Loyalty Programme Terms and Conditions (Kenya)
LOYALTY PROGRAMME TERMS AND CONDITIONS
[Programme Name] LOYALTY PROGRAMME — TERMS AND CONDITIONS Operator: [Operator Name], [Operator Address] (BRS No. [Operator BRS Number], ODPC Registration No. [ODPC Registration Number]) Effective Date: [Effective Date] These Terms and Conditions ("Terms") govern membership in the [Programme Name] loyalty programme operated by [Operator Name] ("Operator"). By enrolling in the programme, members agree to be bound by these Terms under the Law of Contract Act Cap. 23. These Terms comply with the Consumer Protection Act No. 46 of 2012 administered by the Competition Authority of Kenya (CAK) and the Data Protection Act No. 24 of 2019 administered by the Office of the Data Protection Commissioner (ODPC).
1. Eligibility and Enrolment
1.1 Eligibility: Membership in [Programme Name] is open to persons who: [Eligibility Criteria]. The minimum age for membership is [Minimum Age] in accordance with the Law of Contract Act Cap. 23. 1.2 Enrolment: Members may enrol via: [Enrolment Method]. For digital enrolment, a click-to-accept mechanism will be provided with a hyperlink to these Terms before enrolment is confirmed, as required under Section 31 of the Consumer Protection Act No. 46 of 2012. 1.3 Membership is personal to the member and may not be transferred. The Operator reserves the right to suspend or terminate membership where the member has provided false information or engaged in fraudulent activity.
2. Earning Points
2.1 Earning Rate: Members earn points at the following rate: [Earning Rate]. Point earning rules are clearly stated and shall not be misleading under Section 16 of the Consumer Protection Act No. 46 of 2012. 2.2 Excluded Transactions: The following transactions do not qualify for point accrual: [Excluded Transactions]. 2.3 Bonus Promotions: The Operator may offer double-points or bonus promotions from time to time. Promotion terms will be communicated to members in advance via the channels specified in Clause 7.
3. Point Redemption and Value
3.1 Point Value: Each point has a cash equivalent value of [Point Value]. 3.2 Minimum Redemption: The minimum points balance required for redemption is [Minimum Redemption Threshold]. 3.3 Redemption Channels: Points may be redeemed through: [Redemption Channels]. 3.4 Point Transfers: Points may be transferred or gifted between members: [Point Transferability]. 3.5 Points cannot be exchanged for cash and hold no monetary value outside the [Programme Name] programme.
4. Point Expiry and Forfeiture
4.1 Inactivity Expiry: Points will expire after [Expiry Period] of account inactivity. "Inactivity" means no qualifying transaction has been made during the period. 4.2 Expiry Notice: The Operator will give members [Expiry Notice] before accumulated points expire. Members are encouraged to redeem points before the expiry notice period ends. 4.3 Forfeiture: Points may be forfeited immediately and without notice where: (a) a member's account is suspended due to fraud or programme misuse; (b) the member provides materially false information. Forfeiture for fraud does not constitute an unconscionable act under Section 17 of the Consumer Protection Act No. 46 of 2012.
5. Data Protection and Privacy
5.1 Data Controller: [Operator Name] is registered as a data controller with the Office of the Data Protection Commissioner (ODPC) under Section 16 of the Data Protection Act No. 24 of 2019 (Registration No. [ODPC Registration Number]). 5.2 Data Collected: The Operator collects the following categories of personal data: [Data Categories]. 5.3 Processing Basis: Personal data is processed on the basis of the member's consent and the performance of the loyalty programme contract, as required under Section 25 of the Data Protection Act. 5.4 Data Sharing: Member data may be shared with the following redemption or processing partners: [Data Sharing Partners]. Data Processing Agreements under Section 47 of the Data Protection Act No. 24 of 2019 are in place with each data-sharing partner. 5.5 Member Rights: Members have the right to access, correct, and request deletion of their personal data under Section 26 of the Data Protection Act. Requests may be submitted to the contact address in Clause 8. 5.6 Marketing: Members consent to receive: [Marketing Consent]. Members may opt out of marketing communications at any time using the opt-out link or mechanism provided in each communication, in compliance with the Communications Authority of Kenya regulations under the Kenya Information and Communications Act Cap. 411A.
6. Amendment and Programme Termination
6.1 Amendments: The Operator may amend these Terms on [Amendment Notice] prior written notice to members. Notice will be given via email, SMS, and website posting. Members who object to a material change may exit the programme and redeem accumulated points before the change takes effect. 6.2 Programme Termination: The Operator may terminate the [Programme Name] programme on [Termination Notice] prior written notice. During the notice period, members will be given a final opportunity to redeem accumulated points. The Competition Authority of Kenya (CAK) Consumer Protection Guidelines require adequate notice before programme closure to allow members to redeem accumulated balances. 6.3 Insolvency: Where the Operator enters administration under the Insolvency Act No. 18 of 2015, accumulated but unredeemed points may rank as unsecured liabilities of the Operator.
7. Complaints and Dispute Resolution
7.1 Member Complaints: Members may submit complaints to [Operator Name] at the contact details in Clause 8. The Operator will respond to complaints within 14 business days. 7.2 Regulatory Escalation: Where a complaint is not resolved to the member's satisfaction, the member may escalate to the Competition Authority of Kenya (CAK) under Section 87 of the Consumer Protection Act No. 46 of 2012. Data protection complaints may be referred to the Office of the Data Protection Commissioner (ODPC) under the Data Protection Act No. 24 of 2019. 7.3 Governing Law: These Terms are governed by the laws of Kenya.
8. Contact Information
Operator: [Operator Name] Address: [Operator Address] BRS No.: [Operator BRS Number] ODPC Registration No.: [ODPC Registration Number] For membership queries, data access requests, or complaints, contact the Operator at the address above. These [Programme Name] Loyalty Programme Terms and Conditions are effective from [Effective Date].
Programme Operator
________________
Signature
What Is a Loyalty Programme Terms and Conditions (Kenya)?
Loyalty Programme Terms and Conditions in Kenya form the legally binding agreement between a business operator and consumers who enrol in a rewards scheme, governed primarily by the Consumer Protection Act No. 46 of 2012 administered by the Competition Authority of Kenya (CAK). The Terms set out how points or rewards are earned, valued, redeemed, and forfeited, and define the rights of members against the programme operator.
The Consumer Protection Act No. 46 of 2012 applies to all suppliers of goods and services in Kenya who engage in consumer transactions, including the operation of loyalty programmes. Section 16 of the Consumer Protection Act prohibits misleading representations about the value of loyalty points or rewards. Section 17 prohibits unconscionable acts by suppliers in consumer transactions. Loyalty Programme Terms that unilaterally devalue points or impose punitive forfeiture conditions without adequate notice may constitute an unconscionable act under the Act.
The Data Protection Act No. 24 of 2019, administered by the Office of the Data Protection Commissioner (ODPC), applies to all loyalty programmes because enrolment requires collection of personal data including names, contact details, purchase history, and behavioural analytics. Section 25 of the Data Protection Act requires that personal data be processed lawfully, fairly, and transparently. Loyalty programme operators must register as data controllers or data processors with the ODPC under Section 16 of the Data Protection Act where they process personal data of Kenyan residents at scale.
Loyalty Programme Terms in Kenya must be distinguished from a separate Privacy Policy — the Privacy Policy addresses data protection rights in detail, while the Loyalty Programme Terms focus on the commercial relationship, programme mechanics, and member obligations. Where data is shared with third-party redemption partners, a Data Processing Agreement under Section 47 of the Data Protection Act No. 24 of 2019 should be executed between the programme operator and each partner.
The Kenya Information and Communications Act Cap. 411A, administered by the Communications Authority of Kenya (CA), regulates electronic marketing communications including loyalty programme newsletters and promotional SMS messages. Prior consent of programme members for marketing communications is required under the Communications Authority regulations. Members must be given a clear opt-out mechanism in every electronic marketing message.
The Income Tax Act Cap. 470, administered by the Kenya Revenue Authority (KRA), may treat redeemed loyalty rewards as taxable benefits where they are received in the context of an employment relationship — for example, corporate travel points redeemed by employees. Businesses operating loyalty programmes that involve cash-equivalent rewards should obtain guidance from KRA on the tax treatment of redemptions.
The legal framework governing the Loyalty Programme Terms and Conditions (Kenya) in Kenya draws on several key statutes and regulatory bodies. Under the Companies Act No. 17 of 2015, the Registrar of Companies at the Office of the Attorney General maintains the register of Kenyan companies. Section 3 of the Law of Contract Act (Cap. 23) governs contractual obligations. The Competition Authority of Kenya (CAK) enforces the Competition Act No. 12 of 2010. The Kenya Revenue Authority (KRA) administers corporate tax under the Income Tax Act (Cap. 470). The High Court of Kenya has unlimited original jurisdiction under Article 165 of the Constitution of Kenya 2010. Parties executing a Loyalty Programme Terms and Conditions (Kenya) in Kenya should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Consumer Protection Act No. 46 of 2012 sets the foundational requirements.
When Do You Need a Loyalty Programme Terms and Conditions (Kenya)?
Loyalty Programme Terms and Conditions in Kenya are needed whenever a business establishes a scheme under which consumers earn points, miles, stamps, or credits redeemable for goods, services, or discounts, and the programme collects personal data from members.
Loyalty Programme Terms are required when a Kenyan retail chain, supermarket, or petroleum company launches a points-based rewards programme for customers. The Competition Authority of Kenya (CAK) has enforcement authority under the Consumer Protection Act No. 46 of 2012 to investigate complaints about unfair loyalty programme practices, including the unilateral cancellation of accumulated points without notice.
Loyalty Programme Terms are needed when a hotel group, airline, or hospitality business operating in Kenya under the Kenya Tourism Act No. 28 of 2011 introduces a frequent-guest or frequent-flyer scheme. Aviation loyalty programmes must also comply with the Kenya Civil Aviation Authority (KCAA) consumer protection requirements for air passenger rights where rewards include complimentary flights.
Loyalty Programme Terms are required when a fintech company or mobile money operator licensed by the Central Bank of Kenya under the National Payment System Act No. 39 of 2011 offers cashback rewards or loyalty points redeemable through M-Pesa or other payment platforms. The CBK may scrutinise reward structures that resemble deposit-taking without a deposit-taking licence under the Banking Act Cap. 488.
Loyalty Programme Terms are needed when a business shares member data with redemption partners — for example, cross-brand coalition loyalty schemes — triggering data-sharing obligations under Section 47 of the Data Protection Act No. 24 of 2019 and requiring explicit member consent under Section 32 of the same Act.
Loyalty Programme Terms are required whenever programme mechanics change — for example, when a business alters the point-to-value conversion ratio, introduces expiry periods for points previously stated to be non-expiring, or withdraws a redemption category — to document the change and comply with the notice obligations under the Consumer Protection Act No. 46 of 2012.
Parties in Kenya should prepare a Loyalty Programme Terms and Conditions (Kenya) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under the Companies Act No. 17 of 2015, the Registrar of Companies at the Office of the Attorney General maintains the register of Kenyan companies. Section 3 of the Law of Contract Act (Cap. 23) governs contractual obligations. The Competition Authority of Kenya (CAK) enforces the Competition Act No. 12 of 2010. The Kenya Revenue Authority (KRA) administers corporate tax under the Income Tax Act (Cap. 470). The High Court of Kenya has unlimited original jurisdiction under Article 165 of the Constitution of Kenya 2010. Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.
What to Include in Your Loyalty Programme Terms and Conditions (Kenya)
Kenya Loyalty Programme Terms and Conditions under the Consumer Protection Act No. 46 of 2012 must contain the following essential elements to be enforceable and compliant.
Programme Operator and Eligibility: Full legal name of the operating entity, its Business Registration Service (BRS) number, registered office address, and the eligibility criteria for membership — including minimum age (18 years under the Law of Contract Act Cap. 23), acceptable identification, and any excluded categories of persons.
Point Earning Rules: The rate at which points are earned (e.g., 1 point per KES 100 spent), the qualifying transactions and products that earn points, any double-points or bonus promotions, and the categories of transactions expressly excluded from point accrual. The Consumer Protection Act No. 46 of 2012 requires that earning rules be stated clearly and not be misleading under Section 16.
Point Redemption and Value: The minimum points threshold for redemption, the cash or goods equivalent value of each point, the redemption channels available (in-store, online, mobile app), and any restrictions on combining points with other discounts or offers. The agreement must state whether points can be transferred between members or gifted.
Point Expiry and Forfeiture: The period after which inactive points expire, the definition of inactivity, the notice the operator will give before expiry, and the circumstances in which points may be forfeited — for example, fraud, account misuse, or programme termination. Under the Consumer Protection Act, unilateral forfeiture of points without adequate notice may be challenged as an unconscionable act under Section 17.
Data Collection and Privacy: The categories of personal data collected, the purposes of processing, the legal bases under the Data Protection Act No. 24 of 2019, the identity of data-sharing partners, and the member's rights to access, correct, and delete their data under Section 26 of the Data Protection Act. The Office of the Data Protection Commissioner (ODPC) registration number of the operator should be stated.
Marketing Communications: The types of marketing the member consents to receive, the opt-out mechanism available in each message, and the compliance with the Communications Authority of Kenya regulations under the Kenya Information and Communications Act Cap. 411A.
Amendment and Termination: The operator's right to amend the Terms on not less than 30 days' written notice (recommended), the manner of notifying members (email, SMS, or website posting), the member's right to exit the programme if material changes are made, and the treatment of accumulated points on programme termination.
Dispute Resolution: The process for members to raise complaints, the operator's obligation to respond within a stated period, and the right of members to escalate to the Competition Authority of Kenya (CAK) under Section 87 of the Consumer Protection Act No. 46 of 2012. The forms-legal.com Kenya Loyalty Programme Terms template covers all mandatory consumer protection disclosure elements required under the Consumer Protection Act and the Data Protection Act.
Additional compliance elements for a Loyalty Programme Terms and Conditions (Kenya) used in Kenya include: Under the Companies Act No. 17 of 2015, the Registrar of Companies at the Office of the Attorney General maintains the register of Kenyan companies. Section 3 of the Law of Contract Act (Cap. 23) governs contractual obligations. The Competition Authority of Kenya (CAK) enforces the Competition Act No. 12 of 2010. The Kenya Revenue Authority (KRA) administers corporate tax under the Income Tax Act (Cap. 470). The High Court of Kenya has unlimited original jurisdiction under Article 165 of the Constitution of Kenya 2010. Forms-legal.com provides this template as a starting point for Kenya-compliant documentation.
Cite this page
Reference this free template in an article, syllabus, or research note:
Forms Legal. (2026). Loyalty Programme Terms and Conditions (Kenya) (Kenya) [Legal document template]. Forms Legal. https://forms-legal.com/kenya/business/policies/loyalty-programme-terms-kenya
"Loyalty Programme Terms and Conditions (Kenya) (Kenya)." Forms Legal, 2026, https://forms-legal.com/kenya/business/policies/loyalty-programme-terms-kenya.
@misc{formslegal-loyalty-programme-terms-kenya,
author = {{Forms Legal}},
title = {Loyalty Programme Terms and Conditions (Kenya) (Kenya)},
year = {2026},
howpublished = {\url{https://forms-legal.com/kenya/business/policies/loyalty-programme-terms-kenya}},
note = {Free legal document template}
}Frequently Asked Questions
Loyalty Programme Terms and Conditions are legally enforceable in Kenya as a contract under the Law of Contract Act Cap. 23, provided the member was given adequate notice of the Terms before enrolment and the Terms do not violate mandatory provisions of the Consumer Protection Act No. 46 of 2012. The Competition Authority of Kenya (CAK) has held that click-to-accept digital enrolment constitutes valid acceptance of terms displayed at the point of enrolment. However, terms that are unconscionable — for example, provisions that allow the operator to cancel all accumulated points without notice or at will — may be challenged under Section 17 of the Consumer Protection Act. The ODPC has authority to impose fines of up to KES 5,000,000 or 1% of annual turnover for data protection violations embedded in loyalty programme operations under Section 64 of the Data Protection Act No. 24 of 2019.
A loyalty programme operator in Kenya may amend or cancel points accumulation under the programme's Terms, but must do so in a manner consistent with the Consumer Protection Act No. 46 of 2012. Section 17 of the Consumer Protection Act prohibits unconscionable acts in consumer transactions. Unilaterally reducing the value of previously earned points, imposing retrospective expiry conditions, or cancelling points without reasonable notice will likely constitute an unconscionable act and expose the operator to complaints before the Competition Authority of Kenya (CAK). Best practice — and the approach courts and regulators favour — is to give members at least 30 days' written notice of any material change, allow members to redeem accumulated points before any devaluation takes effect, and provide a mechanism for members to exit the programme if they object to the change. CAK's Consumer Protection Guidelines (2018) specifically address loyalty programme operators.
Loyalty programme operators in Kenya are subject to the Data Protection Act No. 24 of 2019, administered by the Office of the Data Protection Commissioner (ODPC). Every loyalty programme collects personal data — names, contact information, transaction history, and location data — making the operator a data controller under Section 2 of the Data Protection Act. Data controllers processing data at scale must register with the ODPC under Section 16. Section 25 requires personal data to be processed lawfully, fairly, and transparently, with a valid legal basis — typically member consent or the performance of the loyalty programme contract. Members have rights under Section 26 to access their data, correct inaccuracies, request deletion, and object to direct marketing. Where data is shared with redemption partners or marketing analytics firms, a Data Processing Agreement under Section 47 of the Data Protection Act is mandatory. Non-compliance may attract fines of up to KES 5,000,000 or 1% of annual turnover under Section 64 of the Data Protection Act.
Yes. Under the Consumer Protection Act No. 46 of 2012, a supplier must disclose to the consumer, in plain and understandable language, all material terms and conditions of a consumer agreement before conclusion of the agreement. Section 31 of the Consumer Protection Act requires that standard-form consumer agreements — which loyalty programme terms are — be written in plain language and that the consumer be given a reasonable opportunity to review the terms before agreeing to be bound. For digital enrolment through a mobile app or website, this requires a click-to-accept mechanism with a hyperlink to the full Terms displayed before the enrolment is confirmed. Enrolment forms distributed in-store must include a reference to where the full Terms can be accessed. Failure to disclose material terms before enrolment may render the terms unenforceable against the consumer and expose the operator to enforcement action by the Competition Authority of Kenya (CAK).
The tax treatment of loyalty point redemptions in Kenya depends on the context in which the redemption occurs, under the Income Tax Act Cap. 470 administered by the Kenya Revenue Authority (KRA). For individual consumer loyalty programmes — such as supermarket points redeemed for groceries — redemptions are generally treated as a commercial discount rather than taxable income, and no withholding tax applies to the individual member. However, where loyalty rewards are accumulated and redeemed in an employment context — for example, business travel points converted to personal benefits by an employee — KRA may treat the redeemed benefit as a taxable fringe benefit under Section 5(2)(b) of the Income Tax Act. Businesses operating coalition loyalty programmes that issue cash-equivalent vouchers or gift cards should seek a private ruling from KRA on the VAT treatment of issued vouchers under the Value Added Tax Act No. 35 of 2013, as KRA's treatment of vouchers has evolved with the digital economy.
No Kenyan statute prescribes a specific minimum notice period for terminating a loyalty programme, but the Consumer Protection Act No. 46 of 2012 requires programme operators to act fairly and not unconscionably towards members who hold accumulated points balances. The Competition Authority of Kenya (CAK) Consumer Protection Guidelines recommend that operators give members sufficient notice to allow redemption of accumulated balances before programme closure — widely understood in practice to mean at least 90 days' advance written notice. Notice should be given through all enrolment-registered channels (email, SMS, and website posting). Members who have accumulated points should be provided with a final redemption window after the termination announcement. Where the loyalty programme operator becomes insolvent and enters administration under the Insolvency Act No. 18 of 2015, accumulated points may rank as unsecured liabilities of the operator, and members may have a claim in the liquidation as unsecured creditors for the cash value of unredeemed points.
This template is provided for informational purposes only and does not constitute legal advice. Laws vary by jurisdiction and change over time. Consult a qualified attorney for advice specific to your situation.Full disclaimer
Found an error? Let us knowRelated Documents
You may also find these documents useful:
Cookie Policy (Kenya)
A Kenya Cookie Policy disclosing the types of cookies used on a website, the purposes for their use, and users' rights under the Data Protection Act No. 24 of 2019, enforceable by the Office of the Data Protection Commissioner (ODPC).
Data Processing Agreement (Kenya)
A Kenya Data Processing Agreement between a data controller and data processor, compliant with the Data Protection Act No. 24 of 2019 s.45 and the Data Protection (General) Regulations 2021.
Acceptable Use Policy (Kenya)
A Kenya Acceptable Use Policy governing employee and user access to organisational IT systems, networks, and data, compliant with the Computer Misuse and Cybercrimes Act No. 5 of 2018 and the Data Protection Act No. 24 of 2019.
Advertising Agreement (Kenya)
A Kenya Advertising Agreement setting out terms for advertising services, placement, payment, and IP ownership, governed by the Law of Contract Act Cap. 23 and the Consumer Protection Act No. 46 of 2012.
Confidentiality Agreement (Kenya)
A Kenya Confidentiality Agreement (mutual or one-way) protecting trade secrets, business information, and personal data, compliant with the Law of Contract Act Cap. 23 and the Data Protection Act No. 24 of 2019.