha from your browser will not be merged with other data from Google. Your data may also be transferred to the USA. For data transfers to the USA, there is an adequacy decision by the European Commission, the "Privacy Shield." Google participates in the "Privacy Shield" and has subjected itself to the requirements. By pressing the query, you consent to the processing of your data. The processing is based on Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation. For more information on Google reCAPTCHA and the related privacy policy, please visit: https://policies.google.com/privacy?hl=de

Google WebFonts This website uses so-called web fonts provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly. If your browser does not support web fonts, a standard font is used from your computer. For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq and Google's privacy policy: https://www.google.com/policies/privacy/

Instagram Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Instagram uses it. For more information, please refer to Instagram's privacy policy: http://instagram.com/about/legal/privacy/

YouTube This website integrates functions of the "YouTube" service. "YouTube" is owned by Google Ireland Limited, a company established and operated under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland. Your legal agreement with "YouTube" consists of the terms found at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms constitute a legally binding agreement between you and "YouTube" regarding your use of the services. Google's privacy policy explains how "YouTube" treats and protects your personal data when you use the service.

Amazon Partner Program Based on our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR, we are participants in the Amazon EU partner program, which was designed to provide a means for websites to earn advertising fees by placing advertisements and links to Amazon that lead to advertising costs. As Amazon partners, we earn from qualifying purchases. Amazon uses cookies to track the origin of orders. This allows Amazon, among other things, to recognize that you have clicked on the affiliate link on our website and subsequently purchased a product from Amazon. For more information on data usage by Amazon and the possibility of objection, please refer to the company's privacy policy at the following link: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010. Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates.

Data Transfer to the USA Tools from companies based in the USA are integrated on our website. When these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not a safe third country in terms of EU data protection law. US companies are obligated to release personal data to security authorities without you as a data subject being able to take legal action against it. Therefore, it cannot be ruled out that US authorities (e.g., intelligence agencies) process, evaluate, and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing operations.

Use of Matomo Statistics (self-hosted) This website uses the statistics tool "Matomo" in the self-hosted version on a CH server. Browser user data and the country of origin are transferred to this server. The statistics record the course of the visit to this website. The data is periodically deleted.

Changes We reserve the right to change this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of the changes by email or in another suitable way in the event of an update.

updated the 22nd of September 2023

Cookies settings

KenyanBusiness

How M-Pesa Transformed Kenya’s Business Landscape: Lessons for Aspiring Entrepreneurs

Get Free Resources

Support Kenya

Join The Community